Infosecurity News
Online hotel fraud scamming 71 000 travellers a month
FraudTip, a Web security portal, claims that an internet scam is defrauding around 71 000 travellers every month by the simple expedient of routing internet users to fraudulent versions of popular booking sites.
Kaspersky site hacked over weekend
Anti-malware vendor Kaspersky's site was hacked over the weekend, using an SQL injection attack. While admitting that the site was vulnerable, Kaspersky is denying that the vulnerabiity was critical. The hacker nevertheless listed what he said was the full set of tables from the firm's MySQL database.
$9m lifted in RBS Worldpay ATM heist
The FBI is investigating a $9m large-scale ATM fraud using cards cloned from US card processor RBS Worldpay.
Blind hacker fulfils Sneakers movie role 17 years on
Movies have a funny habit of becoming reality and the 1992 hacker movie Sneakers, starring Robert Redford, is no exception.
Google falls victim to human error
On Saturday, Google users were warned that all their search results were potentially harmful, due to a widespread result of human error.
Companies their own worst enemy says IBM X-Force report
The annual report from IBM's X-Force security operation shows what many IT managers have suspected for some time, namely that Web application vulnerabilities represent the major risk for most organisations.
Google falls victim to human error
On Saturday, Google users were warned that all their search results were potentially harmful, due a widespread result of human error.
Hackers run up $207 000 phone bill for Canadian law firm
If you've had a high company phone bill recently, spare a thought for Martin & Hillyer, a law firm in Burlington, Ontario.
ISACA unveils new IT security business model
ISACA, the Information Systems Audit and Control Association, has developed a new business model for IT security.
Update: McKinnon Wins Permission for Judicial Review
'NASA hacker' Gary McKinnon has won permission from the High Court to apply for a judicial review against his extradition to the United States.
Germany's train IT resources offline due to UPS failure
Here's a lesson in IT contingency planning, courtesy of Deutsche Bahn, the German railway network company, whose IT systems - including station indicator boards, electronic ticketing, self-service counter tickets and Internet pages - all went off line on January 14 due to single UPS failing.
£10 000 bounty placed on DDoS hackers
Overclockers.co.uk (OCUK), an online computer hardware reseller firm, have announced they are placing a bounty of £10 000 on the heads of hackers behind a Distributed Denial of Service (DDoS) attack on their web site earlier in the month.
Update: Lifeline for McKinnon
According to his lawyer, Karen Todner, Gary McKinnon, who may be facing extradition after confessing to hacking into US military computers, was told yesterday that the UK High Court would delay his hearing until the director for public prosecutions had considered the case following McKinnon's diagnosis with Asperger's syndrome; a procedure which is expected to take four weeks.
Government aligns with IISP
The UK government’s Infosec Training Paths and Competencies (ITPC) scheme is to transfer to the Institute of Information Security Professionals (IISP) with effect from 1 April 2009.
New Botnets on the Prowl
Two new botnets have emerged in the past few weeks, and at least one shows signs of being an upgrade to a previous botnet that wreaked havoc in the wild.
Privacy Groups Sue FBI for Activist Raid
The Electronic Frontier Foundation and the American Civil Liberties Union of Northern California are suing the FBI over computer searches conducted at two activist organizations' offices.
One in Four Stalking Victims Targeted Online
Approximately one quarter of stalking or harassment cases in the US include an element of cyberstalking, according to a report from the Bureau of Justice statistics this week.
Hamas, Israel Conflict goes Cyber
The ongoing battle between Israel and Hamas in the Gaza strip is creating a widening online cyber-conflict, according to reports last week. US Government web sites are the latest among hundreds that have reportedly been defaced by activists protesting the war.
Downadup Worm Continues to Spread
More evidence has appeared of the spread of a network work based on the RPC vulnerability that was found in Microsoft Windows in October. The network worm Downadup has failed to gain much traction on the open internet, according to anti-virus firm F-Secure, but is getting into corporate networks on a consistent basis.
Proof of Concept Attack Further Discredits MD5
Researchers put the final nail in the coffin of the MD5 encryption algorithm this week after using 200 PS3 consoles to fake a real-world SSL certificate.
