Infosecurity News
Card spending research reveals UK electronic fraud hotspots
Research by the 3rd Man, an electronic fraud and security specialist, has uncovered some interesting statistics about cardholder-not-present transactions, as well as fraudulent mail order plus online card purchases in the UK.
Delphi programming tool hit by virus
A ‘proof of concept’ virus called Win32/Induc.A is causing problems for programmers – including malware writers, according to this month’s ESET ThreatSense Report.
O2 and Plusnet respond to potential XSS modem security issues
O2 - as well as BT subsidiary internet service provider Plusnet - have both responded to a potential XSS security flaw identified in the Thomson TG565 and TG565n wireless broadband routers they issue to their internet users.
Bloxx warns on anonymous proxies
Bloxx, a web filtering firm, has issued a warning that anonymous proxies - which are now being used by students to bypass campus blocks on inappropriate content - pose a serious information security threat to young people.
Cross-site scripting (XSS) security problem hits broadband routers
The problem of cross-site scripting (XSS) security flaws - which have affected hundreds of websites this year - has spread to broadband routers, as a security researcher claims that the Thomson wireless box III supplied by O2 leaves internet users "wide open" to the issue.
Toll-free PBX hack highlights need for code auditing
Reports that a North Carolina business has been left with a US$2500 phone bill after phone phreakers hacked its PBX via the firm's toll-free number shows the danger of failing to audit all aspects of a systems' software, said Fortify, the application vulnerability specialist.
Learn about how to keep security and IT ready for a pandemic
With the recent scares about the swine flu, more and more businesses feel the need to plan for a pandemic, but are their security and IT up to the challenge?
Council left with £500 000 bill from virus infected memory stick
Ealing Council's computer system was crippled by a virus after an infected memory stick was plugged into the IT resource. The council has been landed with a £500 000 bill to clean up the security mess that has resulted.
Eight million chip and PIN users at risk of ID fraud
Research carried out by LV (formerly Liverpool & Victoria) Home Insurance claims that, over the last 12 months, eight million adults in the UK have given their cards - plus their PIN details - to someone else to make a purchase on their behalf or get cash from an ATM leaving the vulnerable to ID fraud.
US could get slower broadband than the UK
The US could end up with slower broadband speeds than the UK if the Federal Communications Commission (FCC) accepts submissions on the definition of broadband from US internet service providers (ISPs).
Windows Mobile refresh to launch in October
Microsoft will launch the latest version of its operating system for mobile devices next month.
Home Office denies CRB plans to store fingerprints
The Home Office has denied that the Criminal Records Bureau (CRB) will set up a database to collect and store the fingerprints of people who apply to work with children and vulnerable people.
Weekly brief – September 1, 2009
In this week’s information security news: Trojan eavesdrops on Skype; Snow Leopard only recognizes two Trojans; private messages are sent to wrong recipients; search warrants are needed for digital data; and more…
Google patches two serious flaws in Chrome
Google has patched two serious security holes in its Javascript and XML engines, according to a blog post on the Google Chrome website.
Twitter and Facebook – a gift to criminals
Posting your address and then updates about when you are going on holiday onto social networking sites such as Twitter and Facebook is a gift to potential burglars, and a headache for insurers.
US Civil Liberties Union tells UK to defend McKinnon
The American Civil Liberties Union has called on the UK foreign secretary to review the "lopsided" extradition treaty to prevent people like UFO hacker Gary McKinnon being "unfairly" removed from their home country to stand trial abroad.

PandaLabs ranks most dangerous computer viruses of last 20 years
PandaLabs has ranked the most dangerous computer threats in the form of viruses of the last 20 years, coinciding with Panda Security’s 20th anniversary.
UK to share fingerprint data with other countries
The UK is to share fingerprint information with Canada and Australia, with the US and New Zealand to follow soon, the Home Office said today.
DWP does not keep track of CIS security breaches
The Department for Work and Pensions (DWP) has admitted that it does not keep a running total of security breaches committed on its sensitive Customer Information System (CIS) database, prompting accusations that it is not taking adequate steps to protect personal data from intruders.
US largest card incident hacker has track record says Miami Herald
As the fall-out in the Albert Gonzalez credit card hacking case - in which the card hacker was charged earlier this week with gaining unauthorized access to 130 million people's card details from major merchants - continues, the Miami Herald has published an interesting profile of the person that many are calling a super-hacker.



