Infosecurity News
Indian authorities taking no chances with cybercafe users
The anonymity of cybercafe users in India is being severely curtailed, in a bid to stamp out illegal, fraudulent and terrorist usage of this popular method of gaining internet access.
Aussie bank customers hit by advanced phishing techniques
Customers of the Commonwealth Bank in Australia are being targeted by a new breed of phishers, who seem intent on scamming them out of their e-banking and payment card details.
Unencrypted laptop with 109 000 records on pension schemes members stolen
An unencrypted laptop containing details on 109 000 pension schemes members with UK pension funds service provider, The Pensions Trust, has been stolen from a third-party office in Marlow, Buckinghamshire.
Guide to handling personal data launched by BCS and ISAF
The British Computer Society (BCS) has linked up with the Information Security Awareness Forum (ISAF) to launch a professional code of best practice when handling personal data.
ENISA evaluates network resilience of MPLS, IPv6 and DNSSEC
The European Network and Information Security Agency (ENISA) has released two reports on how and if Multi Protocol Label Switching (MPLS), Internet Protocol version 6 (IPv6) and Domain Name System Security Extensions (DNSSEC) could improve the resilience of communication networks.
Twitter worm steals user details
A worm on Twitter is tricking users into giving up their user details at the same time as redirecting victims to a dating website where the aggregate number of views result in affiliate revenue.
Google indexes details on thousands of credit and debit cardholders
Police in Victoria, Australia are investigating a potentially major security incident in which the stolen personal details of thousands of credit and debit card holders from Australia, Germany and the UK were posted to a blogging site and auto-indexed into the Google search engine.
RAF data loss included sensitive vetting data
The Ministry of Defence (MoD) has omitted information that the theft of hard drives in September 2008 with data on RAF personnel also included highly sensitive RAF vetting records.
Open Group advises on risk management methods
Independent consortium the Open Group is trying to resolve what it sees as confusion about risk management in the industry by publishing a guide to choosing a risk management methodology.
Jericho Forum links with Cloud Security Alliance
Hard on the heels of unveiling Cloud Cube, its four-dimensional best practice model for cloud computing security in April, security industry association the Jericho Forum has linked with the Cloud Security Alliance (CSA), a not-for-profit vendor group.
Anti-malware groups align themselves
Anti-malware efforts took a significant step forward this week with the announcement of an initiative to try and bring legitimate software businesses together and lock out malware writers.
Survey shows information security awareness is high, yet compliance is low
SAI Global’s Benchmarking Survey 2008 finds that 95% of employees believe information security is important, but that there is a lack of knowledge and training surrounding how to identify and report incidents.
£3.9 million bank credit error highlights need for code auditing
A succession of errors - at the programme code development level and human error when inputting the data - are reported to have resulted in a New Zealand couple being credited with NZ$10 million (£3.9 million) rather than a much smaller sum as the proceeds of a bank credit line.
McAfee acquires Solidcore for whitelisting technology
McAfee will acquire Solidcore Systems, a whitelisting specialist, in a US$33m deal which will allow McAfee to integrate Solidcore's technology into its blacklisting malware detection and prevention products, as well as to bolster its high-end corporate IT security offerings.
Gumblar malware attack sweeps web
A modified attack that alters Google searches is taking the web by storm according to security researchers, who have identified more malware domains being used in the attack.
Infosecurity Weekly Brief - May 18 2009
Infections, Intrusions, Protections and Misdirections
Gateshead College opens digital forensics lab
Gateshead College in the UK has opened a digital forensics lab for the training of information security staff to combat cybercrime such as digital fraud.
Paypal registration page vulnerabilities revealed
Methodman, a so-called 'grey hat' hacker specialising in discovering cross-site scripting (XSS) flaws, claims to have uncovered a number of XSS security flaws in various Paypal registration pages.
Software piracy on the rise
Worldwide software piracy is on the rise, according to a study by the Business Software Alliance and analyst firm IDC.
Australian two-factor payment card authentication technology on beta test
A two-factor authentication system - complete with keypad and display - has been successfully integrated into a plastic payment card by Melbourne-based EMUE and is being trialled by MBNA in the UK
