Infosecurity News
FireEye adds six new executives to its leadership team
California-based cybersecurity specialist FireEye has added six new members to its global leadership team, the firm recently announced
Adobe patches four exploited ColdFusion flaws
In its own Microsoft-synchronized Patch Tuesday this month, Adobe merely issued an advisory on four known and exploited flaws in ColdFusion. Yesterday it patched them.
BC healthcare breach affects 5 million Canadians
Health data for more than five million British Columbians over the course of at least three incidents has been handled improperly by the Ministry of Health in its dealings with university researchers and contractors, violating the regulations for encryption required by law. The BC provincial government plans to notify more than 38,000 individuals of the breaches by letter.
90% of passwords can be cracked in seconds
More than 90% of user-generated passwords can be made vulnerable to hacking in a matter of seconds, according to new research from Deloitte.
Sixty percent will fall to a phishing attack that might herald an APT
The type of attack known generally as an advanced persistent attack (APT) is typically highly targeted and advanced; that is, it is aimed at one company (or a small group of companies), and will likely use one or more zero-day exploits.
John McAfee turns up in Oregon to work on autobiography
Anti-virus security pioneer John McAfee has packed up and moved to Oregon, after months of erratic behavior and intrigue in Central America. His goal is to tell his life story through a series of media projects.
Red October cyber-espionage campaign targeted high-level government entities for 5 years
A high-level cyber-espionage campaign has successfully infiltrated computer networks at diplomatic, governmental and scientific research organizations across the globe over the course of the last five years, security researchers say.
Websense appoints new CEO
Unified information security technology vendor Websense has named John McCormack as its new chief executive following the announced retirement of former CEO Gene Hodges
Reddit co-founder dies from apparent suicide
Aaron Swartz was found by his girlfriend Taren Stinebrickner-Kauffman hanging by his own belt in their Brooklyn apartment last Friday. On Saturday the New York medical examiner’s office ruled death by suicide.
Fake Google Chrome updates unleash banking trojan
A ploy targeting consumers with bogus Google Chrome browser updates is spreading Zeus-like banking malware to unsuspecting web surfers.
Global Payments breach cost the company $93.9 million – so far
Global Payments, which has never been particularly forthcoming over the loss of 1.5 million card details (it could have been more) in 2012 (it could have been earlier) has now disclosed associated costs of $93.9 million – but it will be more.
99% of mobile malware targets Android
The fact that Android malware is an escalating issue comes as no surprise, but a recent analysis of its sheer 'market share' of the mobile malware universe is noteworthy.
iOS app bait-and-switch scams made harder by Apple
Bait-and-switch is a tried and tested scam used in many forms of retail. In the app world it involves tricking users into believing they are buying something ‘good’ while in reality they are buying something bad.
UK cyber-hygiene in need of a good scrub up
Coinciding with the publication of yesterday’s highly critical Defence Select Committee report on the state of cyber security in the military, Major General Shaw points the finger at the public.
FBI warns of renewed fake American Airlines email attack
The FBI has warned that new malware is making the rounds, embedded within faux emails from American Airlines claiming to send order confirmations.
Virtustream teams up with Vormetric on cloud-based encryption
Cloud-based software firm Virtustream has partnered with enterprise encryption specialist Vormetric to add database encryption and key management to its xStream cloud solution for enterprise compliance requirements
88% of businesses think they're safe from cyber attack
Overconfidence is apparently endemic when it comes to a sense of cybersecurity: a new study from Deloitte shows that 88% of companies surveyed don’t think they are vulnerable to an external cyber threat, and half don’t have a documented plan in place in the event of one.
Adobe’s patches for January 2013
Adobe has released security updates for Adobe Reader and Adobe Flash Player, and has re-issued its ColdFusion advisory. The Reader update covers 26 vulnerabilities while the Flash update covers a critical vulnerability.
Cisco VoIP phones can be turned into "listening posts"
US security researchers have discovered vulnerabilities in Voice over IP (VoIP) phones from Cisco and other manufacturers that leave them wide-open to phone-tapping and remote listening – and have proposed a new defense, dubbed Software Symbiotes.
Romanian hacker sentenced in multimillion-dollar Subway heist
Justice for the $5 Foot-Long continues: In the wake of a multimillion-dollar credit-card hacking effort that targeted Subway sandwich shops in the US, one of its central figures has been sentenced in New Hampshire.
