Infosecurity News
Sixty percent will fall to a phishing attack that might herald an APT
The type of attack known generally as an advanced persistent attack (APT) is typically highly targeted and advanced; that is, it is aimed at one company (or a small group of companies), and will likely use one or more zero-day exploits.
John McAfee turns up in Oregon to work on autobiography
Anti-virus security pioneer John McAfee has packed up and moved to Oregon, after months of erratic behavior and intrigue in Central America. His goal is to tell his life story through a series of media projects.
Red October cyber-espionage campaign targeted high-level government entities for 5 years
A high-level cyber-espionage campaign has successfully infiltrated computer networks at diplomatic, governmental and scientific research organizations across the globe over the course of the last five years, security researchers say.
Websense appoints new CEO
Unified information security technology vendor Websense has named John McCormack as its new chief executive following the announced retirement of former CEO Gene Hodges
Reddit co-founder dies from apparent suicide
Aaron Swartz was found by his girlfriend Taren Stinebrickner-Kauffman hanging by his own belt in their Brooklyn apartment last Friday. On Saturday the New York medical examiner’s office ruled death by suicide.
Fake Google Chrome updates unleash banking trojan
A ploy targeting consumers with bogus Google Chrome browser updates is spreading Zeus-like banking malware to unsuspecting web surfers.
Global Payments breach cost the company $93.9 million – so far
Global Payments, which has never been particularly forthcoming over the loss of 1.5 million card details (it could have been more) in 2012 (it could have been earlier) has now disclosed associated costs of $93.9 million – but it will be more.
99% of mobile malware targets Android
The fact that Android malware is an escalating issue comes as no surprise, but a recent analysis of its sheer 'market share' of the mobile malware universe is noteworthy.
iOS app bait-and-switch scams made harder by Apple
Bait-and-switch is a tried and tested scam used in many forms of retail. In the app world it involves tricking users into believing they are buying something ‘good’ while in reality they are buying something bad.
UK cyber-hygiene in need of a good scrub up
Coinciding with the publication of yesterday’s highly critical Defence Select Committee report on the state of cyber security in the military, Major General Shaw points the finger at the public.
FBI warns of renewed fake American Airlines email attack
The FBI has warned that new malware is making the rounds, embedded within faux emails from American Airlines claiming to send order confirmations.
88% of businesses think they're safe from cyber attack
Overconfidence is apparently endemic when it comes to a sense of cybersecurity: a new study from Deloitte shows that 88% of companies surveyed don’t think they are vulnerable to an external cyber threat, and half don’t have a documented plan in place in the event of one.
Virtustream teams up with Vormetric on cloud-based encryption
Cloud-based software firm Virtustream has partnered with enterprise encryption specialist Vormetric to add database encryption and key management to its xStream cloud solution for enterprise compliance requirements
Adobe’s patches for January 2013
Adobe has released security updates for Adobe Reader and Adobe Flash Player, and has re-issued its ColdFusion advisory. The Reader update covers 26 vulnerabilities while the Flash update covers a critical vulnerability.
Cisco VoIP phones can be turned into "listening posts"
US security researchers have discovered vulnerabilities in Voice over IP (VoIP) phones from Cisco and other manufacturers that leave them wide-open to phone-tapping and remote listening – and have proposed a new defense, dubbed Software Symbiotes.
Romanian hacker sentenced in multimillion-dollar Subway heist
Justice for the $5 Foot-Long continues: In the wake of a multimillion-dollar credit-card hacking effort that targeted Subway sandwich shops in the US, one of its central figures has been sentenced in New Hampshire.
Poor programming, app design bolster data breaches
With data breaches on the rise and the costs stemming from them escalating exponentially, human error is often the culprit. But there’s a deeper issue: poor application design and faulty programming are all too common.
Tyler – an overview, and interview with Anonymous
Tyler is touted as ‘WikiLeaks on steroids.’ The current site (codenametyler.org) is unimpressive – so Infosecurity reached out to Anonymous for an update on its development.
Chinese national pleads guilty to role in $100 million software piracy scheme
Xiang Li yesterday pleaded guilty to two federal charges relating to the sale of ‘cracked’ sophisticated software sometimes at less than 1/1000th of its retail price. Sentencing is scheduled for May 3.
John McAfee claims Belize is helping terrorists enter the US
Security pioneer John McAfee is back in the headlines with a claim that he organized a shadowy group of personal espionage operatives and marshaled keylogging spyware to collect data on top government officials and other powerful people in his adopted home of Belize. As a result, McAfee said he has evidence that Belize is helping Middle Eastern would-be terrorists enter the US with fake identities.
