Infosecurity News
Software-related medical device recalls raise security, privacy concerns
Close to 15% of medical device recalls by the US Food and Drug Administration (FDA) between January 2009 and May 2011 involved software problems, which could pose privacy risks to patient data, according to a study funded by the US Department of Health and Human Services.
Siemens patches security flaws in SCADA systems
Siemens has patched a number of security holes in its SIMATIC supervisory control and data acquisition (SCADA) systems, according to the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT).
EU reaches agreement with Google over competition issues
European Union (EU) regulators have a reached an “understanding” with Google over concerns about anti-competitive behavior on the part of the search engine giant.
Black Hat 2012: ModSecurity open-source firewall now supports Apache, IIS and Nginx
The free open-source web application firewall known as ModSecurity – once just an Apache plug-in – now also plugs directly into IIS and Nginx web servers, and is particularly good for virtual patching.
Financial malware uses Facebook for new children’s charity scam
Earlier in May it was found that Citadel was delivering the Reveton ransomware. Now Trusteer has discovered it delivering a children’s charity scam to Facebook users.
New Mac trojan discovered: OSX Crisis (or Morcut)
Mac security firm Intego was the first to sound the alarm yesterday, calling the newly discovered trojan Backdoor:OSX/Crisis. Today Sophos issues its own warning about OSX/Morcut.A – which seems to be the same malware.
FTC warns unauthorized wireless charges becoming a significant problem
The US Federal Trade Commission (FTC) is warning that unauthorized charges on wireless phone bills, known as “cramming”, are becoming an increasingly serious problem for US consumers.
Boston hospital loses laptop with patients' personal information
A physician’s unencrypted personal laptop that may have contained protected health information on 3,900 patients at Boston-based Beth Israel Deaconness Medical Center was stolen, the hospital admitted Monday.
Latest report shows India now ahead of the US in email spam volume
The latest 'Dirty Dozen' spam-relaying countries report from Sophos shows that Asia in general, and India in particular, is now responsible for the greatest volume of the world’s spam.
Pinterest locks down accounts to stem hacking
The social sharing site Pinterest has begun temporarily locking down accounts in an effort to combat an increase in suspected hacking on the site.
More than 100 infected PCs found in Japan’s Finance Ministry
The Japanese Finance Ministry announced on Friday that it had discovered 123 desktop computers that had been infected with a remote access trojan between January 2010 and November 2011.
Growing concern over what Microsoft may be doing with Skype
Following the first ever loss reported by Microsoft last week – largely blamed on the purchase of aQuantive in 2007 – it is the purchase of Skype for $8.5 billion in 2011 that is most concerning security folks.
Nearly 70,000 mobile phones will be lost or stolen during the London Olympics
Venafi has been extrapolating statistics from mobile phone loss – and expects the equivalent of 200 million books full of data will be lost during the course of the London Olympics.
Group claims credit for hack into Yale's network
The group NullCrew has claimed that it hacked into Yale University’s network and stole user names, passwords, social security numbers, addresses, and phone numbers of 1,200 students and staff.
Police close the investigation into ClimateGate
Nearly three years ago, computers at the University of East Anglia were breached and thousands of confidential scientific documents, many skeptical that climate change is man-made, were stolen and subsequently leaked. The incident became known as ClimateGate.
A cyber terrorist ate my hamster
Space Rogue is a graduate of L0pht Heavy Industries - one of the original and best of the old-school hacking groups. He knows a bit about hacking, hacking events – and those that never happened.
Smart grid cybersecurity gaps stem from industry failings, government disputes
The electricity industry has failed to consistently include cybersecurity features in the deployment of smart grid systems, and jurisdictional disputes have stymied government action, judged the US Government Accountability Office (GAO).
Online gamers targeted by phishers
Researchers have discovered new phishing campaigns targeted against online gamers: Trend Micro citing WOW: Mists of Pandaria, and GFI Software citing Star Wars: The Old Republic.
Researchers criticize Tridium for being 'unresponsive' to security issues
Billy Rios and Terry McCorkle, the researchers who worked with the Washington Post to uncover security gaps in Tridium’s Niagara Framework, said that Tridium has been “unresponsive” to fixing the flaws.
Cisco buys Virtuata, a California-based virtual security firm
Cisco announced yesterday that it had completed the acquisition of a little known privately held company that develops security for cloud and virtualized environments.
