Infosecurity News
How to get a Google Reward – go public
A loophole in Google Apps was remarkably simple, found by Indian blogger Saket Jajodia, and reported to and rapidly closed by Google. But getting recognition for the discovery was less easy.
Fog Computing; or catching the insider the DARPA way
The insider threat is generally acknowledged to be a serious threat to data security. For companies it can lead to the loss of IP; for governments, the loss of state secrets. Fog Computing is a new approach to detecting and preventing that threat.
Android Malware Samples Predicted at 250,000 for 2012
Trend Micro has provided details on the Android threat: the volume of malware; the types of malware; specific families and what they do.
New variant of the police scareware virus emerges
The police virus continues to evolve, from scareware to ransomware – and a new version that can be described as very scary ware.
Protecting US secrets costs taxpayers big bucks
The cost to protect US government secrets reached more than $11 billion in fiscal year (FY) 2011, up 12% from FY 2010 and more than double the cost in FY 2001, according to a report by the National Archives.
Defense organizations to ramp up cybersecurity spending
Global defense organizations are expected to increase their cybersecurity budgets by an average of 6% over the next 12 months, according to a report by ICD Research and Strategic Defence Intelligence.
Indian Navy secrets stolen and sent to China
Computers in India’s primary eastern seafront naval establishment at Visakhapatnam were reportedly infected with spyware that sent classified information to IP addresses in China.
Big Data can cause big headaches for infosec professionals
Along with the benefits that can be gained from Big Data come attendant security risks, notes Savvis' Ed Moyle.
Windows 8 has larger attack surface than Windows 7, researcher warns
The attack surface in Windows 8 is bigger than in Windows 7 because of new components and changed processes, especially with the Metro interface, warns a McAfee researcher.
Win32/Gataka: a new banking trojan readies itself
As if there aren't already enough banking trojans to worry about, with SpyEye and Zeus, Carberp and OddJob, ESET is now warning that Gataka (aka Tatanga) – another man-in-the-browser trojan – appears ready for take-off.
Atomic clocks and earth rotation cause major outages
Several major systems reported outages this weekend. Some, such as Pinterest, Netflix and Instagram, were caused when lightning took out Amazon’s servers in Virgina. Others were caused by the more mundane and predictable Leap Second.
Baby Boomers more savvy about computer security that digital natives
Despite growing up in the computer age, Gen Y is less savvy about computer security than the Baby Boom generation, according to a survey by Check Point.
US, Canada agree to crossborder privacy principles
The US and Canada released a 12-point statement on privacy principles on Thursday, which provides common rules for crossborder sharing of personal information.
‘Graduated response’ returns to Ireland
An agreement between four music companies and Eircom (Ireland’s principle telecommunications provider) for a graduated response potentially leading to the disconnection of copyright infringing subscribers, is to be reinstated.
US professor demonstrates the ease with which civilian drones could be hijacked
In a test conducted above an Austin stadium, a civilian drone was first hijacked and then brought down using equipment that costs little more than an iPad.
Researcher finds security flaw in KeePass password manager
An independent researcher said he has found a security hole in the KeePass password manager that could enable a hacker to gain remote access to unencrypted user passwords.
McAfee Names Most Dangerous Football Team in Europe
Euro 2012, unsurprisingly, has attracted scammers and spammers. Using its SiteAdvisor system, McAfee has produced its most dangerous football team: the footballers' names that a search engine is most likely to lead you to a malicious or compromised website.
99% of attacks could be stopped by patching
“Malware authors love to use holes in 3rd party software”, comments Intego’s Lisa Myers. From their perspective, “the best thing about 3rd party software vulnerabilities is that people are very slow to patch them.”
Operation High Roller targets Mr. Moneybags using the cloud
A new report from McAfee and Guardian Analytics describes a new breed of sophisticated fraud attacks, called Operation High Roller, that target high-value bank accounts and transactions using cloud-based servers with multifaceted automation.
Researchers say they have cracked security tokens
A group of researchers are claiming that they have successfully exploited cryptographic flaws in security tokens that enable attackers to extract keys from them
