Infosecurity News
BSI updates standards for information security auditing
The British Standards Institution (BSI) has recently updated its standards for information security auditing, BSI officials told Infosecurity.
Web inventor says UK government's snooping bill is dangerous
The UK government's plans to allow security and police services to spy on e-mails, phone calls and internet browsing habits are dangerous, according to World Wide Web inventor, Sir Tim Berners-Lee.
New trojan attacks the hotel rather than the guests
Trusteer has discovered spyware being sold in underground forums for $280. It targets hospitality PoS applications.
Google warns 20,000 webmasters about ‘weird redirects’ to malicious sites
Google is warning around 20,000 webmasters that their sites may be compromised and are carrying out “weird redirects” to malicious sites.
PwC 2012 Information Security Breaches Survey: Preliminary findings report continued mobile insecurity
New statistics show that while many companies appear to understand the business threat from BYOD, many others are taking no precautions whatsoever.
(ISC)² launches its new EMEA advisory board
In a move designed to offer genuine hands-on security experience to EMEA’s different security initiatives, professional body (ISC)² has launched a new Advisory Board for Europe, the Middle East and Africa (EAB).
Scammers target Verizon Wireless customers after AT&T attacks
Spammers have their sites on Verizon Wireless customers after targeting those of AT&T Wireless earlier this month.
McAfee sheds light on the Darkmegi kernel rootkit
Darkmegi, malware that uses a kernel rootkit component to infect computers, has begun exploiting a flaw in Java to conduct drive-by attacks, according to McAfee Labs.
Iranian software manager hacks and dumps card details of 3m Iranians
Khosrow Zarefarid found and reported a flaw in the Iranian POS system. He reported it, but was ignored – so he used it and hacked 3 million Iranian debit card details.
Dutch Pirate Party forced to take its Pirate Bay proxy off-line
In a move that will be monitored by the UK’s music industry association (BPI), its Dutch equivalent BREIN (translates as ‘Brain’) has obtained a court injunction forcing the political party, the Pirate Party, to take down the proxy site that was allowing users to continue using the blocked Pirate Bay (TPB).
Los Alamos subjected to ‘maelstrom’ of simulated cyberattacks
Los Alamos National Laboratory, the government lab responsible for the security of the US nuclear stockpile, recently conducted a vigorous cyber exercise involving more 100 participants from a number of federal agencies.
Tunisian government to beef up security after cyberattacks
After suffering a series of cyberattacks, the interim Tunisian government is taking steps to solidify the security of government email accounts and websites.
Boston police release unredacted Facebook data of ‘Craigslist killer’
The complete Facebook account of Philip Markoff, in hard copy and including friend IDs, was given by the Boston Police to the Boston Phoenix newspaper.
City trader fined £450,000 by the FSA
“For the reasons given in this Notice...”, says an FSA Decision Notice, "...the FSA has decided to impose on Mr Ian Charles Hannam a financial penalty of £450,000.”
Dirt Jumper DDoS bot family has over 300 varieties
The Dirt Jumper distributed denial of service (DDoS) bot family has evolved into over 300 varieties of bot packages, explained Curt Wilson of Arbor Networks.
ISO issues interorganizational communication security standards
The International Organization for Standardization (ISO) has published new standards for interorganizational and intersector communications, including data exchanges for critical infrastructure.
US to fast-track cyber weapon development
The US plans to fast-track the development of cyber weapons to give it the ability to create the means to attack specific targets within months, and even days.
Zero-day security hole in BackTrack Linux uncovered by student
A zero-day security flaw has been identified in the latest version of BackTrack Linux, a version used by security professionals for penetration testing. The vulnerability was discovered by a student in the InfoSec Institute’s ethical hacking class.
ISACA issues latest version of COBIT infosec governance framework
ISACA, the not-for-profit IT security association, has issued COBIT 5, the latest version of its IT security reference guide.
Smartphones are still firmly 'enterprise-unready'
Research from by Altimeter Group, Bloor Research and Trend Micro shows that the ‘consumer marketing’ legacy of many smartphones makes them ill-equipped to meet enterprise security demands.
