Infosecurity News

Senators to introduce compromise cybersecurity legislation, with FISMA revisions
A bipartisan group of senators who authored cybersecurity legislation last year plan to introduce a compromise cybersecurity bill that will be examined at a hearing next Thursday.

Bank of America cops to credit card data breach
Bank of America has informed affected credit card customers that their information may have been compromised by a breach at an unidentified merchant.

Texas jury strikes down claim of interactive web patents
A federal jury in Texas has declared invalid patents for interactive web technology claimed by Michael Doyle and his patent holding company Eolas.
Google Wallet vulnerable to brute forcing the PIN
Security researcher Joshua Rubin has published details of his research showing a vulnerability in the Google Wallet near field communication payments system for Android.

Source code for Symantec's pcAnywhere published after failed extortion attempt
A hacker associated with an Anonymous affiliate has released source code for Symantec’s pcAnywhere security software onto the Pirate Bay file-sharing website after an apparent attempt to extort $50,000 from the security vendor.
Cybercrime – another business in the Malspace
The commercialization of cybercrime continues, with Trusteer describing what it calls ‘Factory Outlets’ for the sale of stolen user credentials.
Intrusion upon seclusion protected by Canadian court
With ‘privacy’ such an emotive and complex issue, Canadian companies should note that an action for tort (civil action) for ‘intrusion upon seclusion’ has been recognized by the Ontario Appeal Court.

Anonymous hacks police website in response to Occupy Boston crackdown
The hacktivist group Anonymous apparently gained control over the Boston Police Department's community policing website in retaliation for the police crackdown on the Occupy Boston protests.

Cybersecurity hiring declined in fourth quarter, after record third quarter
The volume of cybersecurity job ads declined in the fourth quarter in the US, compared to a four-year high in the third-quarter of 2011, according to a survey by WANTED Analytics.
Copyrighting pornography; are unsecured WiFi owners to blame?
Two US lawsuits, both involving producers of adult content, raise interesting questions: is the owner of an unsecured WiFi responsible for all downloaded material, and can you copyright pornography?

QuickBooks scam leads victims down a BlackHole
Spammers are targeting QuickBooks users in a tax-related scam that links to a BlackHole exploit kit.

Australia's central bank to bolster its DDoS attack protection
Australia’s central bank is seeking help from information security providers to beef up its protection against distributed denial of service (DDoS) attacks.

Adobe Flash sandbox comes to Firefox on Windows
Adobe has announced the release of a beta version of a Protected Mode (sandboxed) Flash Player for Firefox running on Windows Vista and Windows 7.
Rooting out rootkits: Security software won't help, says Symantec
Rootkits are on the rise and traditional security software will not protect you, warns a Symantec white paper.

Google unveils service to bounce malware from the Android Market
In response to Android’s growing reputation of being a “malware cesspool”, Google has unveiled the Bouncer automated application scanning service to root out malware on the Android Market.

Insecure email the culprit of hacked FBI-Scotland Yard call?
The Anonymous hacktivist group was apparently able to listen in on a conference call between the FBI and Scotland Yard by hacking into a participant’s email account and obtaining the conference call number and access code, according to security analysts.
Adobe addresses PDF security problem
Hackers target the most widely used file formats; and there is none more widely used than PDF. A new paper from Adobe discusses the problems and solutions to PDF security.

Number of patient record data breaches nearly doubled last year
The total number of patient records compromised in the US increased by 97% in 2011 compared with 2010, according to a report released this week by the Redspin consulting firm.
Security researchers break satellite phone encryption
Academics Benedikt Driessen and Ralf Hund from Ruhr University Bochum have reverse-engineered and cracked the GMR-1 and GMR-2 voice ciphers used by many satellite networks.

Apple roars with massive Lion, Snow Leopard security updates
Apple has released massive security updates for its Lion and Snow Leopard Mac operating systems, fixing 52 vulnerabilities.



