Infosecurity News
US calls for international collaboration on transnational crime and cybercrimes
The Obama adminstration has unveiled plans to tackle various forms of transnational organized crime, including cybercrime and the theft of intellectual property.
Companies should go beyond PCI DSS compliance, says Layer 7
Companies need to go beyond compliance with Payment Card Industry Data Security Standards (PCI DSS) to ensure credit card safety, according to Phil Walston, vice president of development and product management at Layer 7 Technologies.
Sony insurer asks court to bow out of paying data breach claims
Zurich American Insurance Co., which is one of Sony’s insurers, is asking a New York state court to rule that the insurer does not have to pay Sony for class-action lawsuit claims related to its massive data breach.
Cold-calling virus scam costs New Zealanders dearly
The New Zealand Department of Consumer Affairs (DCA) has revealed that a call-calling telephony scam may have affected around 30% of adults in the country, costing many of them around NZ$200 a time.
Oracle issues substantial critical patch update with 78 security fixes
Oracle is fixing 78 security flaws across scores of its product in its latest critical patch update (CPU).
India blocks file storage websites to combat online piracy after inking cybersecurity deal with US
India's telecoms authorities are blocking widely used file storage websites such as Megaupload, Rapidshare, Mediafire and Putlocker, according to reports on several user forums.
Sophos reports virus author jailed for cartoon octopus malware
Graham Cluley, senior technology consultant with Sophos, has reported that a 28-year-old Japanese virus writer has been given a 30 month prison sentence for authoring and disseminating a data-damaging virus.
Alleged Laval botnet creator arrested in Canada
The alleged author of the Laval botnet has been arrested by police in Canada. It is thought that the 24-year-old programmed the malware himself and then infected servers in Canada, the US and beyond, creating a vast network of zombie PCs.
Police swoop on hacktivists in the US, UK and Netherlands
Police and law enforcement officials have swooped on and arrested more than 20 people in the US, the UK and the Netherlands in connection with the spate of LulzSec and AntiSec hacktivist attacks in recent months.
Former Harvard student charged with hacking into MIT network
Federal prosecutors are charging a former Harvard University student with hacking into a Massachusetts Institute of Technology (MIT) computer network and stealing 4.8 million academic journal articles.
FBI charges 16 in connection with cyber attacks
The FBI announced the arrest of 16 people, at least 14 of whom were allegedly part of the ‘Anonymous’ hacker group. The charges relate to the recent cyber attacks on PayPal and AT&T.
Boston hospital admits to data breach affecting more than 2,000 patients
Beth Israel Deaconness Medical Center (BIDMC) in Boston is notifying more 2,000 patients that personal information was stolen from a hospital computer due to a security lapse by a computer service vendor.
Social networking friend bulk-buying practices revealed
It seems that the pervasively popular nature of social networking sites like Facebook and Twitter are not all they might seem, as a security researcher has revealed how easy - and cheap - it is to use third party companies to gain large followings on the services.
iPhones and Galaxy Tabs banned from Saudi security establishments
The Saudi Ministry of the Interior has banned the use of certain high-definition camera-equipped smartphones and tablets from its security establishments, arguing that the devices are easy to hack and be remotely subverted.
Hackers infiltrate German police and customs service computers
Hackers were able to infiltrate computers at the German federal police and customs service and remain there for months without being detected, according to a German newspaper.
UK counter-terror report confirms extremists are early adopters of technology
The latest report on the UK's Counter Terror strategy says that extremist groups such as al-Qaeda are early adopters of technology in their bid to wage war on governments and their citizens.
PCI DSS broadens appeal beyond credit card data security
The PCI Data Security Standard (DSS), originally developed to protect credit card data, can be used to vet cloud providers for data security practices, as well as provide a template for compliance with information security laws, noted Sean Bruton, senior director of client services and security with managed hosting services provider NeoSpire.
EU seeks public comment on personal data breach notification rules
The European Commission has opened a public consultation on expanding, standardizing, and clarifying personal data breach notification requirements for European businesses.
Signify moves 2FA onto Android smartphones and tablets
Signify has enabled its software token two-factor authentication (2FA) service as an Android app, making the company one of the first to extend 2FA to the Google smartphone platform. The Android app joins similar apps available for the BlackBerry, iPhone and iPad platforms.
Symantec researcher warns on Apple MobileMe/iDisk phish
A Symantec researcher is reporting a large phish taking place surrounding Apple's new iDisk cloud service, with recipients being routed to a rogue MobileMe/iDisk login page - located on a free web hosting service - in a bid to extract their login credentials.
