Infosecurity News
PayPal researcher proposes technique to thwart clickjacking attacks
Researcher Brad Hill with PayPal argues that a combination of a randomized user interface (UI) and a backend screenshot comparison tool could put an end to clickjacking attacks.
Industry group unveils voluntary principles to combat botnets
At a White House event today designed to draw attention to the problem of botnets, the Industry Botnet Group (IBG) unveiled a set of principles to combat their proliferation.
Massachusetts hospital to pay $750,000 for 2010 data breach
South Shore Hospital in South Weymouth, Mass., has agreed to pay $750,000 to settle charges brought by the state Attorney General Martha Coakley for a 2010 data breach that exposed personal information on more than 800,000 people.
Flaming Hack: What does 'Flame' mean for the rest of us?
We’ve all heard about Flame, the ‘mother of all cyberweapons’, the attack tool that takes cyberwarfare to a new level. But what does it actually mean for the rest of us?
Neelie Kroes Promises champagne connection - for the wealthy
Neelie Kroes, European Commissioner for the Digital Agenda, has promised a champagne connection for those who can afford it.
Assange’s appeal fails: extradition lawful – everything left to play for
By a majority of 5 to 2 (Lord Mance and Lady Hale dissented) the UK supreme court has this morning ruled that Julian Assange’s extradition to Sweden is lawful, “and his appeal against extradition is accordingly dismissed.” Assange was not present in court.
Kratos gets $16 million cybersecurity contract for US Antarctic Program
Kratos Defense and Security Solutions said it received a $16 million subcontract from Lockheed Martin to provide cybersecurity for the US Antarctic Program (USAP).
University of Nebraska probes breach of 650,000 records
The University of Nebraska has assembled a team of between 20 and 30 investigators to probe the breach of a database that contains personal information on up to 650,000 students, alumni, parents, and staff.
Flame proves cyberwarfare is active
Cyberwarfare is an emotive and contentious issue. But the emergence of an extensive and sophisticated attack toolkit, Flame, apparently targeted against Iran removes all doubt: cyberwar is here and active.
iOS 5.5.1 jailbreak done; iOS 6 jailbreak pending
On Friday, the iOS 5.5.1 untethered jailbreak, Absinthe 2, was released. Now the same team is already working on a jailbreak for iOS6. But users should consider this: you’re on your own if you jailbreak.
Security: do as I say, not as I do
While the role of the CISO is increasingly recognized – usually reporting directly to the board and sometimes sitting on the board – the problems it faces is highlighted by a new Cryptzone survey: security policy doesn’t apply to senior management.
US lawmakers look to reopen Google Street View probe
Two US lawmakers are asking the Justice Department to reopen its investigation into Google’s collection of data from unprotected WiFi networks for its Google Maps Street View project.
TheWikiBoat’s OpNewSon fires today
TheWikiBoat, a new hacking group that uses techniques and tools similar to Anonymous, but for the lulz rather than the principle, plans to launch its first major operation, #OpNewSon, today.
Iranian students claim to have stolen info on NASA researchers
A group of Iranian students are saying that they stole personal information on researchers at the US space agency.
Boston hospital loses laptop with patients' personal data
Boston Children’s Hospital admitted this week that 2,159 patients may have had their personal information compromised as the result of a lost laptop.
Most businesses unaware of tough Canadian anti-spam law
A surprising 60% of US and Canadian marketing executives are unaware that Canada has an anti-spam law that contains fines of up to $10 million per offense and applies to any firm that sends communications to or from Canada.
Al Qaeda video calls on followers to wage 'electronic jihad' against the US
The US Senate's Homeland Security and Government Affairs Committee is warning that an Al Qaeda video calling for the “covert Mujahidin” to commit “electronic jihad” against the US demonstrates the urgency of enacting cybersecurity legislation.
Hacker group steals half million client records from billing firm
The hacker group UGNazi was able to infiltrate the billing system database of WHMCS, a billing and customer support provider, and steal 500,000 client records, including credit card details.
Monday Mail Mayhem: Anonymous dumps 1.7GB from the DoJ
Monday Mail Mayhem was this week launched by Anonymous starting with the Pirate Bay dump of a 1.7GB database stolen from the Department of Justice, and the release of the traditional Anonymous video announcement.
Diablo III gaming accounts hacked, servers taken offline
Blizzard Entertainment’s newly launched Diablo III video game was hacked within a few days of its launch, and servers in Europe were taken offline for four hours on Sunday.
