Infosecurity News
Justice Department questions Google's FISMA certification claims
The US Department of Justice said in court documents that the Google Apps for Government cloud-based IT suite was not certified under the Federal Information Security Management Act (FISMA), despite claims by Google that it was.
Sony settles code cracking legal spat with George Hotz
Sony Computer Entertainment America has settled its PS3-related legal spat with the infamous code cracker George Hotz. Also known as Geohot, Hotz is well known for being the first person to jailbreak the Apple iPhone in his mid-teens.
Barracuda Networks website hit by SQL injection attack
Barracuda Networks has become the latest IT security vendor to be hit by an SQL injection attack, but the company has moved swiftly to mitigate the fallout from the attack, as well as confirming that all active passwords for applications remain secure.
ATM hacks: can you trust external cash machines any more?
It looks like cybercriminals have moved their ATM skimming game to its logical conclusion and developed wireless plus miniaturised cash machine add-ons that are indistinguishable from the real thing.
ICO finds NHS Liverpool Community Health breached Data Protection Act
The medical history of 31 children and their mothers was lost by NHS Liverpool Community Health during a premises move in October last year.
iPhone keylogging hackware arrives
The first Apple iPhone keylogging 'utility' has reportedly arrived in the security industry. Ostensibly for legitimate use, iKeyGuard is also being discussed as potential darkware.
Korean financial watchdog probes data breach at Hyundai Capital
South Korea’s Financial Supervisory Service (FSS) has launched a probe into a data breach at Hyundai Capital that affected 420,000 of its customers.
CIOs need IT governance rethink
CIOs will need to rethink their IT governance policies as employees turn to social media tools to collaborate at work, according to research from analyst group Gartner.
Trend Micro identifies $30-a-day Exploits-as-a-Service (EaaS) cloudware
Trend Micro claims to have identified a new type of cloud service that allows a variety of crimeware exploits - botnets, Javascript vulns and PDF exploits to mention but a few - to be rented from the cloud for around $30.00 a day.
A dummie's guide to botnet rentals
Botnets – swarms of infected PCs controlled by a command-and-control server(s) – are becoming big business for cybercriminals and now security researcher Brian Krebs has detailed how crimeware professionals are now renting out sub-swarms for cash.
Malware infected 60 million computers in Vietnam last year
Around 60 million computers in Vietnam were infected with malware last year, about 6.5 million of those infections were from the Conficker virus, according to the Vietnam Informatics Department.
Connecticut hospital loses hard drive with data on more than 90,000 patients
MidState Medical Center in Meriden, Conn., said that it lost a hard drive containing personal information on patients at the hospital. Reports indicate that the number of patients affected is around 93,500.
Exclusive interview: Facebook CIO, Tim Campos
At the start of 2011, investment in social networking site Facebook valued it at $50bn - more than eBay and Time Warner. Computer Weekly talks to Facebook's Tim Campos
FAST calls for enhanced intellectual property litigation rights in the UK
The Federation Against Software Theft (FAST) has announced it is stepping up its campaign for stronger intellectual property rights (IPRs) in the UK.
AVG takes on Dropbox with free 5GB secure cloud storage
AVG Technologies, the company behind the popular AVG range of IT security software, has unveiled a secure cloud storage service called LiveKive. Available in three variants, one of which is free and offers up to 5 gigabytes (GB) of online storage, the service is accessible on almost any web-enabled device, including Androids, iPhones and iPads.
Jericho Forum publishes infosec buyers’ guide
Independent security expert group Jericho Forum has published a buyers' guide for information security products and services.
Banks failing to detect and stop online fraud – before it happens
In 78% of online fraud incidents, banks failed to catch the illegal transfer of funds or other malicious activities, such as identity theft, according to a survey commissioned by Guardian Analytics.
Organizations lax on cybersecurity best practices training, says report
Most organizations fall short in training their workers in information security best practices, according a report by the IBM Center for the Business of Government.
Paid vs. free: security apps for Android
As tablets and smartphones continue to proliferate, the companies that sell and market security suites have already begun shifting their focus toward mobile security. With many apps to choose from – both paid and free – Infosecurity was provided with insight into Webroot’s new security app for Android to explore the differences.
Russian government blamed for LiveJournal DDoS attack
Reports are coming in that LiveJournal, one of the key web portals for uncensored political discussion in Russia, suffered from a series of major DDoS attacks last week.
