Infosecurity News
BlueToad admits stolen Apple UDIDs came from its own servers
Following research by Darth Null, a Florida-based publishing firm called BlueToad has now admitted that the million Apple UDIDs stolen and leaked by AntiSec came from its own servers.
Faux FBI email fishes for fake fines
A new “drive-by” internet virus carrying a fake message and claiming to impose a so-called fine from the Federal Bureau of Investigation (FBI) is targeting email addresses owned by Connecticut residents.
Al-Jazeera SMS platform hacked by Syrian hacktivists
The war of disinformation surrounding the Syrian unrest and other political hot potatoes is continuing, with the Al-Jazeera news service falling victim in the latest attack.
Xerox appoints Chief Security Officer
In an example of big businesses getting serious about cyber-security, Fortune 500 denizen Xerox has appointed Mark Leary as chief information security officer.
Parents just don’t understand mobile security
According to a survey commissioned by ESET UK, parents are simply unaware of the security threats to mobile phones: while 95% of adults protect their home PCs, only 29% believe that mobile phones are a target for cybercriminals.
Active authentication seeks to augment passwords
Passwords and access tokens, we are frequently told, are not enough. They can be broken, stolen or bypassed. DARPA is seeking a new approach – rather than authentication solely on access, it is looking for ways to maintain continuous biometric user authentication.
Obama may use an executive order to get his cybersecurity wishes
The Cybersecurity Bill, heavily supported by President Obama, was blocked by Republicans in the US Senate. Now it appears that he is considering the use of an executive order to bypass Congress and enforce parts of the bill.
'Botnet Bandit' gets 2+ years in prison
The Botnet Bandit, as he’s known, has been brought to justice after infecting thousands of computers and using them for profit. Joshua Schichtel has been sentenced in federal court in the District of Columbia to 30 months in prison and three years of supervised release.
Hackers hold Mitt Romney's tax returns for ransom
An unidentified hacking group claims to have hacked PricewaterhouseCoopers's Franklin, Tenn., office to obtain access to Mitt Romney’s tax returns. It’s now attempting to hold the information for ransom, asking for $1 million, deliverable via Bitcoin, the encrypted digital currency.
Gen Y's need for full IT rights opens up big security holes for enterprises
New research from Avecto has found that Gen Y workers are the most likely to demand elevated administrative rights when it comes to network usage, indicating a generational split on privilege management within the enterprise. Unfortunately, that is giving way to an alarming increase in malware and network infections – many of which go undetected for long periods of time.
Cloud, mobile security top of mind for the Feds
The cloud is still just a nascent service environment for the US federal government, for which meeting security compliance requirements is the top concern. Meanwhile, mobile security is the most dynamic area for the government.
September’s Patch Tuesday is a lightweight
But “we’d like to remind you about an important change to Windows’ certificate requirements,” says Microsoft – so September is still going to be a busy month for sys admins.
The creators of BEAST now present CRIME
From the producers of BEAST, Juliano Rizzo and Thai Duong, comes a brand-new production: CRIME. CRIME will get its first showing at the Ekoparty security conference in Buenos Aires later this month.
The Elderwood project – it started with Aurora, but continues today
The Elderwood project is the name given by Symantec to attacks emanating from the same group implicated in the Aurora hack and Hydraq trojan used against Google two years ago. This group has never ceased being active.
Britain sets decision date for US extradition of 'UFO hacker' McKinnon
British Home Secretary Theresa May has said that she would would rule on the case of “UFO hacker” Gary McKinnon, who suffers from Asperger’s Syndrome, by Oct. 16.
Slainte! First Irish-speaking virus hits the web
The first computer virus to speak Irish has emerged from the wilds of west Donegal to target native Irish speakers.
Good Technology targets BYOD security with Copiun acquisition
Enterprise mobility software vendor Good Technology is looking to bolster security for the bring-your-own-device (BYOD) trend with the acquisition of mobile security firm Copiun.
Android-based premium scams outside the US dominate the mobile malware scene
Why go basic when you can go premium? When it comes to mobile malware, that’s increasingly the tactic of cybercriminals looking to score funds from unwitting victims.
Malware is on the rise, especially for Android
Malware incidents are at their highest point since 2009, according to McAfee, with Android attacks making up the largest target group.
Oracle's Java exploit patch still leaves vulnerabilities
Security Explorations, a security firm in Poland, says it has uncovered a problem with the out-of-cycle patch that Oracle just issued to fix Java vulnerabilities and protect against a new zero-day exploit that was spreading like wildfire.
