Infosecurity News
HP pays $16.25m in fraud settlement
Hewlett-Packard is to pay $16.25m (£10m) for alleged fraud, following an extensive investigation by the Federal Communications Commission (FCC) and Department of Justice (DoJ).
EU legal threat stirs Home Office on interception opt-ins
People who use the internet may have greater protection from electronic eavesdroppers following a consultation on changes to the Regulation of Investigatory Powers Act (RIPA).
Entrust teams with EDAPS to secure Interpol's identification documents
Entrust, the identity security specialist, has teamed up with EDAPS, the Ukrainian consortium of high-tech firms, to develop a highly secure document identification system for Interpol, the international crime agency.
Forrester zero trust model design to make entire network secure
Forrester said that it has developed a “zero trust” model designed to make security ubiquitous through the network, not just at the perimeter.
Computer virus sparks bizarre $6 million fraud case
Composer Roger Davidson was scammed out of millions of dollars after he brought his laptop into a computer repair shop in Westchester County, New York, in 2004 to get rid of a virus.
Trend Micro's Rik Ferguson reports on a new Facebook phishing vector
The fact that social networking portal has more than 500 million members attracts attacks like moths to a flame. Trend Micro's Rik Ferguson has seen an interesting new twist to phishing this week on the site.
Defence minister Nick Harvey to detail UK cyber battle plans
Armed forces minister Nick Harvey is to expand on recent announcements on UK cyber defences in London today.
Royal Navy website sunk by SQL injection hacker
One of the websites operated by the Royal Navy was shut down yesterday, after a hacker called TinKode gained unauthorised access to the server using an SQL injection attack.
ZeuS malware dominates October malware landscape
The latest monthly analysis of the malware landscape from Kaspersky Lab shows that the ZeuS trojan continued to strike, as it became one of the most commonly used and best-selling spy programmes on the online black market.
Many hands cooperated to build Stuxnet worm
More than 30 people built Stuxnet worm, noted Brian Tillett, information security researcher at Symantec. Stuxnet has attacked a range of targets including Iranian nuclear facilities and Chinese computers.
ICO planning data breach fines later this month says commissioner
The Information Commissioner's Office (ICO) is preparing to impose fines on companies that break provisions of the Data Protection Act later this month, the information commissioner, Christopher Graham, has said.
Massive DDoS attack knocks Burma offline
A serious distributed denial of service (DDoS) attack has effectively taken the country of Burma offline. The attack, which started on Tuesday, has reportedly clogged up the country’s main 45 Mbps internet feed, with DDoS packet rates of between 10 and 15 Gbps.
One in eight malware attacks are via a USB device, study shows
A growing number of malware attacks are using plug-in USB devices, according to researchers at security firm Avast Software.
SpyEye trojan attacks heated up in the summer
The SpyEye trojan, which is competing for criminal “business” with Zeus, has seen a recent surge in activity, according to Lance James, a security researcher at Damballa.
One in eight malware attacks are via a USB device, study shows
A growing number of malware attacks are using plug-in USB devices, according to researchers at security firm Avast Software.
Tokyo police probe leak of anti-terror informant information
The Tokyo Metropolitan Police is investigating a large leak of sensitive international anti-terrorism documents – including names and addresses of informants – that were placed on the internet, according to Japanese press reports.
Google wins court approval for $8.5m settlement of Buzz privacy case
Google has won preliminary court approval to settle a class-action lawsuit related to alleged privacy violations caused by its Buzz social networking service.
Center for Internet Security updates information security metrics
The Center for Internet Security (CIS) released an updated version of its information security metrics developed through the consensus of 150 information security experts in the public and private sectors.
FBI arrests California man in internet "sextortion" case
The Federal Bureau of Investigation (FBI) arrested a 31-year-old California man for hacking into victims’ computers, downloading explicit photos, and then using the photos to extort more photos and videos from the victims, who were usually teenage girls.
SCADA systems can be located via public search engine says CERT
The Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) has issued an industry alert to SCADA systems operators and other interested parties that many SCADA installations can now be located on the web using the SHODAN public search engine.
