Infosecurity News
Information Please: Kaspersky Lab needs help decrypting Gauss warhead
Kaspersky Lab is asking for help from the information security community to decrypt the mysterious Gauss’ encrypted warhead suspected of targeting industrial control systems.
Marketers dis Congress over data aggregation privacy concerns
The Direct Marketing Association (DMA) is dismissing congressional privacy concerns about the mass aggregation of consumer data.
Groupon email scam gives victims more than they bargained for
Commtouch has detected a series of recent attacks that contain emails promising great Groupon “deals”, but deliver malware instead.
One-quarter of enterprises have been breached by spear phishers
More than one in four infosec professionals said that top executives or other privileged users in their enterprises have been compromised by spear phishing attacks within the last 12 months, according to a survey by PhishMe.
Google to demote sites accused of frequent copyright infringement
Google said it will demote the search rankings of websites accused of repeated copyright infringement as part of a search algorithm change.
Police in Scotland have used RIPSA 85,000 times in the last 5 years
The Regulation of Investigatory Powers (Scotland) Act is used by public bodies, including the police, to obtain phone and text information on customers from telecoms companies. It was originally designed to help combat terrorism and serious crime.
iOS poses serious problems for law enforcement
MIT’s Technology Review says that Apple’s iPhone and iTab security has improved to the extent that, if used correctly, it can prove unbreakable even to law enforcement.
Citadel trojan targeting major international airport hub
The Citadel trojan is best known for its recent delivery of the Reveton ransomware. Now Trusteer has discovered a Citadel-based man-in-the-browser (MitB) attack aimed against VPN-using employees at a major international airport.
Oracle warns about privilege escalation flaw in its Database Server
Oracle is warning customers about a privilege escalation vulnerability in its Oracle Database Server that could enable an attacker to gain control of the affected server.
MacAuley-Brown gets multimillion dollar USAF cybersecurity contract
Defense contractor MacAuley-Brown (MacB) has won a multimillion dollar contract to provide cybersecurity to the US Air Force (USAF).
August Patch Tuesday heats up with five critical security bulletins
Five of Microsoft’s nine security bulletins set to be shipped Tuesday plug critical security flaws in a range of products.
FTC okays final settlement with Facebook over privacy concerns
The Federal Trade Commission (FTC) has approved a final settlement with Facebook resolving charges that the social networking firm misled users about its use of their personal information.
Anonymous 2 won’t happen, says Commander X
Christopher Mark Doyon, AKA Commander X, is the voice of the Peoples Liberation Front, and a high-profile and respected voice within Anonymous. He has now publicly debunked the idea of Anonymous 2.
Carder Christopher Schroebel gets seven years
Christopher Schroebel, a 21-year-old Maryland man, was arrested for credit card theft in November 2011. He pled guilty in June. Dutch national David Benjamin Schrooten, known as ‘Fortezza’ and ‘Xakep’, was extradited from Romania on associated charges also in June.
WikiLeaks taken out by sustained 10GB/sec DDoS attack
On 4 August a new group appeared on Twitter with a simple announcement: “Anti Leaks: Tango down wikileaks.org #Wikileaks #Cowards”. Since that time WikiLeaks and its affiliate sites and mirrors have remained unavailable or severely disrupted.
US, China, and Russia take gold, silver & bronze in hacking Olympics
There was a sharp increase in hacks originating in the US, China, and Russia in the second quarter of 2012, according to NCC’s quarterly Origin of Hacks report.
Bloomberg pays out to Economist Group over CQ information breach
Bloomberg has agreed to pay the Economist Group, owner of CQ, an unspecified amount of money in damages because Bloomberg employees, who were formerly employed by CQ, accessed the publication's information using their old log-ins and passwords.
World of Warcraft maker admits to breach of network walls
Blizzard Entertainment, maker of World of Warcraft and other popular video games, has admitted that its network has been breached and advised users to change their passwords.
FBI warns about Reveton ransomware scam
The FBI is warning about an increase in "drive-by” Reveton malware disguised as a message from law enforcement; it locks the computer and tries to extort money from the victim.
Google fixes two holes in Chrome, ships Flash sandbox for Windows
Google has fixed two high-risk vulnerabilities in its Chrome browser and has improved Flash sandboxing for Windows users to boost security and stability.
