Infosecurity News
New Windows zero-day vulnerability allows USB malware to run, says Sophos
A new USB-based zero-day attack is hitting Microsoft Windows users, according to security firm Sophos.
Free web browser and plug-in security service launched
Cloud security specialist Qualys has launched an interactive and online web browser checking service. Known as BrowserCheck, the service has been in development for almost 18 months and under active beta test internally for some three months, Wolfgang Kandek, Qualys' chief technology officer told Infosecurity.
Mozilla increases reward for security bugs
Mozilla – the organization responsible for the open-source Firefox web browser – has upped the ante for the discovery of security bugs, as it will begin paying security researchers $3000 for each reported flaw with its products.
Free Infosecurity webinar on Tuesday explains why you should be archiving Web 2.0 communications
Almost all organizations now archive their email in order to meet state and federal regulatory requirements, but what about Skype, Twitter, Facebook and all those other useful Web 2.0 interactions?
Blocking access to Web 2.0 in workplace not viable
Work usage of Web 2.0 services has soared in recent years, but many businesses block access to Web 2.0 sites in the work environment on the basis that these services pose too much of a security risk.
Cybercriminal malware methodology highlighted with celebrity arrest
A malware spamfest incident – stemming from the arrest of a popular Mexican actress this week – has highlighted just how strong cybercriminal malware methodology is
HM Courts Service staff breached government database of personal information
Staff working for Her Majesty's Courts Service have breached security on the government database that stores personal data about everyone in the UK.
New zero-day flaw hitting Windows users
Hard on the heels of a raft of WinXP patches and updates on Tuesday of this week, it seems that a nasty USB-based zero-day flaw is hitting users of the popular operating system.
e-Crime is a growing problem says online safety summit survey
Research published in parallel with the opening of today's e-Crime summit in Wales, claims to show that online crime now costs the UK economy £10bn a year and is a growing threat to businesses that are becoming ever more dependent on IT and online systems.
Financial hackers attacking Visa/MasterCard users with fake 3-D Secure logins
Criminal hackers are using more advanced methods of trying to extract users card credentials, the latest attack vector being malware that launches a fake Visa/MasterCard 3-DSecure screen.
Amazon and Apple iTunes' credibility tapped by hackers spreading new back door trojan
Researchers from Symantec claim to have seen a back door trojan, Trojan.Sasfis, which is being actively promoted under headings such as Amazon_Tracking_Number and iTunes_certificate.
Microsoft shares source code with Russian government
Microsoft has signed an agreement with Russia to share the source code of multiple products, according to US reports.
Microsoft’s July Patch Tuesday to fix zero-day vulnerabilities
Microsoft's monthly Patch Tuesday security update due for release on July 13 is small, with only four bulletins
Microsoft’s July Patch Tuesday to fix zero-day vulnerabilities
Microsoft's monthly Patch Tuesday security update due for release on 13 July is small with only four bulletins
Symbian smartphones infected with botnet virus
A mobile security research firm claims that botnets have been discovered 'in the wild' which are targetting large numbers of Symbian Series 60 operating system smartphones.
A more secure BlackBerry? There's an app for that
Users of the BlackBerry smartphone will no longer have to stare enviously at the security apps for Android handsets and Apple iPhones, as RIM has developed a native security app for its popular business smartphone.
Microsoft integrates Facebook and Windows Live Messenger with Outlook
Microsoft has integrated Facebook and Windows Live Messenger into its Outlook email application.
US announces infrastructure cybersecurity programme
The National Security Agency within the US Department of Defense has announced a programme to mitigate cyber attacks on critical infrastructure such as power plants and the electricity grid.
Ransomware takes a new turn as victims asked to pay a cellular phone bill
Whilst most 'ransomware' tries to extract money from the victim's account into the users' bank account, often using a payment card or bank-to-bank transfer mechanism, a new type of scamware appears to try to get users to top up the criminal's mobile phone accounts.
Sourcefire offers cloud-based security via Amazon Web Services
Sourcefire, the creator of Snort, the open source intrusion detection software, has launched a cloud-based intrusion prevention service using the Amazon Web Services (AWS) cloud platform.
