Infosecurity News
ICS-CERT warns about critical flaw in Movicon industrial control system
The US Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) is waning about a critical vulnerability in Progea’s Movicon 11, an industrial control product that manages critical infrastructure systems.
South Carolina county takes nine month to notify thousands of data breach victims
Officials with York County, South Carolina, took nine months to notify close to 17,000 job applicants and vendors that their social security numbers were exposed by an intrusion into a web application server.
The Blackberry Project: how easily do we sell our privacy?
The Singularity Hub, ‘a community for those excited about the future’, has taken another look at the Blackberry Project and concludes that the younger generation is embracing a new view of privacy.
The German Pirate Party fights censorship, but is it being censored?
While the Pirate Party wins seats in the German North Rhine-Westphalia state elections, a "shitstorm" about automated filtering starts to brew.
Mozilla’s objection to IE-only Windows on ARM: a major row in the making
Windows is not Apple’s iOS, says Mozilla's top lawyer after the organization complained that Firefox and other browsers would be excluded from Windows RT running on ARM systems.
Information security professionals baulk at putting sensitive data in cloud
Despite the apparent enthusiasm around cloud computing, a survey of information security professionals by Wisegate revealed that more than half believe the cloud is too risky and only suitable for commodity applications like CRM or e-mail.
Apple fixes 39 security holes with Lion and Safari updates
Apple has fixed 35 security holes in a range of applications with the release of OS X Lion 10.7.4, as well as four flaws in the Safari web browser.
DDoS-vidaniya: Anonymous takes Kremlin off-line
The Russian branch of hacker group Anonymous is claiming credit for shutting down the websites of the Kremlin and Russian President Vladimir Putin using distributed denial-of-service (DDoS) attacks.
ICANN reopens new domain application process after software glitch
The Internet Corporation for Assigned Names and Numbers (ICANN) said it plans to reopen the application process for new generic top-level domains (gTLDs) on May 22 after a software glitch that may have compromised applicant confidentiality forced the group to stop accepting applications.
Pentagon makes cyber intelligence sharing program permanent
The Pentagon is making permanent the Defense Industrial Base (DBI) Cyber Pilot program that involves sharing cyber intelligence with the US defense industry.
Pirate Bay defends Virgin Media while founder Peter Sunde faces jail
It is with some irony that The Pirate Bay (TPB) came to the defense of Virgin Media (TalkTalk was also disrupted) after the ISP’s website was taken down by Anonymous.
BeyondTrust acquires vulnerability management company eEye Digital Security
BeyondTrust, a company that provides privilege delegation and authorization systems with its PowerBroker suite of products, has acquired eEye Digital Security, developer of the Blink and Retina vulnerability management tools.
Member and spokesperson for TeaMp0isoN arrested in Newcastle
A 17-year old has been arrested in Newcastle by the Police Central eCrime Unit (PCeU) and local Northumbrian Police officers for alleged offenses under the Computer Misuse Act.
Drowning in data: Security professionals look to metrics for a lifeline
Security professionals are experiencing an information overload and want better metrics to analyze the data so they can take action, according to a survey conducted by Dimensional Research on behalf of RedSeal Networks.
K-State receives Air Force contract to examine network "moving target" defense
Kansas State University (KSU) has received a five-year, $1 million US Air Force (USAF) contract to study "moving target" defense for networks.
Rockefeller opposes dropping cybersecurity mandates from Senate bill
Sen. Jay Rockefeller (D-W.Va.), one of the sponsors of the Cybersecurity Act (S 2105), is refusing to drop mandatory cybersecurity standards for critical infrastructure companies as part of an effort to attract more Republican support for the measure.
Warning issued about DNSChanger malware and possible loss of internet access
The US Department of Homeland Security (DHS) is warning US-based internet users to check their computers for infection by the DNSChanger malware before the FBI knocks them offline in July.
Cybersecurity tops terrorism as US public's security priority
The US public is more concerned about cybersecurity than terrorism, according to a survey by IT firm Unisys.
UNC Charlotte exposes 350,000 social security numbers of students, staff, and faculty
The University of North Carolina (UNC) at Charlotte has admitted that financial account numbers and 350,000 social security numbers of students, staff, and faculty were exposed to the internet, in some cases for more than a decade.
Winners and losers in European card fraud
FICO has produced an interactive map of Europe, showing the evolving European fraud landscape between 2006 and 2011.
