Infosecurity News
DigiNinja analyzes the Twitter hack, and offers password advice to web services
Yesterday we reported that 55,000 Twitter accounts have been leaked on Pastebin. Security researchers Anders Nilsson and Robin Wood have separately analyzed the dump.
Queen’s Speech announces ‘measures... to access vital communications data’
As expected, the Queen’s Speech yesterday announced the intention of the UK Government to bring forward (during the current parliamentary session) measures to allow law enforcement and intelligence agencies access to ‘vital communications data’.
FTC requires Myspace to undergo audits for privacy policy violations
The US Federal Trade Commission (FTC) is requiring Myspace to submit to biennial privacy audits for the next 20 years as part of a settlement of charges that the company misrepresented its protection of users’ personal information.
Adobe ships patches for 13 critical flaws in various products
Adobe has shipped 13 patches to plug critical security holes in Shockwave, Flash Professional, Photoshop, and Illustrator that could enable an attacker to take control of a vulnerable system.
Research uncovers IRC bot malware for Android
McAfee Labs researchers have uncovered Android malware that acts as an internet rely channel (IRC) bot.
FBI warns globe trotters about malware lurking in hotel room connections
The FBI is warning individuals who travel abroad that cybercriminals are installing malware through bogus software updates when users connect to the internet in their hotel rooms.
Net neutrality becomes law in The Netherlands
The net neutrality provisions approved by the Dutch Parliament last June as part of its implementation of the European telecommunications package became law yesterday.
False Facebook account leads to Principal’s resignation
Louise Losos, principal of Clayton High School, Missouri, has resigned following accusations that she created a false persona on Facebook and befriended hundreds of her own students.
Twitter fights two information security battles
Twitter is in the unenviable position of being ‘attacked’ on all sides: while it tries to fight a subpoena demanding the account details of Occupy protestor Malcolm Harris, hackers release thousands of user logon details on Pastebin.
Best-in-class firms provide secure remote mobile access to their networks
A full 94% of “best-in-class” companies provide secure remote mobile access to their corporate network, according to a report by the Aberdeen Group.
Natural gas pipelines targeted by cyber attack
A spear-phishing campaign aimed at US natural gas pipeline companies has been underway since December of last year, according to the US Industrial Control Systems Cyber Emergency Response Team (ICS-CERT).
US, Chinese defense officials agree to work together on cybersecurity
US and Chinese defense officials have agreed to cooperate on cybersecurity, despite recent charges that China has been behind cyberespionage involving US companies.
Researchers develop smartphone app that steals prepaid phone credits
Researchers at the American University of Beirut (AUB) said they have developed a smartphone application that is able to transfer prepaid phone credits without the user’s authorization or knowledge.
Apple plugs three security holes with iOS 5.1 update
Apple has released iOS 5.1.1, an update to its mobile operating system, with three security fixes.
Analysis shows social networks increasingly used to spread malware
In its latest monthly analysis of the most prevalent malware, GFI describes how social networks remain the most popular breeding ground for infections.
"Good on ya' Mozilla", says Sophos about Firefox
Firefox is developing a new feature called ‘click-to-play’ designed to provide additional protection for web browsing – but not everyone thinks this is necessarily useful.
Syrian activists targeted with RATs
There have been several recent examples of Syrian activists being tricked into downloading and installing remote access tools (RATs) that secretly hand control of their computers to a third party.
Cybersecurity is chief worry of federal chief information officers
Cybersecurity is the top concern of US federal chief information officers (CIOs), according to a survey conducted by high-tech trade group TechAmerica and accounting firm Grant Thornton.
‘May Day, May Day’: Microsoft scrambles to plug critical holes
Microsoft plans to ship in May seven security bulletins, including three critical bulletins to plug remote code execution holes in Microsoft Windows, Office, .NET Framework, and Silverlight.
Encryption passwords exposed by Apple's Lion OS X update
Apple exposed encryption passwords of FileVault users in its Lion OS X 10.7 security update, says researcher.
