Infosecurity News
Iran bids farewell to the internet; welcomes its own halal intranet
Iran’s answer to ‘criminality’ on the internet is not to fight criminality, but to block the internet. In the future, Iranians will have access to only the official national intranet and a whitelist of acceptable foreign sites.
What an Englishman does in bed
Companies that monitor the end point behavior of their remote workers will have to start monitoring their (internet) behavior in bed. That at least is the inference to be drawn from a new street survey conducted by Infosecurity Europe.
Twitter takes spammers to court
Twitter has filed a civil lawsuit against a number of alleged spammers who use the Twitter platform to send out emails.
Death, taxes, and Microsoft's Patch Tuesday
IT administrators in the US better have their taxes done already because Microsoft is sending plenty of work on Tuesday with six security bulletins, four of which are rated critical and could lead to remote exploitation by hackers.
Hack compromises personal data of Utah Medicaid recipients
The Utah Department of Technology Services (DTS) has admitted that cybercriminals stole personal information on 181,604 Medicaid and Children’s Health Insurance Plan (CHIP) recipients, including social security numbers of 25,096 individuals.
Fake AT&T bills being used to deliver malware
Cybercriminals are sending spam to AT&T Wireless customers with huge bills in order to trick recipients into clicking on a link to malicious websites, according to Commtouch.
DIY manual: Researchers tell hackers how to carry out Stuxnet attack
Digital Bond, the group of researchers dedicated to exposing security flaws in industrial control systems, is advising would-be hackers how to carry out a Stuxnet-type attack against a programmable logic controller (PLC) used to control critical infrastructure systems.
Cybersecurity bill gains House support, SOPA opponents' ire
A bill introduced last year in the House has garnered increased support from House members and renewed attention from some of the groups that took down the Stop Online Piracy Act (SOPA).
Google ships second Chrome security update in less than a week
Less than a week after releasing Chrome 18 with nine security fixes, Google is patching an even dozen vulnerabilities in Chrome, including seven high-risk flaws.
Evolve or perish: Darkshell DDoS is adapting
New variants of Darkshell, a distributed denial of service (DDoS) botnet targeting Chinese websites, have been detected by McAfee Labs.
New York aims to improve privacy of health information
New York state health officials are establishing the Statewide Health Information Network of New York (SHIN-NY) Policy Committee to improve protection of personal health information (PHI).
Facebook logins vulnerable on Apple and Android devices
Facebook login credentials are easily obtained from Apple and Android mobile devices because they are not encrypted and left in a temporary folder accessible to other applications or USB connections.
Baylor Law accidentally discloses GPAs, LSAT scores of incoming class
Baylor Law School sent out an email to the incoming class informing them of an extension to the deadline for “seat deposits” along with a spreadsheet containing GPAs and LSAT scores on all class members.
Privacy advocate warns cybersecurity bills could lead to increased government surveillance
A number of the cybersecurity bills being considered by Congress raise privacy and civil liberties concerns and could open a back door to widespread government surveillance, warned the Center for Democracy and Technology (CDT), a privacy advocacy group.
ABB won't patch industrial control system flaw
Swiss industrial conglomerate ABB does not plan to patch an arbitrary code execution vulnerability in components of itsWebWare Server application, used in various industrial systems, because it is a legacy product nearing the end of its lifecycle.
Anonymous UK plans to attack the Home Office
The UK faction of Anonymous has announced a campaign against the Home Office in protest against extradition arrangements with the US, and the European Arrest Warrant (EAW). It is timed for 9:00pm on Saturday.
Pastebin to be better purged of ‘hurtful’ hack dumps
“I am looking to hire some extra people soon to monitor more of the website's content, not just the items that are reported. Hopefully this will increase the speed in which we can remove sensitive information,” says Jeroen Vader, owner and developer of Pastebin.
TIBCO announces intent to acquire LogLogic
TIBCO Software Inc., a Palo Alto, California-based company, has announced a definitive agreement to acquire LogLogic Inc, a privately owned firm based in San Jose.
Encryption is key for local police to comply with FBI cloud security rules
Local law enforcement will need to make sure their data is encrypted in order to comply with the FBI’s Criminal Justice Information Services (CJIS) security rules for use of cloud computing, says Todd Thiemann, senior director of product marketing at encryption provider Vormetric.
Weighing the costs and benefits of disaster recovery planning
In order to protect data from a disaster or cyberattack, organizations should develop a disaster recovery plan based on a cost-benefit analysis of the value of the data versus the cost of maintaining backup facilities, according to a report from Wisegate.
