Infosecurity News
Security issues increase corporate BYOD costs
Despite the perception that bring your own device (BYOD) saves organizations money, more than two-thirds of IT professionals believe it increases costs, primarily due to the added security risks and measures required, according to a survey by Lieberman Software.
Adobe’s patches for Windows and OS/X expose Linux
During June, Google researchers seeking to strengthen the security posture of the embedded PDF reader for Chrome discovered numerous vulnerabilities in Adobe Reader. Most of these were patched in this week’s Adobe security update – but not for Linux.
CloudFlare helps restore WikiLeaks
After more than a week of persistent DDoS attack by Anti Leaks, WikiLeaks is now available again, courtesy, it says, of increased capacity and CloudFlare protection.
Assange: asylum crunch day
WikiLeaks founder Julian Assange, wanted by Sweden (definitely) and the US (probably) is inside the Ecuadorean embassy in London seeking political asylum. Today, Thursday 16 August, is the day that Ecuador has said it will announce its decision.
Security vendor Prolexic uncovers vulnerability in hacker toolkit
Security vendor Prolexic has turned the tables on cybercriminals and exposed a vulnerability in the Dirt Jumper toolkit used to launch distributed denial of service (DDoS) attacks against corporate networks.
Bitcoinica, twice hacked in 2012, is being sued
Bitcoinica is a UK-based online trading site for the online cash alternative ‘bitcoin’. Following its second hack, Bitcoinica was taken offline and will remain off-line until a ‘transitional’ period designed to improve security is complete.
Information Please: Kaspersky Lab needs help decrypting Gauss warhead
Kaspersky Lab is asking for help from the information security community to decrypt the mysterious Gauss’ encrypted warhead suspected of targeting industrial control systems.
Marketers dis Congress over data aggregation privacy concerns
The Direct Marketing Association (DMA) is dismissing congressional privacy concerns about the mass aggregation of consumer data.
Groupon email scam gives victims more than they bargained for
Commtouch has detected a series of recent attacks that contain emails promising great Groupon “deals”, but deliver malware instead.
Police in Scotland have used RIPSA 85,000 times in the last 5 years
The Regulation of Investigatory Powers (Scotland) Act is used by public bodies, including the police, to obtain phone and text information on customers from telecoms companies. It was originally designed to help combat terrorism and serious crime.
iOS poses serious problems for law enforcement
MIT’s Technology Review says that Apple’s iPhone and iTab security has improved to the extent that, if used correctly, it can prove unbreakable even to law enforcement.
Citadel trojan targeting major international airport hub
The Citadel trojan is best known for its recent delivery of the Reveton ransomware. Now Trusteer has discovered a Citadel-based man-in-the-browser (MitB) attack aimed against VPN-using employees at a major international airport.
Oracle warns about privilege escalation flaw in its Database Server
Oracle is warning customers about a privilege escalation vulnerability in its Oracle Database Server that could enable an attacker to gain control of the affected server.
MacAuley-Brown gets multimillion dollar USAF cybersecurity contract
Defense contractor MacAuley-Brown (MacB) has won a multimillion dollar contract to provide cybersecurity to the US Air Force (USAF).
Anonymous 2 won’t happen, says Commander X
Christopher Mark Doyon, AKA Commander X, is the voice of the Peoples Liberation Front, and a high-profile and respected voice within Anonymous. He has now publicly debunked the idea of Anonymous 2.
Carder Christopher Schroebel gets seven years
Christopher Schroebel, a 21-year-old Maryland man, was arrested for credit card theft in November 2011. He pled guilty in June. Dutch national David Benjamin Schrooten, known as ‘Fortezza’ and ‘Xakep’, was extradited from Romania on associated charges also in June.
Bloomberg pays out to Economist Group over CQ information breach
Bloomberg has agreed to pay the Economist Group, owner of CQ, an unspecified amount of money in damages because Bloomberg employees, who were formerly employed by CQ, accessed the publication's information using their old log-ins and passwords.
FBI warns about Reveton ransomware scam
The FBI is warning about an increase in "drive-by” Reveton malware disguised as a message from law enforcement; it locks the computer and tries to extort money from the victim.
Is the Olympics Committee too heavy-handed in protecting its rights?
As the internet has learned, copyright holders can be insistent in protecting their legal rights. This now includes the London Olympic Organizing Committee (LOCOG), which has been surprisingly busy in issuing threats and warnings.
Entrust withdraws from the CAB security forum
The Certification Authority/Browser Forum is a consortium of certification authorities and browser vendors co-founded by Entrust in 2005 to ensure the security of EV SSL certificates used on the internet. Now Entrust has withdrawn.
