Infosecurity News
Verizon exec appointed to NSTAC
The National Security Telecommunications Advisory Committee is about to get a new member, from a company with a strong public sector presence: President Obama intends to appoint Verizon Enterprise Solutions (VES) President John Stratton to the NSTAC.
4.5 million routers hacked in Brazil
More than 4.5 million DSL modems have been hacked in Brazil by exploiting a vulnerability in the firmware. All affected modems used a chip from Broadcom.
Anonymous #OpVendetta set for 5th November
This weekend saw a leaflet paperstorm in London, with masked anons handing out flyers proclaiming #OpVendetta slated for 5th November in London. Led by Anonymous UK and Ireland, it is, we are told, “the biggest Anonymous protest in the UK” yet seen.
File-sharing for personal use is not illegal in Portugal
The latest move by rightsholders in Portugal in the ongoing war against file sharers has backfired dramatically: the Portuguese Prosecutor has declared that P2P file-sharing for personal use is not illegal.
Businesses still lack confidence in the cloud
The Cloud Security Alliance (CSA) and ISACA have issued their Cloud Market Maturity report, outlining the top 10 issues with cloud adoption by businesses. They found that confidence is lowest in government regulation as a factor in driving or securing the market.
New Android trojan uses camera app to recreate user's physical surroundings
Indiana University and the US Navy have created an experimental Android spyware trojan that takes over a device’s camera to take photos and build a 3-D model of the mobile user’s surroundings. The information is then gathered and uploaded to a central server.
Level 3 enters the managed security market
Level 3 Communications has launched a new global security solutions portfolio meant to provide an integrated approach for enterprises, encompassing layered security services, Level 3's communications networking and professional services. The solutions will be rolled out in a managed services environment.
Microsoft faces $7 billion fine by EU
Microsoft will be fined for failing to comply with a 2009 ruling from the EU, which had objected to the way the company was using its dominant operating system position to the advantage of its own browser.
Europe says ICANN’s proposals are illegal
ICANN is in the process of renegotiating the basis of the WHOIS database. Last week it reported that it “and the registrars are much closer to reaching a negotiated position on Whois verification and data retention.” But now Europe has said you can’t do that – it’s illegal.
Private Facebook messages on Timeline? The social network says no
Are private Facebook messages from the years 2007–2009 showing up on people’s public Timelines? Users say yes, but Facebook says the rumors are false.
Adobe to revoke signing certificate after compromise of internal server
Adobe is planning to revoke an Adobe code signing certificate, after hackers broke into an internal server to compromise the digital certificate. This allows the attackers to create files that appear to be legitimately signed by the software maker, but in fact contain malware.
An Address from Theresa Payton, CEO, Fortalice & Former White House CIO
Taken from our recent US Summer Virtual Conference, Theresa examines the current threat landscape
Verizon joins Lockheed Martin Cyber Security Alliance to focus on public sector threats
Verizon Enterprise Solutions has become the newest member of the Lockheed Martin Cyber Security Alliance, a collaborative effort to address national cyber defense challenges – including the growing threat posed by cyber attacks against the US' critical IT infrastructure.
Unleashing the Potential of Cloud Computing in Europe
Sandwiched between its proposed new Data Protection Regulation earlier this year and the new cyber security strategy expected later comes the EU’s new cloud strategy document: ‘Unleashing the Potential of Cloud Computing in Europe.’
The ten security issues guaranteed to cause a flamewar
To paraphrase Winston Churchill, “If you put two security experts in a room, you get two opinions, unless one of them is a user, in which case you get three opinions."
Michigan healthcare providers turn to biometrics for patient data security
Michigan healthcare providers will soon be implementing new biometric protections for identity access management to patient care records.
IEEE data breach offers up 100K member logins
The usernames and passwords of 100,000 members of the Institute of Electrical and Electronics Engineers (IEEE) have been found unencrypted on a FTP server by Radu Dragusin, a Romanian researcher.
The VOHO campaign: Gh0st RAT spread by water-holing
The VOHO campaign would appear to be a sophisticated and extensive APT-style attack targeting primarily political activists, the defense industrial base and education – especially in the Boston and Washington DC areas.
Two separate privacy concerns rock Facebook
As Facebook shares continue their general downward trend, the social network giant is rocked by two new privacy concerns: a glitch that has started to expose old private messages; and the tie-up with advertising metrics company Datalogix.
Mobile malware up 2,180% in 2012
The rise of mobile malware is becoming an industry meme, and no wonder: As mobility starts to permeate every aspect of consumer and business lives, malware vectors are increasing.
