Infosecurity News
Black Hat 2012: Pappas bounces his way to $200,000 Microsoft BlueHat prize
Vasilis Pappas has won Microsoft's $200,000 BlueHat defensive computer technology research prize for his kBouncer, an efficient and fully transparent return-oriented programming (ROP) mitigation technique.
Black Hat 2012: FAA's new air traffic control system vulnerable to cyber attack
The US Federal Aviation Administration’s (FAA) new air traffic control system could be vulnerable to cyber attack, warned researcher Andrei Costin at the Black Hat conference this week in Las Vegas.
Russian websites pushing Olympics malware for Android
On the day of the official launch of the 2012 London Olympic Games, GFI Software warns Android gamers about fake 2012 apps being offered from Russian websites.
YouView: business and security issues
YouView, an internet-connected variant of Freeview – chaired by Lord Sugar and supported by all the major UK TV channels, and ISPs such as BT and TalkTalk – has finally launched in the UK, but to more criticism than praise.
Mahdi malware campaign resurrected
After having its command-and-control server shut down, the Madhi (Messiah) malware is back with improved features, warns Kaspersky Lab.
NIST: You can't tell software misuse without a scorecard
The US National Institute of Standards and Technology (NIST) has issued a scoring system for computer security managers to assess the severity of security risks caused by software misuse.
BlackHat 2012: Microsoft Incorporates BlueHat ROP Mitigation Technology into EMET
One of the three finalist entries for Microsoft's first-ever BlueHat Prize for building new security defense technologies is now part of the software giant's free Enhanced Mitigation Experience Toolkit (EMET).
Software-related medical device recalls raise security, privacy concerns
Close to 15% of medical device recalls by the US Food and Drug Administration (FDA) between January 2009 and May 2011 involved software problems, which could pose privacy risks to patient data, according to a study funded by the US Department of Health and Human Services.
Siemens patches security flaws in SCADA systems
Siemens has patched a number of security holes in its SIMATIC supervisory control and data acquisition (SCADA) systems, according to the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT).
EU reaches agreement with Google over competition issues
European Union (EU) regulators have a reached an “understanding” with Google over concerns about anti-competitive behavior on the part of the search engine giant.
Black Hat 2012: ModSecurity open-source firewall now supports Apache, IIS and Nginx
The free open-source web application firewall known as ModSecurity – once just an Apache plug-in – now also plugs directly into IIS and Nginx web servers, and is particularly good for virtual patching.
Financial malware uses Facebook for new children’s charity scam
Earlier in May it was found that Citadel was delivering the Reveton ransomware. Now Trusteer has discovered it delivering a children’s charity scam to Facebook users.
New Mac trojan discovered: OSX Crisis (or Morcut)
Mac security firm Intego was the first to sound the alarm yesterday, calling the newly discovered trojan Backdoor:OSX/Crisis. Today Sophos issues its own warning about OSX/Morcut.A – which seems to be the same malware.
FTC warns unauthorized wireless charges becoming a significant problem
The US Federal Trade Commission (FTC) is warning that unauthorized charges on wireless phone bills, known as “cramming”, are becoming an increasingly serious problem for US consumers.
Boston hospital loses laptop with patients' personal information
A physician’s unencrypted personal laptop that may have contained protected health information on 3,900 patients at Boston-based Beth Israel Deaconness Medical Center was stolen, the hospital admitted Monday.
Latest report shows India now ahead of the US in email spam volume
The latest 'Dirty Dozen' spam-relaying countries report from Sophos shows that Asia in general, and India in particular, is now responsible for the greatest volume of the world’s spam.
Pinterest locks down accounts to stem hacking
The social sharing site Pinterest has begun temporarily locking down accounts in an effort to combat an increase in suspected hacking on the site.
More than 100 infected PCs found in Japan’s Finance Ministry
The Japanese Finance Ministry announced on Friday that it had discovered 123 desktop computers that had been infected with a remote access trojan between January 2010 and November 2011.
Growing concern over what Microsoft may be doing with Skype
Following the first ever loss reported by Microsoft last week – largely blamed on the purchase of aQuantive in 2007 – it is the purchase of Skype for $8.5 billion in 2011 that is most concerning security folks.
Nearly 70,000 mobile phones will be lost or stolen during the London Olympics
Venafi has been extrapolating statistics from mobile phone loss – and expects the equivalent of 200 million books full of data will be lost during the course of the London Olympics.
