Infosecurity News
Windows 8 has larger attack surface than Windows 7, researcher warns
The attack surface in Windows 8 is bigger than in Windows 7 because of new components and changed processes, especially with the Metro interface, warns a McAfee researcher.
Win32/Gataka: a new banking trojan readies itself
As if there aren't already enough banking trojans to worry about, with SpyEye and Zeus, Carberp and OddJob, ESET is now warning that Gataka (aka Tatanga) – another man-in-the-browser trojan – appears ready for take-off.
Atomic clocks and earth rotation cause major outages
Several major systems reported outages this weekend. Some, such as Pinterest, Netflix and Instagram, were caused when lightning took out Amazon’s servers in Virgina. Others were caused by the more mundane and predictable Leap Second.
Baby Boomers more savvy about computer security that digital natives
Despite growing up in the computer age, Gen Y is less savvy about computer security than the Baby Boom generation, according to a survey by Check Point.
US, Canada agree to crossborder privacy principles
The US and Canada released a 12-point statement on privacy principles on Thursday, which provides common rules for crossborder sharing of personal information.
‘Graduated response’ returns to Ireland
An agreement between four music companies and Eircom (Ireland’s principle telecommunications provider) for a graduated response potentially leading to the disconnection of copyright infringing subscribers, is to be reinstated.
US professor demonstrates the ease with which civilian drones could be hijacked
In a test conducted above an Austin stadium, a civilian drone was first hijacked and then brought down using equipment that costs little more than an iPad.
Researcher finds security flaw in KeePass password manager
An independent researcher said he has found a security hole in the KeePass password manager that could enable a hacker to gain remote access to unencrypted user passwords.
McAfee Names Most Dangerous Football Team in Europe
Euro 2012, unsurprisingly, has attracted scammers and spammers. Using its SiteAdvisor system, McAfee has produced its most dangerous football team: the footballers' names that a search engine is most likely to lead you to a malicious or compromised website.
99% of attacks could be stopped by patching
“Malware authors love to use holes in 3rd party software”, comments Intego’s Lisa Myers. From their perspective, “the best thing about 3rd party software vulnerabilities is that people are very slow to patch them.”
Operation High Roller targets Mr. Moneybags using the cloud
A new report from McAfee and Guardian Analytics describes a new breed of sophisticated fraud attacks, called Operation High Roller, that target high-value bank accounts and transactions using cloud-based servers with multifaceted automation.
Researchers say they have cracked security tokens
A group of researchers are claiming that they have successfully exploited cryptographic flaws in security tokens that enable attackers to extract keys from them
Google Chrome turns 20
Aah, it's seems only yesterday that Chrome was a tiny little browser cradled in Google's arms. Well, Chrome has just released version 20 and is ready to take on the world, but not before a few security holes are fixed.
Cunard leaks personal details of 1000+ passengers
In what the company describes as a ‘system issue’, but what looks more like user error, Cunard inadvertently sent an email with a spreadsheet attachment containing the contact information of 1,225 Cunard passengers to an unspecified number of customers.
ACTA: the dead donkey that won’t lie down in Europe
Every EU committee tasked with recommending how the European Parliament should vote on the ratification of the ACTA agreement has now voted: No. But ACTA just won’t lie down.
FBI arrests: was UGNazi a target or an instrument?
In what has been described as “the largest coordinated international law enforcement [carding] action in history”, the FBI has arrested 12 US citizens among a total of 24 arrests in eight countries.
FTC goes after Wyndham Hotels for theft of 620,000 payment cards
The US Federal Trade Commission (FTC) has filed a complaint against Wyndham Hotels for data security failures that led to three data breaches in less than two years and resulted in the theft of close to 620,000 payment card numbers.
Android chosen for military security
Invincea yesterday announced a $21.4m contract from the Defense Advanced Research Projects Agency (DARPA) and the US Army Research Laboratory (ARL) for a secure version of Android phones and tablets.
Hackers crack CAPTCHA website security measures
Hackers are able to bypass CAPTCHA security measures using computer-assisted tools and crowdsourcing to gain access to personal and financial information, Imperva warned in its latest Hacker Intelligence Report.
Euro 2012 is the lure; pharmacy spam scam the result
Spammers and scammers use international events and disasters as the lure for their ware. Euro 2012 provides both: an international event littered with individual disasters when national teams are dismissed.
