Infosecurity News
A call for a new standard in infosec training and awareness
A talk at the Information Exploitation Conference at the Home Office’s Security and Policing Exhibition 2012 today addresses the disconnect between user and professional, and calls for a new standard that focuses on training and awareness.
IE6 users: no longer caught between a rock and a hard place
As Microsoft seeks to wean users away from the aging and insecure Internet Explorer 6, companies with IE6 legacy applications are stuck – they can’t upgrade to a newer OS because IE6 is no longer supported; and they still need IE6.
Get your free iPhone 5 here...NOT!
The iPhone 5 is expected to hit the market sometime this year, but scammers are looking to give you one for "free" right now.
I'm not behind Kelihos botnet, claims Sabelnikov
Andrey Sabelnikov, named in Microsoft court papers as controller of the Kelihos botnet, declares his innocence in a LiveJournal post.
Warining issued for exploit of patched flaw in Windows Media Player
Trend Micro researchers are warning that a recently patched flaw in Windows Media Player is being used by remote hackers to launch malware.
Technical controls not enough to ensure real cyber security
A new report from the Information Security Forum (ISF) proposes the evolution from simple data defense to cyber resilience.
Is Carberp poised for global expansion?
New research from anti-malware company ESET shows how easy it is to tailor Carberp to attack new and different targets.
O2 apologizes for security breach
Mobile operator O2 has apologized for a technical problem that resulted in subscribers' phone numbers being included in header information sent to websites they visited.
EC publishes proposed data protection reforms
European Justice Commissioner, Viviane Reding, has unveiled the new European data privacy framework that includes a new regulation and a new directive.
Pacific Northwest train signals disrupted by hacker, says TSA
Hackers, possibly from abroad, attacked a Pacific Northwest railway company’s computer system, disrupting railway signals in December, according to the US Transportation Security Administration (TSA).
O2 investigates security risk allegation
UK mobile operator O2 is investigating claims it is putting customer security at risk by sending their phone numbers as header information to websites they visit.
NIST issues guidelines for public cloud computing security
The National Institute of Standards and Technology (NIST) has issued its first set of guidelines for managing security and privacy issues in the public cloud.
IT security budgets are expected to increase this year
More than half of organizations expect to increase their information security spending in 2012, some by 8% of more, according to a survey by the Enterprise Strategy Group (ESG).
Viruses and worms are evolving into Frankenmalware
Viruses infect executables. Worms are executables. So viruses can, and are, infecting worms. The result, claims anti-virus company BitDefender, is a new category of threat: Frankenmalware.
Use of Google Docs is illegal in Norway
The Open Digital Policy Organization reports that the Norwegian Data Inspectorate has effectively declared use of Google Apps in Norway to be illegal.
New York utilities disclose third-party unauthorized access to customer data
Two New York power companies, which have 1.8 million customers, have disclosed that customers' personal information, including social security numbers, dates of birth, and financial account data, may have been compromised by third-party unauthorized access.
MegaUpload typosquatting exposed
The MegaUpload take-down is one of the hottest stories on the net, involving the FBI, illegal file-sharing, hackers’ revenge, the specter of SOPA and more. But don’t be too curious...
CyberSource releases its 8th annual UK fraud report
CyberSource, a payment management company working in e-commerce and providing a fraud management system to e-commerce merchants, has published its latest report: UK Online Fraud Report 2012.
Scammers offer "free" $500 Amazon gift card on Facebook
Facebook scammers are offering a “free” $500 Amazon.com gift card as part of a premium rate mobile phone service and affiliate marketing site scheme.
Microsoft names the man behind the Kelihos botnet
Last September, Microsoft and Kaspersky Labs took down the Kelihos botnet. While Kaspersky now has control of the botnet, in a court filing in Virginia, Microsoft yesterday named Andrey Sabelnikov as the owner and operator of Kelihos.