Infosecurity News
Ministry of Defence drops another Adobe PDF blunder; reveals radar defense secrets
The UK's Ministry of Defence has once again demonstrated its lack of understanding of how Adobe PDF format files function as, according the Daily Star tabloid newspaper, anyone with a simple knowledge of page formatting can 'unblack' apparently censored data from a release on radar defense issues on its website.
ATM industry association issues anti-reverse engineering recommendations
The ATM industry association – the ATMIA – has published a best practice manual on cash machine security. And a new feature of its recommendations is for developers to help prevent reverse engineering of cash machine software.
Security researcher claims ID theft now more profitable than car theft
A leading IT security researcher claims that hackers are now electronically breaking into US car dealerships – not to steal cars, but the IDs and other credentials of car purchasers, most of whom buy on finance.
Low-cost kit for sale on eBay could hand national infrastructure secrets to terrorists
Reports that air traffic control data has been found on network kits sold on eBay comes as no surprise, says Philip Lieberman, president of Lieberman Software.
Chaos Computer Club warns on “German government” communications trojan
Rumors of a series of German government-developed spyware trojans have been bouncing around for several years, but now the Chaos Computer Club (CCC) claims to spotted one in the wild.
ISACA publishes COBIT process assessment model
Now into its 15th year, the COBIT 5 framework is in the final stages of ratification by ISACA and, as part of this evolution of the GRC (governance, risk and compliance) framework, the association has issued a new process assessment model.
Context discovers reverse web proxy security loophole; advises on remediation
Context Information Security has warned of a back door threat to the Apache platform that could allow unauthorized access to internal or DMZ systems.
Stanford Hospital faces $20 million lawsuit over patient data breach
A class-action lawsuit for $20 million has been filed against Stanford Hospital & Clinics over a patient data breach in which personal information on 20,000 emergency room patients was posted on a public website for a year.
Check Point introduces blades to tackle botnets
Check Point has taken the wraps off its 33rd software blade technology, which is an anti-botnet platform designed to counter the problems of botnets and advanced persistent threats (APTs).
£30 graphics card can brute-force crack any eight character password in just four hours
A £30 graphics card can now process as many as 158 million passwords a second
Plusnet migrates anti-spam systems to Cloudmark
Plusnet, the Sheffield-based ISP, has announced it is migrating its several million customers from their existing IronPort based anti-spam / anti-virus email security platform and over to a new solution provided by Cloudmark.
Weather report: Cloudy, with a chance of data leakage
Almost half of organizations said their IT staffs are not ready to adopt the cloud, with data security cited as a top concern, according to survey sponsored by Symantec.
Betfair security chief leaves in wake of data breach publicity
Hard on the heels of reports that data on Betfair's 3m-plus customer base had been hacked by cybercriminals in the Far East, reports are now saying that the the betting exchange's security chief has left the company.
Vodafone New Zealand's international net access hit by DDoS attack
The interconnected nature of the global internet was highlighted earlier this week when a DDoS attack on a Californian company also downed Vodafone New Zealand's international web access.
Earl Eugene Schultz: 10 September 1946 – 2 October 2011
It it with deep regret that Infosecurity has to report that Eugene Schultz – arguably one of the founding figures of the IT security industry – passed away on Sunday after a short illness.
McAfee joins SIEM buying spree by snapping up NitroSecurity
Another primarily SIEM firm is about to fall off the radar, as McAfee announced plans to purchase security information and event management (SIEM) provider NitroSecurity.
Academic tenure stifles cybersecurity innovation, academic and entrepreneur warns
Academic tenure discourages educational investment in cybersecurity innovation, Paul Barford, a computer sciences professor at the University of Wisconsin-Madison, as well as the chief scientist at cloud security specialist Qualys, told the Security Innovation Network (SINET) summit at the Massachusetts Institute of Technology on Tuesday.
Big day at IBM – acquires SIEM vendor Q1 Labs, establishes new security division
Today IBM made two announcements regarding its security business: the planned purchase of Q1 Labs and its intent to establish the IBM Security Systems division.
East Surrey Hospital loses details of 800 patients on an insecure USB stick
The East Surrey Hospital has admitted it lost the details of around 800 patients on unencrypted memory stick in September of last year. The revelation was made in the Surrey and Sussex Healthcare NHS Trust's annual report.
Large-scale spam campaigns lead to online banking heists
According to security researcher Brian Krebs, phishers and cybercriminals have been casting an unusually wide net of late, sending out huge volumes of fraudulent email designed to spread password-stealing banking trojans. And, he reports, judging from the number of victims that have reportedly costly cyberheists in the past two weeks, many small to medium sized organizations have been taking the bait.
