Infosecurity News
Nasdaq breach allowed hackers to spy on company directors
Hackers who infiltrated Nasdaq’s computer systems last year were able to eavesdrop on communications of company directors, according to people familiar with the investigation.
AVG's popularity means it is being targeted by fake maintenance site scams
AVG's free anti-virus is one of the most popular free IT security applications in the market, but according to one security researcher, its success has meant a surge in the number of fake download sites charging a subscription for the service.
RSA hackers may have hit several hundred firms, says security researcher
The widely publicized data breach revealed by RSA back in March may not have been the only one to hit a major company, a leading security researcher has said.
IP Expo: Symantec talks up security threats to communications
At the IP Expo event in London this week, senior managers with Symantec were out in force, explaining to show visitors why communications and security technologies are now closely integrated. Alongside sponsoring a security theater at the show, the IT security vendor was also talking about the results of its 2011 threat management survey.
Georgia Tech turns an iPhone into a SpyPhone
Researchers at Georgia Tech have built on the smartphone accelerometer analysis carried out by iSuppli back in 2009 and successfully used an iPhone 4 to measure vibrations from a nearby computer keyboard, allowing them to map which keys are being pressed on the desktop computer.
IP Expo: Check Point explains its cloud strategy
At the London IP Expo event yesterday, Infosecurity got a chance to catch up with Caroline Ikomi, technical director with Check Point, where she brought us up to speed on how the firm is adapting to a cloud-based IT landscape.
Nemours loses data on 1.6 million patients and employees
Nemours, a children’s healthcare system serving the Eastern US, has admitted that three unencrypted backup tapes containing personal information on 1.6 million patients and employees have been lost.
Team SwaStika hacks hundreds of thousands of Facebook accounts – kind of
Reports are coming in that a hacktivist group called Team SwaStika has hacked a group of Facebook accounts. However, according to Rik Ferguson, Trend Micro's senior security researcher, the group may be attempting to take credit for compromising account details that they really had nothing to do with.
US government on Libya: We disrupt air defenses the old-fashioned way – we burn them
Prior to the NATO airstrikes in March, the US government considered launching cyberattacks to disrupt the Libyan government’s air-defense systems, but decided to disrupt them the old-fashioned way, by blowing them up.
London Gatwick Airport introduces iris biometrics “at a distance”
The world of biometric iris recognition without having to place your eye into a reader has been introduced at London Gatwick Airport, with border officials using Human Recognition Systems' Mflow track to read travelers' irises at a distance.
Hackers forums provide sense of community, information security intelligence
Hacker forums provide a sense of community for the hackers, as well as a source of intelligence for information security professionals, according to a new report by data security firm Imperva.
NIST provides guidance on information system security monitoring
The National Institute for Standards and Technology (NIST) has issued guidance to organizations on how to monitor the security of their information systems, which include computer networks, devices, and software.
NoScript goes mobile on smartphones and tablets
One of the most popular add-ons for Mozilla Firefox, and one that stops a lot of scripted malware from 'doing things' on your computer, has been ported to the Google Android and Maemo smartphone/tablet computing platforms.
DDoS attacks against e-commerce sites last 40% longer, says VeriSign
Distributed denial of service (DDoS) attacks against e-commerce sites last 40% longer than average DDoS attacks, according to VeriSign research.
Class action lawsuit seeks $4.9 billion over TRICARE data breach
A class action lawsuit was filed last week in US federal court seeking a total of $4.9 billion for the data breach involving patients treated through the Department of Defense’s TRICARE healthcare system.
Who’s watching the watchdog? SEC admits to possible data breach
At the same time that the Securities and Exchange Commission (SEC) was preparing corporate guidelines for cybersecurity risk disclosure, the securities market watchdog was informing its employees that their personal brokerage account information may have been compromised by a contractor.
Sesame Street's YouTube channel hit by porn upload hack
The YouTube channel of Sesame Street – the puppet comedy series that launched the career of Jim Henson and his muppets, as well as amusing millions of kids over the years – was hit by a porn hacking attack on Sunday.
WebView system used in Android app development may be flawed says US professor
A leading US academic will shortly publish a paper highlighting potential security problems with the WebView platform, the coding system used to create many of the most popular Google Android apps.
RSA Europe: John Colley talks about the past, present and future of (ISC)²
Infosecurity got a chance to sit down with John Colley, managing director EMEA for (ISC)², at last week's RSA Europe, and we learned that one of his current aims is to encourage new members – who do not currently satisfy the membership criteria – to sign up for associate membership of the security association.
New York credit card fraud bust just ‘tip of the iceberg'
The indictments of 111 people in New York for operating a massive credit card fraud ring is just the “tip of the iceberg” when it comes to credit card fraud, judged Paul Rodgers, chairman of UK payment card industry group Vendorcom.