Infosecurity News
Black Hat Europe 2011 will report on Anonymous DDoS attack mitigation
The organisers of Black Hat Europe 2011, which opens for a four-day run next Tuesday in Barcelona, have announced that two security experts will be making a presentation on the recent WikiLeaks-inspired DDoS attacks.
Microsoft hit by $1.2 million fraud due to HTML code exploit
Microsoft has reportedly been hit by a scam involving its 'free Microsoft points' scheme, which offers free points on the software giant's Xbox 360 promotions programme. Hackers appear to have developed software to generate vast amounts of points by repeatedly refreshing the points allocation page using home-brew software.
New Jersey state agencies nearly auction off computers with sensitive data
New Jersey state agencies were about to auction off hundreds of computers containing sensitive information, including residents' social security numbers and medical records, when state auditors discovered them in a warehouse on their way to public auction.
Naval Academy adds cybersecurity to curriculum
The US Naval Academy announced this week the addition of several new educational offerings that seek to bolster midshipmen knowledge of cybersecurity related issues.
Business must use multi-layer authentication, says Gartner
Most single-layer authentication methods are broken and more are being broken all the time, says Gartner analyst Avivah Litan.
Environment Agency publishes iPhone/iPad/iPod app to warn of flooding
IT security and business continuity managers now have another reason to get an iPad or iPhone, as the Environment Agency has released an app to warn businesses and members of the public of the risk of flooding in their area. A version of the free app is also in the works for Google Android and BlackBerry users.
Cord Blood Registry loses unsecured data on 300,000 clients
The Cord Blood Registry (CBR), the nation's largest stem cell bank, admitted that it lost unsecured personal data on 300,000 cord bank clients, a breach that could cost it millions to address.
2010 cardholder-not-present fraud down by 10% to £239 million
Research just released by Retail Decisions suggests that cardholder-not-present fraud fell to £239 million last year, a reduction of 10% on the £266 million reported in 2009.
EU cybersecurity agency ENISA gets tough on Botnets
ENISA, the EU's cyber security agency, has published a study on the botnet threat and how to address it.
49% of UK organisations unable to remote-wipe their mobile devices
Research released today claims to show that 49% of businesses in the UK do not have the facilities to remote wipe their employee's mobile devices.
Beware enticing job adverts in the Middle East - they're not all they might seem (in several ways)
Panda Security is warning internet users to use extreme caution if they see an email advertising job opportunities in the Middle East
Microsoft is hoping for luck of the Irish in not patching zero-day IE flaw
Microsoft appears to be counting on the luck of the Irish (Is Bill Gates Irish?) in not patching a zero-day vulnerability in its Internet Explorer (IE) browser for this month’s Patch Tuesday.
(ISC)2 joins with M.Tech to offer information security classes in Asia-Pacific
The non-profit IT security trade group (ISC)2 is teaming up with M.Tech to deliver information security education classes in Australia, New Zealand, and the Philippines.
Amazon announces plans to security-check Android apps
Amazon has revealed it will launch its own app store, offering apps to users of Android and other smartphone platforms. The publishing giant also says it will be security vetting all apps before releasing them to users.
First iPhone cracker to publicly hack Windows Phone 7 at Canada's Pwn2Own
The fifth Pwn2Own cracking contest, due to take place later this week at the CanSecWest event in Vancouver, will see code cracker George Hotz - aka Geohot -, the infamous iPhone/PS3 technology cracker, publicly cracking the Windows Phone 7 smartphone platform.
Europeans store sensitive details on mobiles despite losses, survey shows
About one third of European smartphone users store credentials to access personal and corporate e-mail on their mobiles, a survey has revealed.
RFID credit cards are more secure than magnetic strip cards, says ITRC
Credit cards with RFID chips provide more data security than cards with magnetic strips, according to a study by the Identity Theft Resource Center (ITRC).
Chronopay being tapped for scareware frauds says researcher
The Russian Chronopay electronic payments system is increasingly being used by scamsters behind fake anti-virus software and 'scareware' applications, says a leading IT security researcher.
Illicit activity on Twitter soared by 20% during 2010
Research just released by Barracuda Networks claims to show that the crime rate on Twitter soared by 20% last year, after a quiet period in the latter part of 2009.
Accreditation body revises HIPAA data privacy and security standards
URAC, a nonprofit healthcare accreditation organization, has revised its Health Insurance Portability and Accountability Act (HIPAA) privacy and security standards.
