Infosecurity News
Latest Mac malware warning gets no love
A new piece of malware targeting the Mac has been identified by security firm Sophos, as the developer believed to have created a similar trojan for Windows denies having any hand in the Mac-based version.
Ernst & Young Security Testing Centre Evolves With Industry
Information security testing needs to be done in a real-world environment, tested by the most technically advanced minds in the world. According to the Ernst & Young information security services team, they have it all under one roof at their Advanced Security Centre in Houston, Texas.
Two Android viruses circulating in the wild
Two Google Android viruses have been spotted circulating and infecting users’ smartphones in the wild. The viruses are potentially nasty because one – SW.SecurePhone – uploads data to remote servers from the users' handset, while the other – SW.Qieting – auto-forwards messages to a remote number.
Texas man acknowledges hack of NASA computers
A 26-year-old man from Houston plead guilty to hacking and wire fraud charges last week in a case involving the 2008–09 breach of a Minnesota-based company. In a separate incident, however, he will apparently avoid criminal charges for accessing two NASA servers.
UPDATE: Stolen network equipment causes Vodafone UK network outage
The theft of specialist equipment has prevented thousands of users from accessing the Vodafone network.
Obfuscated multi-browser banking trojan spotted by Spain's S21sec
A Spanish IT security research firm has spotted a man-in-the-browser trojan that injects HTML in all of the mainstream Web browsers and uses rootkit techniques to hide its presence.
Sophos warns on 'beta test' Mac OS X backdoor trojan
It used to be a reflection of the maturity of the computer software marketplace that applications went through beta testing to iron out bugs. Now it seems the same process applies to malware, as Sophos is warning users to be on alert for a beta test of a new Mac OS X trojan.
Mass General takes $1 million hit for losing 193 patient records
Following closely on the heels of its first Health Insurance Portability and Accountability Act (HIPAA) privacy rule fine, the Department of Health and Human Services (HHS) has doled out a $1 million fine against Massachusetts General Hospital for a data breach involving 192 patients begin treated for infectious diseases.
SpamIt and Glavmed pharmacy spam campaigns generate $50m a year
Reports are coming in that a cybercriminal gang - with members who were involved in the Storm and Waledac worms - have raked in more than $150 million promoting unlicensed online pharmacies between May 2007 and June 2010.
ISC releases security fix for Bind DoS vulnerability
The Internet Systems Consortium has published an advisory and an update for the Bind domain name system software versions 9.7.1 to 9.7.2-P3.
ICO slams Cambridgeshire County Council after USB stick loss
The latest 'victim' of USB stick loss, Cambridgeshire County Council, has been given an electronic dressing down by the Information Commisoners Office for what the regulator calls a clear breach of the Data Protection Act.
Exxon, Shell, BP hacked in Night Dragon attacks
Exxon Mobil, Royal Dutch Shell and BP were among the oil companies targeted by hackers working through internet servers in China, say US reports.
Comodo CEO paints anti-virus marketing as “unethical”
Melih Abdulhayoglu, founder of Comodo, is never afraid to make some bold claims or call out the big boys of the anti-virus industry. Once again, the company’s chief executive did not fail to disappoint when he sat down with Infosecurity at last week’s RSA Conference in San Francisco.
Libyan authorities restrict internet access
The Libyan government could pull the plug on the country's internet as protests sweep the country.
Libyan authorities restrict internet access
The Libyan government could pull the plug on the country's internet as protests sweep the country.
Iranian Cyber Army turns Voice of America into pro-Iranian propaganda service
The self-styled Iranian Cyber Army was able to hack into the US government-funded Voice of America website and transform the home page into a pro-Iranian banner that instructed the US government to “stop interfering with Islamic countries.”
UK passport office violated Data Protection Act with data breach
The UK Identity and Passport Service (IPS) violated the Data Protection Act when it lost the passport renewal applications of 21 UK citizens, according to the Information Commissioner’s Office (ICO).
Audit criticizes FERC for lapses in electric grid cybersecurity standards
The Federal Energy Regulatory Commission (FERC) approved flawed cybersecurity standards for the US national power grid and failed to adequately monitor their implementation, according to an audit by the Department of Energy’s Office of the Inspector General (OIG).
Internet 'kill switch' reports highlight need for contingency planning, say Infosecurity Europe organisers
Reports that President Obama is formulating plans to develop an internet 'kill switch', following infrastructure issues raised during the aftermath of the Egypt internet shutdown, should be viewed as a red flag to IT security professionals.
Russian police squash major pharmacy spam campaign
It seems that Russian police are working steadily to crush the rising tide of so-called pharma spam campaigns, with one security researcher having heard about a raid on the hackers behind the Rx-Promotions scheme.
