Infosecurity News
Defence minister Nick Harvey to detail UK cyber battle plans
Armed forces minister Nick Harvey is to expand on recent announcements on UK cyber defences in London today.
Royal Navy website sunk by SQL injection hacker
One of the websites operated by the Royal Navy was shut down yesterday, after a hacker called TinKode gained unauthorised access to the server using an SQL injection attack.
ZeuS malware dominates October malware landscape
The latest monthly analysis of the malware landscape from Kaspersky Lab shows that the ZeuS trojan continued to strike, as it became one of the most commonly used and best-selling spy programmes on the online black market.
Many hands cooperated to build Stuxnet worm
More than 30 people built Stuxnet worm, noted Brian Tillett, information security researcher at Symantec. Stuxnet has attacked a range of targets including Iranian nuclear facilities and Chinese computers.
ICO planning data breach fines later this month says commissioner
The Information Commissioner's Office (ICO) is preparing to impose fines on companies that break provisions of the Data Protection Act later this month, the information commissioner, Christopher Graham, has said.
Massive DDoS attack knocks Burma offline
A serious distributed denial of service (DDoS) attack has effectively taken the country of Burma offline. The attack, which started on Tuesday, has reportedly clogged up the country’s main 45 Mbps internet feed, with DDoS packet rates of between 10 and 15 Gbps.
One in eight malware attacks are via a USB device, study shows
A growing number of malware attacks are using plug-in USB devices, according to researchers at security firm Avast Software.
SpyEye trojan attacks heated up in the summer
The SpyEye trojan, which is competing for criminal “business” with Zeus, has seen a recent surge in activity, according to Lance James, a security researcher at Damballa.
One in eight malware attacks are via a USB device, study shows
A growing number of malware attacks are using plug-in USB devices, according to researchers at security firm Avast Software.
Tokyo police probe leak of anti-terror informant information
The Tokyo Metropolitan Police is investigating a large leak of sensitive international anti-terrorism documents – including names and addresses of informants – that were placed on the internet, according to Japanese press reports.
Google wins court approval for $8.5m settlement of Buzz privacy case
Google has won preliminary court approval to settle a class-action lawsuit related to alleged privacy violations caused by its Buzz social networking service.
Center for Internet Security updates information security metrics
The Center for Internet Security (CIS) released an updated version of its information security metrics developed through the consensus of 150 information security experts in the public and private sectors.
FBI arrests California man in internet "sextortion" case
The Federal Bureau of Investigation (FBI) arrested a 31-year-old California man for hacking into victims’ computers, downloading explicit photos, and then using the photos to extort more photos and videos from the victims, who were usually teenage girls.
SCADA systems can be located via public search engine says CERT
The Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) has issued an industry alert to SCADA systems operators and other interested parties that many SCADA installations can now be located on the web using the SHODAN public search engine.
Idappcom introduces freeware IP traffic analysis software
Vulnerability specialist Idappcom has released a freeware version of its Traffic IQ Pro security audit and penetration testing software.
Politically motivated denial of service attacks on the rise
A new distributed denial of service (DDoS) trojan, which attacks blogs and forums that criticize the Vietnamese Communist Party, is part of an increasing trend of politically motivated cyber attacks, according to Joe Stewart, director of malware analysis at SecureWorks’ Counter Threat Unit.
Webroot buys Prevx
Internet security firm Webroot has acquired Derby, UK-based anti-malware cloud provider Prevx.
Webroot buys Prevx
US internet security firm Webroot has acquired Derby-based anti-malware cloud provider Prevx.
Google offers bounty for web application bugs
Google is expanding its reward program to compensate security researchers who find flaws in Google’s web applications, such as YouTube, Blogger, and Orkut.
Facebook developers who sold user identification suspended for violating privacy policies
Facebook has revealed it has suspended an unspecified number of developers for selling user identification numbers (UIDs) to an unnamed data broker.
