Infosecurity News
Barracuda Networks bug bounty scheme slammed by Idappcom
Email and web security specialist Barracuda Networks has launched a 'bug bounty' scheme – offering programmers more than $3100 to anyone who can hack into their security software – and has immediately flown into a storm of criticism for sending the wrong message.
Over a million mobile phones hit by virus in China
Over a million mobile phones in China have been hit by a virus that steals contact information to commit click fraud and propagate the virus.
Verizon launches website to collect information on data breaches
Verizon has launched a website designed to collect and share information about data breach incidents that are reported by participating organizations.
Google Android security exploit made fully public by ITsec researcher
An IT security researcher has reportedly released the source code that could allow a hacker to gain remote access to a Google Android smartphone across the internet.
Digital rights management's role in business explained
Digital rights management (DRM) is fast becoming a normal security feature in a growing number of Far Eastern companies and, says Jason Sohn, deputy general manager with Korean DRM specialist Fasoo.com, the same thing is now happening here in the UK.
Congresswoman says chance of cyber attack against electric grid is 100%
Rep. Yvette Clarke (D-NY) delivered the evening keynote during the SC Congress in mid-town Manhattan yesterday, as the member of the House Committee on Homeland Security told the audience that the US electric grid remains vulnerable to a near-certain cyber attack.
HP pays $16.25m in fraud settlement
Hewlett-Packard is to pay $16.25m (£10m) for alleged fraud, following an extensive investigation by the Federal Communications Commission (FCC) and Department of Justice (DoJ).
EU legal threat stirs Home Office on interception opt-ins
People who use the internet may have greater protection from electronic eavesdroppers following a consultation on changes to the Regulation of Investigatory Powers Act (RIPA).
Entrust teams with EDAPS to secure Interpol's identification documents
Entrust, the identity security specialist, has teamed up with EDAPS, the Ukrainian consortium of high-tech firms, to develop a highly secure document identification system for Interpol, the international crime agency.
Forrester zero trust model design to make entire network secure
Forrester said that it has developed a “zero trust” model designed to make security ubiquitous through the network, not just at the perimeter.
Computer virus sparks bizarre $6 million fraud case
Composer Roger Davidson was scammed out of millions of dollars after he brought his laptop into a computer repair shop in Westchester County, New York, in 2004 to get rid of a virus.
Trend Micro's Rik Ferguson reports on a new Facebook phishing vector
The fact that social networking portal has more than 500 million members attracts attacks like moths to a flame. Trend Micro's Rik Ferguson has seen an interesting new twist to phishing this week on the site.
Defence minister Nick Harvey to detail UK cyber battle plans
Armed forces minister Nick Harvey is to expand on recent announcements on UK cyber defences in London today.
Royal Navy website sunk by SQL injection hacker
One of the websites operated by the Royal Navy was shut down yesterday, after a hacker called TinKode gained unauthorised access to the server using an SQL injection attack.
ZeuS malware dominates October malware landscape
The latest monthly analysis of the malware landscape from Kaspersky Lab shows that the ZeuS trojan continued to strike, as it became one of the most commonly used and best-selling spy programmes on the online black market.
Many hands cooperated to build Stuxnet worm
More than 30 people built Stuxnet worm, noted Brian Tillett, information security researcher at Symantec. Stuxnet has attacked a range of targets including Iranian nuclear facilities and Chinese computers.
ICO planning data breach fines later this month says commissioner
The Information Commissioner's Office (ICO) is preparing to impose fines on companies that break provisions of the Data Protection Act later this month, the information commissioner, Christopher Graham, has said.
Massive DDoS attack knocks Burma offline
A serious distributed denial of service (DDoS) attack has effectively taken the country of Burma offline. The attack, which started on Tuesday, has reportedly clogged up the country’s main 45 Mbps internet feed, with DDoS packet rates of between 10 and 15 Gbps.
One in eight malware attacks are via a USB device, study shows
A growing number of malware attacks are using plug-in USB devices, according to researchers at security firm Avast Software.
SpyEye trojan attacks heated up in the summer
The SpyEye trojan, which is competing for criminal “business” with Zeus, has seen a recent surge in activity, according to Lance James, a security researcher at Damballa.