Home
113 items | 28 visits
-
Adobe Flash attack vector exploits insecure web design • The Register
"An unpatched security risk involving Adobe Flash creates a possible mechanism for hackers to load exploits onto websites."
-
Bug puts net's most popular DNS app in Bind • The Register
"Makers of Bind have warned of a security vulnerability in versions of the domain name resolution application that could allow attackers to trick servers into returning unauthorized results."
-
New iPhone worm detected that is designed to change the passwords on jailbroken handsets and connect them to a botnet - SC Magazine UK
"A new worm has been detected that hits jailbroken Apple iPhones harder than before.
Sophos claimed that this is the most serious malware to date as it turns infected iPhones into zombies, joining them to a botnet. Classifying it as ‘Duh' or ‘Ikee.B', it is designed to upload banking information to a server in Lithuania and to follow orders from remote hackers." -
FBI — High-Tech Heist - Press Room - Headline Archives 11-16-09
"It culminated a year ago this month—on November 8, 2008—when a wave of thieves fanned out across the globe nearly simultaneously. With cloned or stolen debit cards in hand—and the PINs to go with them—they hit more than 2,100 money machines in at least 280 cities on three continents, in such countries as the U.S., Canada, Italy, Hong Kong, Japan, Estonia, Russia, and the Ukraine.
share.gif
When it was all over—incredibly within 12 hours—the thieves walked off with a total of more than $9 million in cash. " -
How malware frames the innocent for child abuse • The Register
"Innocent people have been branded as child abusers after malware infected their PCs, an AP investigation has discovered.
Technically sophisticated abusers sometimes store images of child abuse on PCs infected by Trojans that grant them illicit access to compromised machines." -
Mossad hacked Syrian laptop to steal nuke plant secrets • The Register
"Mossad reportedly used a Trojan to hack into a Syrian official's laptop while he stayed in a London hotel.
The information extracted was used to plan a bombing raid at a suspected nuclear reactor facility in Syria, " -
Tech titans meet in secret to plug SSL hole • The Register
"Researchers say they've uncovered a flaw in the secure sockets layer protocol that allows attackers to inject text into encrypted traffic passing between two endpoints.
The vulnerability in the transport layer security protocol allows man-in-the-middle attackers to surreptitiously introduce text at the beginning of an SSL session, said Marsh Ray, a security researcher who discovered the bug. A typical SSL transaction may be broken into multiple sessions, providing the attacker ample opportunity to sneak password resets and other commands into communications believed to be cryptographically authenticated." -
Un virus informático inutiliza el sistema de dos prisiones | Barcelona | elmundo.es
"Un virus informático ha dejado inutilizado durante al menos tres días el sistema con el que trabajan a diario empleados y funcionarios del Departament de Justícia de la Generalitat."
-
Swedish spooks knocked offline by hack attack • The Register
"The website of the Swedish Signals Intelligence agency (Försvarets Radioanstalt, or FRA) was taken offline by a massive DDoS attack this week."
-
Gov't warns firms about online robberies
"Online criminals have used the Automated Clearing House (ACH) system to facilitate the theft of more than $100 million from small and medium businesses, the FBI warned this week.
The attacks typically use social engineering via e-mail messages to install malicious software on the computers of managers responsible for a business's financial transactions. The Trojan horse then transfers money from the firm's account, when the manager signs onto the business's bank account. " -
Cybercriminals down five British police forces in a year • The Register
"In the last year five British police forces have suffered major computer failures lasting three days or more as a result of malicious internet attacks.
The spate of intrusions by cybercriminals and the resulting outages was revealed recently by a senior authoritative source, who can't be identified because the disclosure was made under the Chatham House rule." -
AFP: Swiss foreign ministry hit by computer attack
"Unidentified hackers have penetrated the Swiss foreign ministry's computer system to seize data, forcing parts of it to be shut down for several days, the ministry revealed Monday."
-
California Investigating Problems With Voting-Machine Audit Logs | Threat Level | Wired.com
"California is conducting a months-long investigation into audit logs inside the state’s electronic voting systems after reports of serious flaws with the logs — including the ability for an election official or someone else to delete votes without leaving an electronic trail."
-
Scan of Internet Uncovers Thousands of Vulnerable Embedded Devices | Threat Level | Wired.com
"Researchers scanning the internet for vulnerable embedded devices have found nearly 21,000 routers, webcams and VoIP products open to remote attack. Their administrative interfaces are viewable from anywhere on the internet and their owners have failed to change the manufacturer’s default password."
-
«Ci sono meno virus? No, ce ne sono molti di più. Ma non ce ne accorgiamo più» - Corriere della Sera
"«I professionisti del malware mirano ai dati degli utenti e ai loro soldi. Quindi non hanno interesse a essere "visti"» "
-
NASA info security controls are broken, GAO concludes -- Government Computer News
According to a report from the Government Accountability Office (GAO), there are weaknesses in NASA's information technology systems that could be exploited to gain unauthorized access to those systems. The controls NASA is implementing under the requirements of the Federal Information Security Management Act (FISMA) are inadequately enforced. The GAO's report gathered information from NASA headquarters in Washington DC, the Goddard Space Flight Center in Maryland, the Jet Propulsion Laboratory in California and several other NASA facilities. The weaknesses noted include failing to require strong passwords, not encrypting password files, failing to restrict user access to least privileges needed, and outdated configuration and patch management.
-
Critical Adobe Reader vuln under 'targeted' attack • The Register
"Attackers once again are targeting an unpatched vulnerability in Adobe Reader that allows them to take complete control of a user's computer, the software maker warned."
List Comments
(0)
List Info
Sponsored Links
Ads by Google