Today’s posting sponsored by:
December 11, 2009
The bad guys sharpened their skills, rather than just relying on large spam runs and malware attacks
December 10, 2009
ScanSafe reports widespread attack that continues to grow
December 9, 2009
Keylogging and spyware are among the most commonly found exploits in breached companies, report says
December 1, 2009
Rapid7 takes first step in integrating penetration testing tool with its NeXpose vulnerability scanner, rolls out new free version of NeXpose
December 1, 2009
Man allegedly broke into almost 300 RuneScape accounts, police say
November 30, 2009
Difficult to detect reliably, heap spraying was behind an exploit of IE and Adobe Reader
November 30, 2009
A common thread between all of these incidents: They could have been avoided
November 25, 2009
Phishing campaign has hit more than 3.5 million mailboxes, researchers say
November 20, 2009
‘Kryogeniks’ gang redirected traffic to its own Web page in 2008
November 18, 2009
Socially engineered e-mail designed to compromise a network by bypassing technological network defenses and exploiting the person at the keyboard
November 17, 2009
IT can play a major role in boosting the effectiveness of response efforts, say alliance sponsors that include Microsoft, Google, Yahoo
November 16, 2009
Judge approves settlement of lawsuit; three Latvian suspects extradited
November 16, 2009
BC/BS and its related companies Anthem and Empire failed to inform health care providers until late last month, says Connecticut Attorney General Richard Blumenthal
November 11, 2009
New hacking tool steals personal data off ‘jailbroken’ iPhones via a wireless network
November 11, 2009
Group broke into credit card systems at RBS Worldpay, DoJ says
November 10, 2009
Database may have been compromised via third party vendor
November 9, 2009
New service reflects shift to ‘data-centric’ view of security, Verizon says
November 6, 2009
Reactivation of Gumblar.cn domain could have ripple effect, researchers say
November 5, 2009
Countries least infected include Peru, the Netherlands, and Sweden
November 3, 2009
McAfee report says botnet operators are increasingly contracting out their botnets to distributed denial-of-service attack service providers
November 3, 2009
New technology ‘patches’ the operating system kernel, protects it from rootkits
November 3, 2009
FBI says there’s been a significant increase in fraud involving the exploitation of valid online banking credentials belonging to small and medium businesses, municipal governments, and school districts
November 2, 2009
The new Microsoft Security Intelligence Report (SIR) found worm infections nearly doubled, vulnerability counts down by nearly one-third in the first half of 2009
October 28, 2009
Scam email messages being generated at a rate of 1,000 per minute
October 28, 2009
W32.Silon bypasses security tokens, banking card readers and uses a two-pronged payload to steal login information and commit online financial fraud
October 16, 2009
Xiang Dong Yu allegedly copied 4,000 sensitive Ford documents onto a USB drive before leaving the company
October 14, 2009
Proactive self-defense can make DDoS attacks less painful and damaging
October 8, 2009
Bust represents largest number of defendants ever charged in a U.S. cybercrime case, FBI says
October 5, 2009
FBI investigation of 2008 incident leads Express Scripts to notify hundreds of thousands about potential breach
October 5, 2009
Most companies do not have the capability to determine the full scope of security incidents
September 23, 2009
Case raises questions about banks’ liability in breach of customers’ online accounts
September 23, 2009
New survey shows less than one-third of small businesses are PCI-compliant, while 70 of large businesses are
September 22, 2009
Cyveillance detects 176,864 distinct phishing attacks between June and August 2009, one of the highest three-month totals on record
September 17, 2009
Web-based search service lets individuals check — in detail — whether their personal information has been compromised
September 8, 2009
Errata Security’s TwiGUARD service detects Twitter spam, malicious links
August 31, 2009
Forensic specialists who investigated hacks of a hotel chain, casino, and restaurant share details on the sophisticated malware used to successfully steal confidential data
August 31, 2009
Jabber IM module built into Trojan sends compromised data quickly to mobile criminals
August 27, 2009
U.K. researcher says vulnerability in Twitter API lets an attacker take over a victim’s account — with a tweet
August 18, 2009
Web Hacking Incidents Database (WHID) report finds that one-fifth of Web incidents were aimed at Web 2.0 sites in the first half of 2009
August 18, 2009
Alleged mastermind behind Heartland, Hannaford’s, and 7-11 breaches used SQL injection, sniffers, custom malware in attacks
August 7, 2009
Hackers “hijack” keywords to U.S. federal forms, placing malware at top of search results
August 6, 2009
Tweets go silent as microblogging social network site gets downed by a distributed denial-of-service attack; Facebook and LiveJournal also reportedly hit
August 5, 2009
Security expert converts popular music/movie player and browsing device into a penetration testing, hacking tool
August 4, 2009
Solution prevents man-in-the-middle attacks by detecting SSL traffic, validating SSL certificates, and stopping connection, if warranted
August 3, 2009
While white-hat hackers were trying to stay one step ahead of the bad guys at Black Hat USA and Defcon, a real computer crime was committed nearby
July 27, 2009
Offer will demonstrate what spyware and malware is able to get by the organization’s spam filter, and will provide insight into Internet usage trends
July 22, 2009
Company can perform forensic investigations and oversee remediation efforts following a payment card data compromise
July 16, 2009
Twitter co-founder blames weak passwords, likens incident to ‘underwear drawer’ being rifled through, while experts question internal security controls
July 10, 2009
Researchers say worm sends tweets with a variety of URLs that lead victims to malware infection
July 7, 2009
Researchers in 2008 disclosed Windows video control vulnerability that’s now spreading attacks to some .com, .org Websites
