Information Security News and Exploits

Providing you with Security News and Exploits from all over the web.

Entries for July 13th, 2010

74 Percent of IT Pros Admit to Network Snooping

A recent study by Cyber-Ark has revealed that an increasing number of IT professionals are using their administrative powers to access information not relevant to their role.
Cyber-Ark surveyed 400 IT professionals about how they use their privileged accounts. The survey found that 64 percent of UK IT professionals admitted to accessing information not relevant to [...]

Leave a Comment

IT Jobs’ Increase for June Does Not Signal Recovery

The jobs situation for technology workers is rocky. It is reflective of the larger economic picture in 2010. Data put out on June from the Department of Labor showed an increase of more than 9,000 jobs. It is welcome news, especially for those who have found employment.
The bigger jobs picture, however, continues to be murky [...]

Leave a Comment

White hat hacker Maiffret returns to eEye

Security researcher and former Microsoft gadfly Marc Maiffret has returned to the company he started when he was a teenager, eEye Digital Security.
Maiffret had been serving as chief security architect at antimalware firm FireEye since December and will remain on the company’s technical advisory board, Maiffret said in an interview on Monday.
"I’m coming back to [...]

Leave a Comment

Bizarre phone ransom Trojan found by researchers

Researchers have discovered a bizarre piece of Trojan ransomeware which disables programs on infected PCs before demanding victims make an unaccountably small payment to a Ukrainian mobile phone network in return for an unlock code.
According to Webroot, the Krotten ransom Trojan is one of the oddest pieces of malware of the year. Taking the path [...]

Leave a Comment

Are you following cloud security standards?

Weâ??ve come a long way from the early days of cloud computing.
We now look at cloud computing seriously in terms of a â??Business Benefits with Security, Governance and Assurance Perspectiveâ??â?? an aptly titled ISACA Emerging Technology White Paper. To help promote information security and good practices related to cloud computing, ISACA joined the CSA (Cloud [...]

Leave a Comment

Happy Hackers’ Heaven On The Horizon

After Tuesday, July 13th, happy attackers will take advantage of your procrastination and target millions of businesses and individuals still running Windows XP SP2 and Windows 2000. All that low hanging fruit will cause a feeding frenzy and heaven for malicious hackers is on the horizon.
All Microsoft support stops after tomorrow, July 13, for Windows [...]

Leave a Comment

Got an iPhone 4? You may need duct tape

Has it really come to this?
The most talked-about phone in the U.S. — Apple’s iPhone 4 — has a design flaw that’s best fixed with a sliver of duct tape, according to Consumer Reports. "It may not be pretty, but it works," writes Mike Gikas on that nonprofit consumer group’s electronics blog.
The patch — which [...]

Leave a Comment

Hacker worries continue for iPad users

There’s new concern for iPad users after hackers got into the AT&T website and exposed thousands of user email addresses last month.
The breach also exposed a little known number that could lead a hacker to a user’s front door: the ICC-ID number. Experts warn if a hacker has your ICC-ID number and they have the [...]

Leave a Comment

iPhone 4 Carrier Unlock Achieved!

Well known iPhone hacker â??Planetbeingâ?? has succeeded in unlocking the carrier lock on the iPhone 4. He will be releasing the unlock for public very soon.
It has been long waiting for a carrier unlock for the iPhone 4. Hackers thought itâ??s wonâ??t take more than a week to unlock it but they have been failing [...]

Leave a Comment

Facebook for hackers shut down in Pakistan

Five alleged hackers have been arrested by the Pakistani authorities in raids that led to the closure the Pakbugs hacking and carding forum.
The operation, run by Pakistan’s Cyber Crime department of Federal Investigation Agency (FIA), followed complaints by "national and multinational organisations" over a series of website defacement and hack attacks. Pakbugs is blamed for [...]

Leave a Comment

It’s time to backup your cloud, too

I previously wrote about how you should take time and change your passwords. At the time it was in response to Google saying that:
The intruders do not appear to have stolen passwords of Gmail users â?¦
Well, two instances have occurred to friends and family recently that have me even more concerned. The first instance involved [...]

Leave a Comment

Hackers Using eBay Ruse in Malware Attack

Internet users are being warned this week to be on high alert for a new malware campaign that’s using a bogus request for payment from eBay as a front to infect users’ PCs and mobile devices with a variety of spam and malware.
According to researchers at security software vendor Sophos, the ploy begins with an [...]

Leave a Comment

Microsoft patches critical bugs in Windows, Office

Microsoft today patched five vulnerabilities in Windows and Office, including a bug hackers have been exploiting for almost a month.
As expected, today’s patch slate was short: Just four security updates that included fixes for five separate flaws. Of the four updates, three were rated "critical," the highest threat ranking in Microsoft’s four-step scoring system. All [...]

Leave a Comment

Is It ‘Code Red’ for Windows OS?

What do you do when you find a serious vulnerability in Microsoft server OS source code? You could tell the whole world about it, or you could keep schtum and just inform Microsoft. Or, of course, you could tell no one and use the knowledge to go and attack other systems.
What would the Russians do? [...]

Leave a Comment

New Windows Phone 7 features announced, emulator cracked

Microsoft announced new capabilities for Windows Phone 7, including Web-based access to phone data, a "Find My Phone" service, and the ability to connect with Zune software on a PC via Wi-Fi. Separately, hackers have already cracked the emulator released yesterday, allowing the new build of WP7 to be tried out on a desktop PC.
The [...]

Leave a Comment

RSA Conference Plans To Show Some Real Hustles

Hackers may be technology experts, but a lot of security exploits are scams and confidence tricks, pulled off by hustlers whose skills verge on magic.
The RSA Conference 2010 in London will reflect that, in its closing session, â??To Catch a Thief: What IT Security Can Learn From Con Artists and Magiciansâ?, which features Alexis [...]

Leave a Comment

People ‘do not understand’ the security risks of social networking

Britons do not fully understand the security risk involved with social networking, according to one expert.
A report published earlier today (July 13th) by internet security firm Webroot revealed that 39 per cent of mobile device users utilise location-tracking applications. According to the study, more than half (55 per cent) worry that ‘geolocation’ will lead to [...]

Leave a Comment

Adobe Patch Fail to Fix Critical Flaw

According to a Vietnam-based security firm ‘Bach Khoa Internetwork Security’ (BKIS), the out-of-cycle security patch for Adobe Acrobat and Reader released on June 29, 2010 hasn’t been able to fix a problem that allows hackers execute malicious code.
The update in version 9.3.3 for PDF applications was developed to plug several holes. One of them is [...]

Leave a Comment

GeoHot says Goodbye to iPhone Community

One of the most popular iPhone hackers, GeoHot, has finally â??jailbrokenâ?? his silence in front of entire iPhone community. The hacker has amazed everyone in recent years with some of the finest jailbreak and unlock tools, but he has no interest in continuing his work in the future.
In the last week, he had surprised iPhone [...]

Leave a Comment

New Major ZeuS Version Operating in the Wild

Security researchers from computer software giant CA warn that a new major version of the ZeuS crimeware toolkit is already being used in the wild. The new release protects its configuration better and focuses on banks in United States, United Kingdom, Spain and Germany.
ZeuS is a professional crimeware toolkit that can be used to generate [...]

Leave a Comment