Information Security News and Exploits

Providing you with Security News and Exploits from all over the web.

Entries for the ‘News’ Category

French “three strikes” anti-piracy software riddled with flaws

The French "three strikes" policy was put on hold last week after the private company tasked with collecting piracy data, TMG, was hacked and found to be insecure. The hack has allowed the company’s data-collecting software to be examined. It turns out that servers weren’t the only thing that TMG failed to properly secure; their [...]

Leave a Comment

Playstation Network Down Still as Sony Rolls Out New Identity Theft Protection M

The security breach that brought the Playstation Network down on April 21st, 2011, which allegedly compromised the credit card details of some U.S. and Non-U.S. PSN users, is exactly what Sony wants to prevent by offering all PSN members free identity theft protection.
While there has been no confirmation by Sony that U.S. cardholders’ information were [...]

Leave a Comment

Skype Suffers Outage: What You Need to Know

Reports have been circulating today that Skype is suffering from a global outage. Skype is investigating the issue and working on a fix, but in meantime many users around the world are unable to connect with Skype.
Given the culture of hacktivism that is evolving on the Internet, my first thought was that perhaps Skype is [...]

Leave a Comment

Academyâ??s Move Toward Electronic Balloting: Target for Hackers?

The Academy�s note to some 5800 members warning them that electronic balloting could be coming by the next awards season is surprising news. The letter from the Academy�s director of membership Kimberly Roush asked members for a direct email that did not go through an assistant or intermediary. The Academy is chasing an earlier date [...]

Leave a Comment

13-year-old schoolboy becomes Britain’s youngest iPhone app developer

Aaron Bond designs video game ‘Spud Run’ by watching online tutorials
Aaron Bond, a 13-year-old schoolboy, has become Britain’s youngest recorded iPhone app video game developer. He achieved the feat after creating Spud Run, a 59p game in which users have to navigate a mutant potato through a maze before it is squashed in 40 [...]

Leave a Comment

EFF co-founder enters e-G8 “lion’s den,” rips into lions

"I just arrived at the Tuileries for the #eG8, already a hoot. Unfounded smugness to rival the World Economic Forum."
John Perry Barlow�EFF co-founder, Grateful Dead lyricist, and, improbably, now a rancher�arrived in Paris and began tweeting up a storm from the e-G8 summit gathered there this week to discuss the future of the Internet.
After listening [...]

Leave a Comment

â??Boredâ?? Pirate Bay uploader fined $28,000

A Danish Pirate Bay user has been fined 150,000 Kroner ($28,000) for uploading a movie to file-sharing website Pirate Bay.
The user, who used the Pirate Bay pseudonym Icenfire, uploaded a DVD screener copy of the movie Black Balloon. He was raided by anti-piracy group Antipiratgruppen (APG) in February 2010 and admitted uploading a copy of [...]

Leave a Comment

Comodo Brazil Hit with SQL Injection Attack

A subsidiary of security certificate authority ComodoBR (www.comodobr.com) has suffered a security breach in the form of an SQL injection, allowing hackers to access its private database.
The attackers were able to breach the website of Comodo Brazil, stealing some sensitive information about its SSL certificate customers. The stolen information included certificate authority names, emails, faxes, [...]

Leave a Comment

Infosys faces grand jury as visa probe broadens

Indian offshore giant Infosys is facing a federal grand jury probe over the use of B-1 visas by its workers, an inquiry that was touched off by a lawsuit filed by a U.S. employee of the company.
Infosys, which relies heavily on visa holders to deliver outsourcing services to U.S. companies, announced this week a subpoena [...]

Leave a Comment

HTC Considers Lifting Android Bootloader Lockdowns

Taiwanese smartphone giant HTC has revealed it is considering changing the bootloader restrictions on its Android handsets after it posted a message to its official Facebook page to notify its customers.
HTC�s remarkable u-turn comes after the company came under fire for not allowing Android users to modify the way their devices operated under Google�s open [...]

Leave a Comment

Updated rogue AV installs on Macs without password

A new version of rogue antivirus malware that targets the Macintosh operating system does not need victims to type in their administrator passwords to install and infect the machine, a security company said today.
The latest version of the malware has been overhauled to look like a native Mac OS X application and is using the [...]

Leave a Comment

Lawmakers Question Obama Cybersecurity Proposal

A proposal for new cybersecurity legislation by U.S. President Barack Obama’s administration could give the government unprecedented access to private data, critics said Wednesday.
The White House proposal, which encourages private organizations to share information about cyber-attacks with the U.S. Department of Homeland Security, would trump limits on government access to private data found in the [...]

Leave a Comment

Harvard tackles porn spam on Web site

Officials with Harvard University said they have cleared the pornographic images spread across its Web site by hackers and spammers.
Stephen Chapman, who writes the "SEO Whistleblower" tech blog for ZDNet.com, said he discovered pornographic images and links spread across unmoderated forums and publicly available pages on the school’s Web site, and officials with the school [...]

Leave a Comment

SSL : Implementation Gone Wrong – #HITB2011AMS

During the recent security conference Hack In The Box, security researchers from Qualys Labs showcased the fruits of their efforts to scan the Internet�s websites for proper implementation of security features like SSL and its successor TLS. What they found could only be described as dismal.
SSL stands for Secure Sockets Layer, and TLS for [...]

Leave a Comment

Microsoft Uncovers 400K Tainted E-mail Addresses on Rustock Hard Drives

Microsoft investigators have uncovered more than 400,000 e-mail addresses from a single hard drive seized during the Rustock botnet takedown in March, according to court documents. The Rustock gang also had stolen credit card numbers.
Microsoft outlined its investigation into the hard drives belonging to the botnet�s command and control servers in a status report to [...]

Leave a Comment

Australian Computer Society hires CEO with no IT experience

In a statement released late yesterday, the Australian Computer Society � which has suffered a number of problems with its leadership over the past several years � revealed that it had hired Alan Patterson to be its new CEO, effective immediately.
ACS president Anthony Wong praised Patterson, noting he had experience in working with governments, as [...]

Leave a Comment

Indonesia’s technology black market here to stay

Research in Motion’s (RIM) PlayBook tablet is due to launch in Indonesia in August, news that should have set the country’s legions of BlackBerry fans alight with anticipation.
Instead the announcement was met with an indifferent shrug — PlayBooks have been available on the country?s thriving technology black market for weeks. Vicky, a vendor at Mall [...]

Leave a Comment

#HITB2011AMS: Unpatched IE bug exposes sensitive Facebook creds

A security researcher has devised an attack that remotely steals digital credentials used to access user accounts on Facebook and other websites by exploiting a flaw in Microsoft’s Internet Explorer browser.
Independent researcher Rosario Valotta demonstrated his �cookiejacking� proof of concept last week at the Hack in the Box security conference in Amsterdam. It exploits a [...]

Leave a Comment

Profiting (Legally) From Cyber Insecurity

No one wants to see the hackers who prey on cyber security flaws profit from their actions. But given the widespread nature of the threat, investors have an opportunity to capitalize on a sector that�s only growing in importance.
The recent security breach of Sony�s PlayStation Network and Qriocity music service has once again put [...]

Leave a Comment

Academyâ??s Move Toward Electronic Balloting: Target for Hackers?

The Academy�s note to some 5800 members warning them that electronic balloting could be coming by the next awards season is surprising news. The letter from the Academy�s director of membership Kimberly Roush asked members for a direct email that did not go through an assistant or intermediary. The Academy is chasing an earlier date [...]

Leave a Comment