Security Headlines

Back

June 28, 2007

eBay cracks down on Romanian fraudsters (ZDNet UK)
Auction site's clampdown on online fraud in Romania over the last three years has resulted in several hundred arrests
  _____________________________________________________________________________________

June 27, 2007

Researchers warn of bogus Microsoft patch spam (SC Magazine)
Users are being warned of a new phishing scam falsely telling recipients they need to download a Microsoft patch. 

Schools Lack Cybersecurity Training As Students Grow Cybersavvy (Information Week)
The School Safety Index indicates that while 95% of districts surveyed are blocking Web sites, only 38% have a closed network that lets them control the content students can access.
  _____________________________________________________________________________________

June 26, 2007

SecureWorks finds stolen data cache, variants of Prg trojan (SC Magazine)
Researchers at SecureWorks have discovered several caches of stolen data containing the personal and financial information of 10,000 corporate and home PC users, as well as new variants of the Prg trojan.  

June 22, 2007

Hacker infiltrates Pentagon (Computer Weekly)
A hacker infiltrated one of the Pentagon's e-mail servers, which caused security staff to take up to 1,500 accounts offline to deal with the problem. 
  _____________________________________________________________________________________

June 21, 2007

Stolen Backup Device Holds Info On 225,000 Ohio Taxpayers (Information Week)
The device was stolen after a state intern took it home as part of a policy that called for one backup device to be kept offsite.

Microsoft Better at Patching XP Than Vista (PC World)
A Microsoft executive says that--six months after shipping Windows Vista--it has left more publicly disclosed Vista bugs unpatched than it did with Windows XP. 
  _____________________________________________________________________________________

June 20, 2007

Legal Brief: How's Your Forensics Strategy? (Network Computing)
Although forensic products are slow to evolve, new eDiscovery requirements and the increasing sophistication of corporate infosec practices suggest that you re-evaluate your forensic readiness. 
  _____________________________________________________________________________________

June 19, 2007

'Italian Job' Trojan infecting thousands of servers, end-user PCs (SC Magazine)
A fast-moving, large-scale Trojan attack using the MPACK web exploit toolkit has infected nearly 10,000 web pages and downloaded malware on end-user PCs, according to security researchers at Trend Micro and Websense.

Authorities Destroy Global Pedophile Ring (Information Week)
Arrests were made after a 10-month investigation involving law enforcement authorities from 35 countries.
  _____________________________________________________________________________________

June 18, 2007

PatchLink merges with SecureWave in all-stock deal (SC Magazine)
Vulnerability management provider PatchLink today agreed to acquire long-time partner SecureWave, makers of endpoint security solutions, in an all-stock merger that company officials believe will lower overall risk and cost for customers.

Pirated Version Of 'Sicko,' Decoys Abound On Web (Information Week)
The decoys sometimes present ads. Sometimes they are blank.

'Italian Job' Web Attack Sweeping the 'Net (PC World)
Tens of thousands of legitimate Web sites now function as weapons for Internet criminals, security vendors said Monday.
  _____________________________________________________________________________________

June 11, 2007

Google Snoops, Watchdog Says (PC World)
Privacy International report calls search giant hostile to users' privacy.

PC security on USB device (Personal Computer World)
The battle against cyber-crime could be given a boost with the development of the first affordable consumer appliance to block attacks. Touted as the first full security suite on a USB stick, the device is essentially a miniature Linux computer.

June 8, 2007

Critical Bugs Discovered In Yahoo Messenger (Network Computing)
Security company eEye Digital Security, which found the bugs, gave them its highest security threat rating because they enable remote code execution.
  _____________________________________________________________________________________

June 7, 2007

Vulnerabilities hit products relying on CA anti-virus engine (SC Magazine)
CA has said that products relying on its anti-virus engine contain two vulnerabilities that could be exploited to cause a crash or possibly execute arbitrary code on an affected system. The company has issued updates to address the vulnerabilities, which are rated "high."

Best Downloads for Hacking Firefox (PC World)
Want to bend Firefox to your will, keep yourself safer while you surf, and customize how Google works? These great Firefox extensions will let you do it.
  _____________________________________________________________________________________

June 6, 2007

House approves second, stricter anti-spyware bill (Reuters)
The House of Representatives passed on Wednesday legislation that would impose new requirements on software companies and advertisers to protect computer users from spyware.

Human Rights Group Turns To Satellite Images To Save Lives In Darfur (Information Week)
The Eyes on Darfur Web site has been set up to display an ongoing series of satellite images of 12 villages deemed to be a risk from the Janjawid militias backed by the Sudanese government. -

Rollout: F-Secure Client Security 7 (Network Computing)
New features and lower pricing make Client Security 7 a good fit for many businesses. But is that enough to entice enterprises to replace their existing security software?
  _____________________________________________________________________________________

June 5, 2007

Despite Deluge Of Data Losses, 40% Don't Monitor Databases (Information Week)
IT managers and CIOs still say their biggest fear is the dreaded insider getting his hands on critical database information.

Microsoft Unwraps Security Platform (darkREADING)
Next-generation Forefront product to bring broad array of security tools under one umbrella
  _____________________________________________________________________________________

June 4, 2007

Sneaky Hack Ducks Detection (PC World)
A new, stealthy attack serves up malicious code only once, making it harder to spot and track.

Study Finds 4 Percent of Links Malicious (NewsFactor)
Using several automated techniques, a SiteAdvisor study determined that 4 percent of the query results offered by the major search engines lead to potentially dangerous Web sites.

June 1, 2007

Google Desktop vulnerable to new attack (InfoWorld)
Just one day after a security researcher showed how Google's Firefox toolbar could be exploited in an online attack, a similar flaw has been discovered in the Google Desktop. On Thursday, Google hacker Robert Hansen posted proof of concept details showing how attackers could use Google Desktop to launch software that had already been installed on the victim's computer.