Friday, July 14, 2006

PowerPoint zero-day / Phishers beat bank tokens / Networking helps hackers

New PowerPoint hole used in cyber attacks
A previously unknown vulnerability in Microsoft's PowerPoint has been used in a an email attack, security firm Symantec reports. - CNET News.com

IT security rides offshore outsourcing wave
A survey shows that the offshore outsourcing of IT security functions in U.S. corporations have increased significantly over the last year. - CNET News.com

Microsoft confirms PowerPoint zero-day attack
Microsoft confirms reports from security firm Symantec about a zero-day exploit in PowerPoint that was used in an email attack. - eWEEK

Most CFOs harbor security concerns
Most Chief Financial Officers rank IT security as their top concern, as they fear the humiliation of data theft incidents, survey shows. - eWEEK

Markle suggests ways info sharing, security can coexist
A U.S. report suggests that it is possible to increase information sharing between agencies and still protect civil liberties. - Federal Computer Week

OMB tightens IT security incident rules
The U.S. Office of Management and Budget now requires federal agencies to report incidents involving data theft much sooner than before. - Government Computer News

Cisco discloses critical IPS vulnerability
Cisco having already disclosed two other vulnerabilities this week now adds a critical flaw in its Intrusion Prevention System. - InformationWeek

State Department releases detail of computer system attacks
According to the U.S. State Department no sensitive information was compromised during the recent attacks against its computer systems. - InformationWeek

Phishers try to best banks' authentication

Security experts have detected about 35 websites set up to circumvent the two-factor authentication with tokens used by some banks. - InfoWorld

Ohio University CIO resigns in wake of data breaches
The CIO of Ohio University has resigned after a data breach that has compromised personal information of tens of thousands students and alumni. - Computerworld

DHS finds RFID seriously flawed for border security
The U.S. Department of Homeland Security has found serious flaws in the RFID system used in the US-VISIT system that could result in unauthorized access to a government database. - InternetWeek.com

Cybercrooks turn to multipronged hacks
Apple may not be ready for the changes underway in computer attacks, where vulnerable software of all kinds and not just Windows is become a target. - NewsFactor

Man-in-the-middle attack on Citibank users concerns experts
The use of man-in-the-middle tactics in a recent phishing attack against Citibank raises concerns among security experts. - SC Magazine UK/US

Trojans account for over half of all malware
Antivirus firma Panda Labs reports that more than 54 percent of all new malware in the last quarter was trojans. - SC Magazine UK/US

Networking sites could help hackers
Personal information put on professional social networking sites could provide a hacker with enough for social engineering attacks. - The Register

Peer loses cybercrime fight
Attempts have failed to amend a new british law to prevent IT professionals from also being hit with a ban on releasing tools that can be used for hacking. - ZDNet UK

0 Comments:

Post a Comment

<< Home