Friday, July 28, 2006

UK flunks cyber-crime fight / 3, no 4 more laptops lost / Suicidal malware

The security risk in Web 2.0
Development of modern web-based applications focus on implementing new features and neglects security considerations. - CNET News.com

Report: U.K. failing to fight Net fraudsters
Victims of internet related frauds in the U.K. often do not know whom to report the crimes to. - CNET News.com

Firefox update plugs 'critical' holes
Mozilla has issued an update for Firefox that fixes a number of serious security flaws in the webbrowser. - CNET News.com

Making a federal case - how the FBI collars cybercriminals
Q&A with special agents from FBI's computer crime squads on current threats and how to fight cyber crime. - Computerworld

In separate incidents, three laptops stolen; data at risk
Three more thefts of laptops containing personal data has surfaced this week. Two of the laptops belonged to U.S. Navy recruiters. - Computerworld

Mozilla patches 13 Firefox flaws
Mozilla has rolled out a critical update that fixes 13 flaws in Firefox, 8 of which are judged critical. - InformationWeek

The small penalty for big data breaches
The fines paid by many large companies in the wake of data breaches are regarded as just a cost of doing business, critics claim. - InternetWeek.com

Riverside city workers' personal data are sent to 2,300 employees

An email message intended for the payroll department's database ended up in the inboxes of 2,300 Riverside City employees, due to human error. - Los Angeles Times

Marshal: Europe responsible for most spam
While China and USA may be the biggest spam nations, Europe is the continent from where most spam is sent. - SC Magazine UK/US

NO! Where did I leave my laptop?
Users' biggest concern is losing their laptop. A laptop often contains irreplaceable data, and a loss can thus feel worse than losing a passport or a cell phone. - Silicon.com

Phone theft victims doubt crime-busting plan
Victims has doubts about an initiative by carriers and authorities to prevent theft of cell phones in the U.K. - Silicon.com

Beware 'suicidal' malware, says CyberTrust

Security firm CyberTrust warns against new types of malware that deploys stealth tactics and removes traces of itself after carrying out its job. - Silicon.com

PayPal and eBay top phishing hit-list
75 percent of all phishing emails are targeted against users of eBay and PayPal. - Vnunet.com

VoIP security services taking hold

High-profiled attacks against VoIP-networks has resulted in increased demand for VoIP related security services. - NewsFactor

Confessions of a cybermule
At the bottom of the cyber-criminal hierarchy are the cashers that use stolen credit card information to turn it into cash. - Wired News

Kaiser joins lost laptop crowd
U.S. health care service provider Kaiser Permanente is the latest organisation to lose a laptop containing personal information about thousands of people. - Wired News

Thursday, July 27, 2006

Cisco VPN flaw unpatchable / Lost laptop found / Mozilla issues Firefox fix

More than 95 % of email is 'junk'
Less than 4 percent of all emails are legitimate. The rest i spam, viruses and error messages, monitoring firms report. - BBC News

Majority of phishing attacks target PayPal, eBay users
Due to their worldwide popularity among users, PayPal and eBay are the two most targeted brands by phishers. - Computer Weekly

Flaw in Cisco VPN 3000 kit cannot be patched

A flaw found in Cisco VPN 3000 series equipment making it vulnerable to denial-of-service attacks is caused by the protocol used and cannot be patched. - Computer Weekly

Firefox trojan steals banking details
A trojan that poses as an extension for open-source webbrowser Firefox attempts to steal users' banking information. - Computer Weekly

Missing laptop with data on 540,000 N.Y. state workers found
The missing laptop containing the personal information of 540,000 injured New York workers has been recovered. - Computerworld

Mozilla fires off security update for Firefox browser

Mozilla has released an important security update for Firefox containing essential fixes for security and stability. - eWEEK

Army to require built-in security
The U.S. will make hardware-based security a requirement for future computer systems, using new security features of Microsoft's Windows Vista. - Federal Computer Week

Firefox 1.5.0.5 fixes JavaScript flaws
Mozilla has issued a patch for Firefox fixing seven vulnerabilities involving JavaScript. - Internetnews.com

Exploits fish for unpatched PCs
Malware writers are targeting PC users who have yet to install the latest updates from Microsoft with a number of new exploits. - Internetnews.com

Cisco VPNs open to denial-of-service attacks

A protocol flaw has left Ciscos VPN equipment open to denial-of-service attacks. - InternetWeek.com

Laptop with Armstrong worker data stolen

A laptop containing identity information of 12,000 Armstrong World Industries has been stolen from a payroll auditor. - AP/MSNBC

Researchers target DDoS at the edge
European researchers are trying to build a system that will let an internet service provider stop denial-of-service attacks at the edge of its network. - NewsFactor

Misdirected bounce attacks on the rise

Spammers are increasingly using mail bouncing to circumvent some anti-spam solutions. - SC Magazine UK/US

OS X still safer, but not perfect
While Apple's OS X is still relatively safe, the number of vulnerabilities in OS X applications is a rising cause for concern. - SC Magazine UK/US

MySpace targeted by cyber criminals

Cyber criminals are targeting users of the popular social networking site MySpace with various frauds and spyware threats. - Silicon.com

Navy computers with personal data stolen
Two laptops containing personal information about 31,000 U.S. Navy recruiters have been stolen. - AP/Washington Post

How bot those nets?
Bruce Schneier comments on botnets and the linking of a large number of PCs to do good or evil. - Wired News

Security experts voice IE7 push concerns
Microsoft's use of its Automatic Updates to push new software like Internet Explorer 7 could undermine users' confidence in the channel to deliver security updates. - ZDNet UK

Wednesday, July 26, 2006

MS to push IE7 to users / Trojan cloaks as Firefox plugin / Student hackers altered grades

Trojan piggybacks on Firefox
A new trojan infects PCs already infected with another trojan, and installs itself as an extension for Firefox, McAfee warns. - CNET News.com

Microsoft tags IE7 'high priority' update
Microsoft will push Internet Explorer 7 automatically to users as a high priority update through Windows Update for Windows XP users. - CNET News.com

Does your PC have a good rep? To send email, it better
Reputation fitering aims to cut down on spam by filtering out PCs that have been used to send spam. - CNET News.com

Attack code puts Windows PCs at risk
Exploit code released to take advantage of vulnerabilities addressed in Microsoft's latest patches puts Windows PCs at risk, if they have not yet been updated. - CNET News.com

Security industry may be powerless against ransomware
As file-encrypting malware or ransomware becomes more advanced, the security industry may be powerless to tackle it. - Computer Weekly

Microsoft to release IE7 via Automatic Updates
Internet Explorer 7 will be released as an automatic update via Windows Update for Windows XP users. - Computerworld

Visa looks to bolster security with PCI classification changes
New way of classification means that more small merchants will now be required to follow stricter security requirements from credit card firm Visa. - Computerworld

McAfee: Trojan horse cloaks itself as Firefox extension
The new trojan FormSpy installs itself as an extension for the open source webbrowser Firefox. - Computerworld

Microsoft to push IE7 via Automatic Updates
Internet Explorer 7 will be pushed as an automatic update. Microsoft will however provide corporations with a tool to delay the installation. - eWEEK

Insurance company loses 540,000 N.Y. employee records

A lost computer has put 540,000 injured workers from New York in danger of identity theft. - eWEEK

Trojan spoofs Firefox extension, steals IDs
A new trojan pretends to be the legitimate Firefox extension Numberedlinks, after it is installed on the system. - InformationWeek

CA and F-Secure tangle over mobile malware threat
As response to a deal between F-Secure and a mobile carrier, CA claims that F-Secure has hyped the threat from mobile malware. - InformationWeek

Ransomware risks rise; Backups urged
The encryption used by ransomware is getting so strong that backups may be the best defense, as breaking the encryption becomes a less viable option. - InternetWeek.com

2 students are accused of altering grades in computer hacking case
Two californian college students are facing charges after allegedly hacking into a professor's computer and alter grades for nearly 300 students. - Los Angeles Times

Introverted IT students more inclined to cyber-crime
Introverted IT students are more likely to indulge in deviant computer activities, study reveals. - NewScientist

Companies take costly steps to secure laptops
Even though encryption of data on laptops can be expensive, the cost is still lower than what a data breach will cost, Gartner study says. - NewsFactor

Study: Email-borne malware successfully hit 80 percent of businesses
Email-borne malware has been able to penetrate into 84 percent of businesses in various forms, a study claims. - SC Magazine UK/US

Spammers dust off their botnet passports
Spammers are looking to new countries to find new vulnerable machines to infect with malware to replace lost botnets. - Silicon.com

Buyer beware at online auctions
Fraud at online auctions is a growing problem, users complain. - Sydney Morning Herald

Tuesday, July 25, 2006

Exploits for MS July flaws / 540,000 at risk of ID theft / Fake job ads new bait

Symantec continues Vista bug hunt
Security firm Symantec continues to scrutinize Windows Vista and has found new flaws in the user account management module. - CNET News.com

FTC wants beefed-up powers against Net scammers
The U.S. Federal Trade Commission wants extended powers to strike down upon internet scammers. - CNET News.com

Security firms squabble over mobile threats
Software firm CA claims that antivirus vendor F-Secure is hyping the threat to mobile devices to sell its mobile solution to carriers. - CNET News.com

Exploit code circulating for recently patched Windows flaw
SANS Internet Storm Center warns that exploit code for a number of the flaws that Microsoft patched earlier this month is now circulating. - Computer Weekly

Dutch bank to adopt voice verification
The dutch bank ABN Amro will use voice characteristics to identify users to improve security of the bank's telephone system. - Computer Weekly

HOPE closes with social engineering, Jello
Final day of Hackers of Planet Earth conference in New York closed with talks on social engineering, privacy. - Computerworld

Online investigator nabbed by Feds at hacker conference

The CEO of an online private investigation firm was arrested by the FBI at the Hackers of Planet Earth conference in New York. - InformationWeek

U.S. accounts for most spam
The U.S. continues to be the single largest country of origin for spammail. - InformationWeek

540,000 New Yorkers at risk of identity theft

A computer containing personal details of some 540,000 injured workers in New York has been lost, putting the workers at risk of identity theft. - AP/MSNBC

Crypto malware close to being 'uncrackable'
Trojans that encrypt the files on victims' PC's are become more powerful and could soon become impossible to crack by traditional means. - Network World Fusion

Unnatural selection in the cyber world
Computer systems need to evolve to prevent them from being vulnerable to massive attacks like Code Red. Subscription required. - NewScientist

Man charged over medical college database theft
A 46-year old man has been charged with illegally copying a member database from a professional organization of doctors. - SC Magazine UK/US

ID thieves face porridge threat
The U.K. government wants to tighten the laws against identity theft, so more perpetrators will end up in jail rather than being fined. - Silicon.com

Is there a zombie in the Vatican?
Security firm Sophos' latest report on the origin of spam finds possible "zombies" in both the Vatican and in Antarctica. - Sydney Morning Herald

Revealed: Internet frauds lure victims with fake ads
Fake job ads are being used by internet fraudsters to trick victims into giving up their personal information. - Sydney Morning Herald

Stateside spam slaying stalls

For the first time in two years the U.S. has not been able to lower the amount of spam sent from the country that is still the primary source. - The Register

Attackers exploit latest Microsoft flaws
Exploit code that takes advantage of some of the latest critical flaws patched by Microsoft earlier this month has been found in circulation. - Vnunet.com

Monday, July 24, 2006

Ransomware ups algorithms / Hacker arrested at conference / US worst spam nation

Microsoft bets big on Vista Security
Windows Vista will be the first operating system development from start to finish under Microsoft's new security policy. - CIO Magazine

Chills at Microsoft's security huddle

With Microsoft itself entering the security market, vendors were less open to share information at the company's last security industry gathering. - CNET News.com

Zero-day Wednesdays
Professional cyber-criminals use the days after Microsoft's "Patch-Tuesdays" to launch targeted attacks using unpublished exploits. - CNET News.com

Police swoop on speaker at hackers' conference
A chief executive of an online investigation firm was arrested by the FBI at the Hackers on Planet Earth conference in New York. - Computer Weekly

Arrest mars second day of HOPE
FBI removed private investigator Steve Rambam shortly before the beginning of a panel on privacy at the Hackers on Planet Earth conference. - Computerworld

Computer viruses reach into corporate pocketbooks
Computer viruses tops the list, when it comes to the loses from breaches of IT security in U.S. companies, an FBI study concludes. - eWEEK

Visa changes retail security rules
Credit card company Visa has changed its rules for which retailers that has to follow the comany's more strict security rules. - eWEEK

Laptop lifted from data provider's office
Another laptop containing thousands of people's personal information has been stolen. This time from Wolters Kluwer's North American offices. - eWEEK

Phishing via VoIP on the rise
Scammers are using VoIP to get information from users instead of websites, which some users may be more wary of. - InformationWeek

Old UTM is still new in network security
Unified Threat Management systems are gaining popularity as many companies are still struggling to fully secure their networks. - Internetnews.com

No one's ever completely safe from the inside threat
The trial against the former UBS systems administrator shows how hard it is to secure your systems against your own. - InternetWeek.com

U.S. still top spam producer, study says
A study from antivirus firm Sophos finds that the U.S. is still the single largest producer of spam. - SC Magazine UK/US

Personal information of NYC homeless leaked
Personal information about 8.000 homeless people in New York was accidently sent out by email to a number of homeless advocates and city officials. - SC Magazine UK/US

Ransomware getting harder to decrypt
Antivirus firm Kaspersky Lab has found that ransomware is becoming increasingly harder to decrypt. - SC Magazine UK/US

Office exploits reveal new direction in attack strategies
The recent attacks using vulnerabilites in Microsoft Office indicates that attackers are automating their search for exploits and target people rather than systems. - TechWeb

U.S. retains spammy nation prize
The U.S. is still the leading source of unsolicited emails or spam, study shows. - TechWeb

Hackers use AI to uncover vulnerabilites
Hackers are using articificial intelligence tools to help them uncover new vulnerabilities in software, security firm reports. - Vnunet.com

Hackers crack secret Google malware search codes
The searching tools provided by Google to antivirus firms to help finding malware on the web has been cracked by hackers. - Vnunet.com

FBI charges HOPE speaker with witness tampering, obstructing justice
The FBI's arrest of Steve Rambam at a New York hacker conference has been followed by charges of tampering with an ongoing case about money-laundering. - Washington Post

Hackers fight authority in NYC
The Hackers of Planet Earth in New York featured talks about cell-phone jamming, wireless security, catching phishers. - Wired News

Watch out - your data may be kidnapped

Increasingly complicated encryption algorithms used by virus writers to created ransomware could cause this type of malware to become a bigger problem. - ZDNet UK