Entries by fdesir

Apple iPhone Decryption Backlog Stymies Police

A posting  from InfromationWeek in there Security section:  pple is overwhelmed by requests from law enforcement agencies to decrypt seized iPhones, and its waiting list is so long that it may take months before new requests get handled. That revelation, first reported by CNET, was gleaned from a search warrant affidavit for a seized iPhone last summer by a […]

Google security: You (still) are the weakest link

A posting from Cnet News in there Security and Privacy section: AN FRANCISCO–Two of Google’s top Chrome and Google Apps security experts confessed that the problem of passwords will continue to plague the people who use them and computer security for the foreseeable future. On the second day of the company’s I/O conference here on Thursday, Eran […]

FT hacked. Syrian Electronic Army hijacks Financial Times blogs and Twitter accounts

A posting from Naked Security: The Syrian Electronic Army has struck again – this time adding the scalp of the prestigious Financial Times to its collection of hijacked accounts belonging to well-known media organisations. Hackers from the Syrian Electronic Army appear to have stolen the usernames and passwords of FT staff with access to the newspaper’s social media […]

CISPA cybersecurity bill backers hope second time’s a charm

An interesting article from NBC News  in there Technology section: WASHINGTON (Reuters) – Six months after a U.S. cybersecurity bill died in the Senate, some Obama administration officials and lawmakers are optimistic they can get a new law passed amid heightened public awareness of hacking attacks and cyber espionage. With top intelligence officials warning that cyber attacks have replaced […]

Large Attacks Hide More Subtle Threats In DDoS Data

An interesting article from Dark reading in there Security Monitoring section: In March, the massive avalanche of data that crashed down on Spamhaus, the maintainer of a number of spam blacklists, made headlines as the largest distributed denial-of-service attack witnessed to date. Along with the ongoing campaign against financial institutions by a group of attackers calling themselves the Cyber […]

Mozilla pushes out new Firefox and Thunderbird: 8 security advisories, 3 critical fixes

A posting from Naked Security about Mozilla pushes out new Firefox and Thunderbird:  Not to be outdone by Microsoft’s and Adobe’s Patch Tuesday releases, Mozilla pushed out its latest browser and email client updates today. The Firefox browser goes to 21.0, on Android as well as on desktops. (You don’t install browsers on your servers, do you?) The Thunderbird email client is only available in an Extended Support Release […]

U.S. Cyber Command Head General Alexander To Keynote Black Hat USA 2013

A posting from Dark Reading  in there New section: Major information security event Black Hat has announced that General Keith Alexander — Commander, U.S. Cyber Command/Director, National Security Agency/Chief, Central Security Service (NSA/CSS) — will present the Day One keynote address at Black Hat USA 2013 in Las Vegas this July. In 2010, the U.S. Senate confirmed GEN […]

Web Application Testing Using Real-World Attacks

A posting from Dark Reading in there Vulnerability Management section:  Vulnerability management and scanning systems typically combine a number of techniques to assess the risk faced by a business’s information technology, from scanning files and evaluating the current patch level to launching attacks and testing for practical vulnerabilities. While assessing patch level tends to be the most reliable […]

Microsoft warns of new Trojan hijacking Facebook accounts

A posting from Cnet News in there Security &  Privacy section:  Microsoft has issued a warning that a new piece of malware masquerading as a Google Chrome extension and Firefox add-on is making the rounds, threatening to hijack Facebook accounts. First detected in Brazil, Trojan:JS/Febipos.A attempts to keep itself updated, just like normal, legitimate browser extensions, […]

Outbreak! Fake Amazon UK emails spammed out, delivering malware

A posting from Naked Security  about malware :   Beware! A spate of malicious emails have been spammed out by online criminals, disguised as legitimate communications from the UK branch of online retail giant Amazon. In a widespread attack, email messages have been distributed designed to trick computer users into opening an attachment disguised as information about an order for an […]