Archive for August, 2007

Monster.com theft may affect millions more

The theft of contact information for job seekers in the database of Monster Worldwide may have been much greater than the 1.3 million individuals reported earlier this month, chief executive Sal Iannuzzi said on Wednesday. While investigating the recent theft, the company learned that its website had previously been hacked. “We’re assuming it is a large number. It could easily be in the millions,” Iannuzzi said in an interview w… read more »

Sony pleads innocent in latest rootkit fiasco

Sony claims the rootkit-like behaviour of a device driver used to run its biometric Micro Vault USB drive was unintentional. Sony Sweden representative Fredrik Fagerstedt told local press this week that sometimes even actions undertaken with “good will” can go wrong. Fagerstedt’s comments come the same day that antivirus firm McAfee joined the growing chorus of companies criticising Sony for compromising its customers’ sec… read more »

Hackers steal user IDs from government job site

About 146,000 people using a jobs website sponsored by the US government have had their personal information stolen by hackers who broke into computers at Monster Worldwide, a government spokesman said today. The theft on the USAjobs.gov site, which has about two million total users, was part of the hacking operation that Monster disclosed last week, according to Peter Graves, a spokesman for the US Office of Personnel Management.
Monster runs th… read more »

Storm Trojan Hits Blogger

Several hundred blogs on Google’s Blogger site have been hacked, with fake entries linking to Storm Trojan downloads.
If you use Google’s Blogger site, you’d better be careful, because it’s becoming a very dangerous place. Hackers are posting fake entries to a number of blogs there. That might not seem too threatening, but the entries contain links that lead to downloads that are booby-trapped to infect a Windows PC.
The malicious links w… read more »

Jericho Forum voices concerns over VoIP security

A leading member of the Jericho Forum has criticised the security of voice-over-IP technology after security researchers revealed that it was possible to eavesdrop on VoIP conversations.
An eavesdropping vulnerability was revealed on the popular Full Disclosure mailing list on Wednesday. Vulnerability researchers Humberto Abdelnur, Radu State and Olivier Festor claimed the exploit could allow a remote attacker to turn a VoIP phone into an eavesdr… read more »

Hacker cracks embassy systems

Usernames and passwords for more than 100 email accounts of various embassies and governments worldwide have been posted online. Computer Sweden has verified the posted information and spoken to the person who posted them. The posted information includes names of the embassies and governments, addresses of email servers, usernames and passwords. Using the information, anyone can access the accounts that have been compromised.
Among the organisati… read more »

MSN Messenger video-based exploit revealed

Security experts are advising users of MSN Messenger to be wary of untrusted web cam conversations after exploit code was posted today for a zero-day vulnerability in the instant messaging (IM) application. The bug, rated “highly critical” by tracking firm Secunia, can be exploited when a victim accepts a malicious video from an attacker, prompting a heap-based buffer overflow. Results may range from a system crash to arbitrary code e… read more »

Google hacks and Microsoft Photosynth

Powerful new tools let you search for free software and music, zoom in on landmarks and buildings, and add comments to news stories. Google’s in the news these days (which is no surprise). Seriously, I can’t look at PC Advisor - or just about any blog - without seeing its name. So I’m not going to go against the tide, and this week I’ve got two new Google newsmakers - as well as a tremendous imaging site from Microsoft.
Ha… read more »

Police: Wi-Fi arrest not part of a crackdown

The arrest of a man for piggybacking on someone else’s Wi-Fi-enabled broadband connection is not part of a wider crackdown, police said on Thursday. A 39-year-old man was arrested on Tuesday morning by two police community support officers (PCSOs) from Hounslow, as he sat on a wall outside a house in Chiswick, west London. He admitted to police that he had used a third party’s unsecured Wi-Fi access point to gain access to the interne… read more »

Teenager hacks into iPhone

A NEW JERSEY teenager has broken the locks on Apple’s iPhone, a move that threatens to ruin exclusive deals Apple has negotiated with mobile-phone carriers worldwide. George Hotz, 17, of Glen Rock, spent 500 hours tinkering with the $499 phone’s software and rewiring it with a soldering iron. He has posted a guide showing people how to unlock their iPhones in two hours on his blog (http://iphonejtag.blogspot.com/ ).
On Saturday bids for a sec… read more »

RSS