Archive for August, 2007

Monster waited five days to disclose data theft

Monster.com waited five days to tell its users about a security breach that resulted in the theft of confidential information from some 1.3 million job seekers, a company executive told Reuters on Thursday. Hackers broke into the US online recruitment site’s password-protected CV library using credentials that Monster Worldwide said were stolen from its clients, in one of the biggest internet security breaches in recent memory.
They launche… read more »

Employees blamed for SME security breaches

IT managers in small and medium-sized businesses blame their fellow workers for online security breaches — despite the fact many SMEs still don’t enforce web-usage policies. More than a quarter of European SME IT managers said they believe company employees are responsible for security problems, according to research commissioned by security software company Websense.
The most frustrating problem for IT managers is employee behaviour (cit… read more »

Hacking device found to contain thousands of personal details

Security researchers have discovered a tool used by cybercriminals that stores the stolen data of more than 30,000 users. The Apophis device was found to contain sensitive user information, such as home addresses, phone numbers, and bank account and credit card details, from people based in the UK, US and Canada. According to experts at Panda Security the details ended up on the file, which is hosted on a remote web server, after thousands of use… read more »

Licensing issues delay vPro security

Symantec has delayed its virtualised security system for Intel’s vPro platform because of licensing issues around the Windows CE platform, the company said on Tuesday. The delay is the latest setback for vPro, a bundle of Intel technologies aimed at business users. Among vPro’s capabilities are virtualisation — which is built into the Core chips used in vPro — and the ability for management tools to access features that are outsid… read more »

Police: Businesses must reveal e-crime

Businesses must tell the police when they fall victim to e-crime but are often too embarrassed to do so, according to a high-ranking police officer. Detective chief superintendent Chris Corcoran of North Wales Police, chair of the E-crime Wales Unit and member of the National E-crime Forum, said: “We need to get a true picture of the real problem so we can start to resource it properly, start to link in nationally properly and start to take… read more »

IBM updates mainframe security

IBM claims it has improved the security of its z/OS mainframe operating system. The improvements make it easier for IT professionals to set security policies across multiple instances of z/OS, the company said on Friday. Administrators can now set network encryption rules and intrusion detection centrally for all z/OS-based mainframes. IBM is also encouraging businesses to host Public Key Infrastructure (PKI) encryption certificates on mainframes… read more »

CIA and Vatican alter Wikipedia entries

The CIA and the Vatican have made alterations to Wikipeda entries, according to a US hacker’s homemade program that detects the source of edits to the online encyclopedia. Virgil Griffith’s Wikiscanner points to Central Intelligence Agency computers as the sources of nearly 300 edits to subjects including Iran’s president, the Argentine navy, and China’s nuclear arsenal. A CIA computer was the source of a whiny “Wahh… read more »

Hackers Have A Bone to Pick with Linux

Many parts of the official Gentoo website have been taken down due to hacker attacks. There is no telling when their website will be fully back online. Gentoo is an open OS that is based on Linux or FreeBSD (which has Unix as a platform as well) that has great maneuverability. Gentoo Linux is very easy to configure and to adapt to a person’s own needs, that’s why it’s a very well known brand all around the world. Last week, Ubun… read more »

VoIP hacker says provider networks are easy pickings

A combination of simple dictionary and brute-force attacks in combination with Google-hacking enabled a criminal pair to break into VoIP-provider networks and steal US$1 million (NZ$1.3 million) worth of voice minutes, says one of the duo who has pleaded guilty to his crimes. Had his victims observed security basics, most of the attacks would have been unsuccessful, says Robert Moore, the 23-year-old hacker, who has been sentenced to two years in… read more »

Italian police arrest phishing gang

Crackdown on major phishing gang leads to the arrest of 24 people behind the attacks on thousands of websites used to commit identity theft. Police in Italy have arrested 24 people thought to be behind a hacking attempt that saw 10,000 websites compromised and used to launch phishing attacks. The members of the alleged phishing ring were tracked by the authorities for several weeks. The operation, called “Phish and Chip” snared 18 Ita… read more »

RSS