Must-read articles on computer security, including virus alerts and much more!
Summary Box: New attack shows security chip hole
(AP)
- AP - CRACKING THE UNCRACKABLE: A former U.S. Army computer-security specialist has found a way to break into a type of chip that protects the most important secrets inside many personal computers.
Security chip that does encryption in PCs hacked
(AP)
- <p><a href="http://us.rd.yahoo.com/dailynews/rss/security/*http://news.yahoo.com/s/ap/20100208/ap_on_hi_te/us_tec_crypto_chip_cracked"><img src="http://d.yimg.com/a/p/ap/20100208/capt.bb8c38bc45bc4994b775bc0c76c90608.crypto_chip_hacked_vajm201.jpg?x=130&y=116&q=85&sig=PGt_.g8L6PVZpkelR.4IIQ--" align="left" height="116" width="130" alt="In this Tuesday, Feb. 2, 2010 photo, Chris Tarnovsky poses for photos after speaking at the Black Hat Briefings in Arlington, Va. Tarnovsky figured out a way to break chips that carry a 'Trusted Platform Module,' or TPM, designation. Such chips are billed as the industry's most secure and are estimated to be in as many as 100 million personal computers and servers, according to market research firm IDC. (AP Photo/Jacquelyn Martin)" border="0" /></a>AP - Deep inside millions of computers is a digital Fort Knox, a special chip with the locks to highly guarded secrets, including classified government reports and confidential business plans. Now a former U.S. Army computer-security specialist has devised a way to break those locks.</p><br clear="all"/>
Chinese police shut down hacker training business
(AP)
- AP - Police in central China have shut down a hacker training operation that openly recruited thousands of members online and provided them with cyberattack lessons and malicious software, state media said Monday.
China shuts down hacker training operation
(AFP)
- <p><a href="http://us.rd.yahoo.com/dailynews/rss/security/*http://news.yahoo.com/s/afp/20100208/tc_afp/chinaitinternetespionagehacking"><img src="http://d.yimg.com/a/p/afp/20100208/capt.photo_1265609625744-1-0.jpg?x=130&y=90&q=85&sig=ZfgOI21dae6CGXLs8D6QRA--" align="left" height="90" width="130" alt="File photo of a man surfing the internet at an internet cafe in Beijing. Police in central China have shut down a hacker training company that taught thousands of people how to launch cyberattacks and provided them with spy software, media reports said Monday.(AFP/File/Teh Eng Koon)" border="0" /></a>AFP - Police in central China have shut down a hacker training company that taught thousands of people how to launch cyberattacks and provided them with spy software, media reports said Monday.</p><br clear="all"/>
US faces 'serious' cyberspace threats: advisor
(AFP)
- <p><a href="http://us.rd.yahoo.com/dailynews/rss/security/*http://news.yahoo.com/s/afp/20100207/pl_afp/usitcomputersecurityinternet"><img src="http://d.yimg.com/a/p/afp/20100207/capt.photo_1265575684096-1-0.jpg?x=130&y=86&q=85&sig=cHDrhPqinIatbaBEQ8qgtA--" align="left" height="86" width="130" alt="US Deputy National Security Adviser for Homeland Security and Counterterrorism John Brennan is pictured in January 2010. The United States faces "serious and significant" threats within cyberspace, Brennan said Sunday, adding it was an issue of national security.(AFP/File/Jim Watson)" border="0" /></a>AFP - The United States faces "serious and significant" threats within cyberspace, the White House's top counter-terrorism advisor said Sunday, adding it was an issue of national security.</p><br clear="all"/>
Kaspersky: Google Hack Takes Spotlight From Russia
(PC World)
- PC World - Kaspersky Lab may not be a household name in the United States, but in some parts of the world, it's the most popular consumer antivirus software. In China the company boasts 100 million users, and the software is also popular in Germany, and, of course, Russia, where Kaspersky got its start in 1997.
Pentagon seeks billions to battle terror abroad
(AP)
- AP - The Obama administration is seeking billions in budget increases to target terror threats from abroad, especially Pakistan and Yemen, with boosts for surveillance and attack drones, special operations forces and a new military cyber command.
Nigeria Uses Celebrity Power to Stem Cybercrime
(PC World)
- PC World - Microsoft and Nigeria have released a song and video as part of a campaign to dissuade people from getting involved in cybercrime.
Hackers rigging blogs, email, websites: Websense
(AFP)
- <p><a href="http://us.rd.yahoo.com/dailynews/rss/security/*http://news.yahoo.com/s/afp/20100204/tc_afp/usitinternetsoftwarecomputercrimesecuritywebsense"><img src="http://d.yimg.com/a/p/afp/20100204/capt.photo_1265294657970-1-0.jpg?x=86&y=130&q=85&sig=On74ihiCoXk6WXIxeqjlVQ--" align="left" height="130" width="86" alt="Cyber crooks are rigging the Internet with booby-trapped blog commentary, chat rooms, email messages and websites, according to a Websense report released Thursday.(AFP/Illustration)" border="0" /></a>AFP - Cyber crooks are rigging the Internet with booby-trapped blog commentary, chat rooms, email messages and websites, according to a Websense report released Thursday.</p><br clear="all"/>
Internet attacks breach EU carbon trading system
(Reuters)
- Reuters - Cyber attacks on the European Union's Emissions Trading Scheme (ETS) have prompted the executive European Commission to revise its Internet security guidelines, the Commission said on Thursday.
Google complaint highlights China-based hacking
(AP)
- <p><a href="http://us.rd.yahoo.com/dailynews/rss/security/*http://news.yahoo.com/s/ap/20100204/ap_on_hi_te/as_tec_china_google_cyberattacks"><img src="http://d.yimg.com/a/p/afp/20100202/capt.photo_1265143460276-1-0.jpg?x=130&y=77&q=85&sig=lKerNraiNGm0Z5l6dXe5KA--" align="left" height="77" width="130" alt="Two pedestrians walk past the company logo outside the Google China headquarters building in Beijing in January 2010. Google's recently reported cyberattacks are a "wake-up call" about the vulnerabilities of computer networks to attacks that could cripple the US economy, the top US intelligence official warned Tuesday.(AFP/File/Liu Jin)" border="0" /></a>AP - Google's accusation that its e-mail accounts were hacked from China landed like a bombshell because it cast light on a problem that few companies will discuss: the pervasive threat from China-based cyberattacks.</p><br clear="all"/>
IE Flaw Gives Hackers Access to User Files, Microsoft Says
(PC World)
- PC World - Microsoft warned on Wednesday that a flaw in its Internet Explorer browser gives attackers access to files stored on a PC under certain conditions.
Oracle database can be hacked remotely: researcher
(Reuters)
- Reuters - A computer security expert has uncovered what he says are flaws in widely used software from Oracle Corp that could let hackers remotely access sensitive information in corporate and government databases.
Fake Microsoft Outlook Update Installs Trojan
(PC World)
- PC World - A malicious spam campaign caught by Panda Labs is using a fake Microsoft Update notice to trick victims into installing a Trojan. While well crafted, the attack still provides dead giveaways.
Facebook Is a Cybercrime Danger Zone
(NewsFactor)
- NewsFactor - Facebook and Twitter were all the rage in 2009, and not just for social networkers. The sites were also extremely popular among hackers and thieves, IT security firm Sophos revealed Monday in its Security Threat 2010 report.
Cyberthieves are hiring, using online ads
(Reuters)
- <p><a href="http://us.rd.yahoo.com/dailynews/rss/security/*http://news.yahoo.com/s/nm/20100203/tc_nm/us_cybersecurity_badguys"><img src="http://d.yimg.com/a/p/rids/20100203/i/r1593024557.jpg?x=130&y=86&q=85&sig=ln5ShB0TkSO6mF7jHqR.bg--" align="left" height="86" width="130" alt="Customers use computers at an internet cafe in Taiyuan, Shanxi province August 13, 2009. REUTERS/Stringer" border="0" /></a>Reuters - The people who brought the world malicious software that steals credit card numbers from your personal computer and empties bank ATMs of their cash are hiring, and they're advertising online.</p><br clear="all"/>
Trends & Innovations - Tuesday
(Investor's Business Daily)
- Investor's Business Daily - Social networks are attracting more users -- and cyberattacks -- according to a report by IT security firm Sophos. Cybercriminals have increasingly focused attacks on social networking users in the last 12 months, Sophos says. 57% of users say they've been spammed via social networking sites, up 70.6% vs. last year. 36% reveal they have been sent malware via such sites, a 69.8% rise from last year.
US senator asks companies about China rights practices
(AFP)
- <p><a href="http://us.rd.yahoo.com/dailynews/rss/security/*http://news.yahoo.com/s/afp/20100202/tc_afp/uschinaitcompanyrightsdiplomacyinternetgoogle"><img src="http://d.yimg.com/a/p/afp/20100202/capt.photo_1265133660013-1-0.jpg?x=130&y=83&q=85&sig=YhJL.jTTrqzlpeWG1L4eOg--" align="left" height="83" width="130" alt="Sen. Dick Durbin, seen here in 2009, asked 30 leading companies, including Amazon, Apple, Facebook, IBM, Nokia and Twitter, for information about their human rights practices in China after Google's threat to leave the country over cyberattacks and Web censorship.(AFP/File/Karen Bleier)" border="0" /></a>AFP - A US senator on Tuesday asked 30 leading companies, including Amazon, Apple, Facebook, IBM, Nokia and Twitter, for information about their human rights practices in China after Google's threat to leave the country over cyberattacks and Web censorship.</p><br clear="all"/>
Most web bank clients use same passwords elsewhere
(Reuters)
- <p><a href="http://us.rd.yahoo.com/dailynews/rss/security/*http://news.yahoo.com/s/nm/20100202/wr_nm/us_banking_internet_security"><img src="http://d.yimg.com/a/p/rids/20100202/i/r437942992.jpg?x=130&y=102&q=85&sig=vNOqQMcRtujY9ugs0G5YNg--" align="left" height="102" width="130" alt="A customer uses an automated teller machine at a bank branch in a file photo. REUTERS/Tim Wimborne" border="0" /></a>Reuters - A vast majority of online banking customers use their login credentials to access other websites, sharply increasing risk of attack to their bank account, Internet security firm Trusteer said on Tuesday.</p><br clear="all"/>
China Works to Toughen Hacking Laws
(PC World)
- PC World - Chinese police and judicial officials are formulating new measures that govern how hacking crimes are handled by courts, the country's latest step to strengthen its cyber laws, state media reported.
|
Microsoft, Google split over browser bug bounty
- Google follows Mozilla in launching program to pay researchers who find bugs, but critics say it won't necessarily pay off.
Verizon temporarily blocks some 4chan sites
- Verizon spokesman says carrier blocked sites associated with online forum to thwart network attacks. It's not clear which sites were affected and exactly what the trouble was.
Security software maker Vitamin D exits beta
- The software, created by three former Palm executives, lets people use an ordinary Webcam as a security system.
China breaks up Black Hawk hacking ring
- The Xinhua news agency says police arrested three people suspected of running a group that disseminated hacking tools and Trojans to its members.
PCI compliance: What it is and why it matters (Q&A)
- Bob Russo, general manager of the PCI Security Standards Council, explains what his organization is doing to keep payment card data out of the hands of criminal hackers.
New UI, features highlight McAfee 2010 suites
- Security suite vendor McAfee debuts their 2010 product line today, introducing an overhauled interface and new features in a bid to remain competitive.
BlackBerry has spyware risk too, researcher says
- Veracode researcher demonstrates spyware that allows someone to steal a stranger's contact list, read text messages in real time, and track the location of the phone.
Mozilla yanks infected add-ons, warns users
- Two Firefox add-ons, Sothink Web Video Downloader 4.0 and all versions of Master Filer, were found to contain Trojan horse code aimed at Windows users.
Caught on tape: Pastry thief and a bad dog walker
- Video-monitoring software from a trio of former Palm executives has led to some interesting discoveries. CNET has an exclusive look at what Vitamin D turned up during its beta testing.
DOJ not pleased with latest Google Book agreement
- Justice Department says amended settlement didn't adequately address antitrust issues that give Google competitive advantages in the digital marketplace.
Microsoft to patch 26 holes in Windows, Office
- Patch Tuesday next week will address critical holes in Windows and Office, but not a recent hole in Internet Explorer.
U.S. House passes cybersecurity research bill
- The measure, passed by a vote of 422 to 5, would boost research and public education efforts to bolster flagging cybersecurity efforts.
Air Force taps IBM for secure cloud
- Big Blue wins Air Force contract to provide security cloud environment able to support and protect defense and intelligence data around the world.
Billions to be spent on smart-grid cybersecurity
- Utilities to invest $21 billion over the next five years to protect the smart grid against everything from terrorist attacks to natural disasters, according to a Pike Research report.
Report: Google, NSA talk defense partnership
- Electronic surveillance agency is finalizing an agreement to help Google ward off cyberattacks like those that originated in China, according to The Washington Post.
Microsoft investigates new Internet Explorer flaw
- Software maker says flaw could affect those running Windows XP who aren't using a "protected mode" that's turned on by default in Windows Vista and Windows 7.
Government warns of looming cyberthreats
- Appearing before a Senate panel, Director of National Intelligence Dennis Blair warns of the growing impact and danger of new cyberattacks.
Twitter reveals torrent scam details
- A phishing attack, which forced Twitter to reset passwords for many users, stemmed from a torrent scam that stole log-in information from certain accounts.
Researcher warns of risks from rogue iPhone apps
- It would be fairly easy to get a rogue iPhone app approved by Apple, and once downloaded, it could get access to a host of information that could be used to spy on iPhone users, a security researcher says.
Apple patch plugs iPhone, iPod Touch holes
- Several vulnerabilities patched in the latest Apple security update could allow an attacker to remotely take control of a device.
Twitter resets passwords after phishing attack
- Unknown number of users whose accounts may have been compromised offsite get new passwords, company announces.
Social-networking spam hit business hard in '09
- Businesses were hit by a 70 percent rise in malware from social networking sites last year, according to a Sophos survey.
Botnet sends fake SSL pings to CIA, PayPal, others
- The Pushdo botnet is trying to evade detection by using fake SSL connections to major Web sites, researcher says.
In their words: Experts weigh in on Mac vs. PC security
- CNET asks a host of security experts which of the major operating-system platforms is more secure for consumers. Here's what they have to say.
Bank of America Web site goes down Friday
- The banking giant's site is inexplicably unavailable to an unknown number of customers, a spokeswoman says.
|