Click here

Hackers: Archive: August 2010 

IT Security Workers Are Most Gullible of All: Study

Study shows that even security professionals aren't terribly good at deflecting social engineering attacks --a problem that their organizations' IT departments must solve.

Review: EncryptStick Digital Privacy Manager

EncryptStick Digital Privacy Manager from ENC Security Systems--free for a limited-capacity version, $39.99 unlimited--offers unparalleled security for USB devices.

Deloitte: Financial Services Firms Prioritize IAM

While financial services firms across the world continue to make budget cuts, Deloitte says the knife has passed over many information security budgets, and those firms are turning their attention to Identity and Access Management (IAM).

CA Snares Arcot for Identity Management

The software developer bolsters its security portfolio with the acquisition of Arcot, a provider of cloud-based advanced authentication and fraud prevention applications.

Malware Scam Uses Celebrity Deaths as Lure

New malware campaign sends unsolicited emails with subjects indicating that a celebrity has died in car crash. If you open the accompanying file, the only wreck will be on your PC or mobile device.

New 64-Bit Windows Rootkit Already 'In The Wild'

An updated rootkit already floating around the Internet may be a new milestone in how to break into Windows.

Top 5 Riskiest Places to Go Online

Traveling for business? Thinking of outsourcing to Russia? AVG compiled data for 144 countries and ranked the safest--and the most dangerous--destinations from which to go online.

Devastating Military Security Breach Exposed Combat Data

U.S. official confirms a 2008 cyber attack that infected computers used to monitor U.S. combat troops and activities in Iraq and Afghanistan.

Security Breach Exposes UConn Applicants Personal Information

More than 10,000 applicants at the University of Connecticut are being notified by school officials that their personal data was exposed earlier this month when a university laptop was stolen.

Microsoft Was Warned of DLL Vulnerability a Year Ago

A security hole in the internals of many Windows applications could lead to an unprecedented rewrite of many popular programs.

Security Product Watch, August 24, 2010

Security vendors fare well as Inc. magazine releases its Inc 500/5000 list, which identifies companies across many industries with significant growth.

More Windows Apps at Risk Following iTunes Patch?

A European security firm started out to warn Apple that iTunes for Windows had a critical fault, but now another security sleuth says it affects dozens of other programs, as well.

Linux Kernel Vulnerability Poses Risks

The Linux kernel has potentially been at risk from a flaw since 2003, according to a new finding from security researcher Invisible Things Lab.

DIY Facebook Malware Kit Digs for Login Credentials

A new do-it-yourself malware kit called Facebook Hacker is extremely easy to use and, according to security experts, particularly adept at snaring passwords for Facebook, as well as other sites.

Half of Enterprise Employees Would Steal IP: Survey

A new study finds disquieting attitudes toward corporate data theft, with higher-paid employees the most likely to swipe intellectual property on their way out the door.

Symantec Warns of New Wave of Trojan Spam

Latest attack contains information-stealing malware hidden in innocuous-looking attachments that masquerade as resumes, photos and sales leads.

How To Defeat The U.S. In Cyberspace

An ethical hacker builds a master plan to crush America--or teach it how to defend itself.

Microsoft's Patch Plugs 'Spoofing' Exploit

One of Tuesday's patches could protect users from hackers trying to steal a user's identity and gain control of his or her system.

Nine Steps to Secure Your VoIP

Properly securing your Voice over IP system is a complex process because VoIP is the integration of data and voice into a single network. These tips will help secure your connection.

Hackers Infiltrate Red Cross Website - Again

For the second time this year, hackers have compromised one of the humanitarian organization's websites with malware that can capture visitors' personal information.

Linux Security, Then and Now

At LinuxCon 2010, experts discuss Linux kernel security and the implications of adapting 1960s technology to meet 21st-century threats.

Breach Exposes 126K Florida Students' Info

Officials at six community colleges in Florida are notifying more than 126,000 students that their personal information was exposed online after something went amiss during a software upgrade.

Good Cybersecurity Requires Common Sense

At the USENIX security conference, a vulnerability expert warns against artificial approaches to shoring up information systems, urging firms to put smart security at the core of any IT deployment.

Malware Reaches Record Levels: McAfee

The security software firm's latest report finds more than 10 million new pieces of malware in the first half of 2010, an all-time high.

Microsoft Tracks Another Zero-Day Vulnerability

Microsoft just patched one zero-day hole in Windows and now it's got a new one to contend with--a buffer overflow flaw in the kernel of all supported versions.

Fighting Insider Fraud

Attachmate Luminet is one of a growing number of enterprise threat management solutions designed specifically to target insider fraud.

Microsoft: Big Patch Tuesday for IT Administrators

Security experts warn PC support personnel to plan ahead for one of Microsoft's biggest bug smashes ever, releasing a total of 14 patches that secure 34 vulnerabilities.

Top Ten Web Malware Threats

Web-borne malware encounters continue to rise, leveraging a variety of vectors, methods, and exploits. Use this list to identify and fight trends that are likely to target your Web servers and users.

Senate Dems Push Data Breach Bill

Latest effort would require enterprises and nonprofits that store sensitive information to tighten security requirements and notify consumers in the event of a data breach.

How to Choose the Right Web Application Firewall (WAF)

An exhaustive look at all the ins and outs of shopping for a WAF. Doing the RFP work up-front will help to ensure that your organization gets the right tool for the job. Our expert tells you how.

Cisco CSO: Vulnerabilities Will Always Exist

The company's chief security officer, John Stewart, explains Cisco's new approach to secure development and building trust among IT buyers -- a plan that he says is modeled in part on Microsoft's strategy.

Adobe Races to Ready Patch for Another PDF Vulnerability

After a serious security flaw in its Acrobat and Reader applications surfaced at last week's Black Hat security conference, Adobe wants users to know it's rushing out a fix.

4 Simple Ways to Secure Your Email

Protect your business and personal email accounts by practicing these four key steps to email security.

Microsoft: Eight Critical Patches Coming Tuesday

The company plans to fix a total of 14 threats in this month's security patch release.

Data Breach at Philly Hospital Impacts Thousands

More than 21,000 patients' names, social security numbers and other personal information were compromised after a laptop was stolen at Thomas Jefferson University Hospital in Philadelphia.

Spam Threat Growing, Getting Sneakier

New survey says spam is becoming harder for U.S. adults to distinguish from legitimate email.

Data Breaches Continue to Plague Health Care Orgs

Hospitals, physicians' offices and medical centers were hit with about one-third of the significant data breaches that occurred in the first six months of 2010, according to the latest report from the Identity Theft Resource Center.

Most Think Cyber Espionage Is Acceptable: Security Report

Security software vendor Sophos' midyear Security Threat Report uncovers users' cavalier attitude about cyber warfare.

Out-of-band Microsoft Security Patch Coming Monday

With attacks already underway, Microsoft rushes out a patch for a vulnerability in how Windows processes shortcuts to local files.

Microsoft Patches Zero-Day Security Hole in Windows Shortcuts

IT admins get a fix to protect against malware attacks using specially crafted .LNK files that can break into all versions of Windows.

Companies Fail DefCon Social Engineering Security Test

DefCon contest proves your company's greatest security weakness is likely loose-lipped employees who can be scammed into revealing sensitive data more easily than you might think.