Security News

Bitdefender Launches Clueful Privacy App for Apple's iOS

Clueful warns users if other apps on their iPhones are tracking their location, reading their address book, and more.

Intel Launches Cloud SSO Service

New Identity-as-a-Service offering leverages Salesforce.com.

NC State Researchers Announce Android Malware Genome Project

The researchers have already collected more than 1,200 malware samples.

Google Issues DNSChanger Malware Infection Warnings

Users whose computers or routers are infected will see an alert at the top of their Google search results.

IBM Bans Siri

The company has disabled the service, along with others such as Dropbox and iCloud, on its employees' phones.

Bredolab Botnet Creator Gets 4 Years in Jail

Georgy Avenesov allegedly earned about $125,000 a month renting out access to compromised machines.

Fake Facebook Cancelation E-mails Deliver Malware

The scam counts on the fact that the majority of victims are likely to value their access to Facebook.

Iranian Hackers Claim Credit for NASA Attack

The group claims to have accessed user information for thousands of NASA researchers.

Security Researchers Warn of AT&T Network Vulnerability

The researchers say the vulnerability could allow attackers to deliver malicious content to smartphone users.

Anonymous Hackers Hit U.S. Justice Department

The hackers published 1.7 GB of data apparently stolen from a department Web site.

WHMCS Hacked

Thousands of hashed credit card numbers and passwords were stolen.

Facebook Hit With $15 Billion Privacy Lawsuit

The lawsuit claims the company's actions have violated the U.S. Wiretap Act.

U.S. Congressman Warns of Catastrophic Cyber Attack

Mike Rogers says the attack is likely to hit the U.S. within the next 12 to 24 months.

Global Payments Breach Timeline Expands

Recently-issued alerts indicate that the breach dates back to January of 2011.

Security Flaw Found in ZTE Android Phones

The backdoor appears to be intended to enable ZTE and MetroPCS to install and uninstall Android apps.

Anonymous Hackers Hit Chicago Web Sites

Members of AntiS3curityOPS claimed responsibility for the attacks.

Anonymous Hackers Target Indian Government Sites

The attacks were launched in response to an Internet censorship plan.

Call of Duty Hacker Gets 18 Months in Jail

Lewys Martin distributed malware that harvested bank login details, credit card information and Internet passwords.

DHS Issues Warning on Medical Device Security

The Department of Homeland Security says the combination of medical devices and wireless connectivity presents a security risk.

Trend Micro Warns of Trojan Posing as Chrome Installer

The malware, identified as TSPY_BANKER.EUIQ, redirects users to spoofed banking Web sites.

Hacker Nyre Claims Responsibility for Pirate Bay Attack

The hacker says the attack was motivated by the fact that he's 'highly against Anonymous.'

White House Cyber Security Coordinator Resigns

Howard Schmidt will be succeeded by Michael Daniel, director of intelligence programs at the Office of Management and Budget.

New Zeus Malware Variant Targets Facebook, Gmail Users

The scams exploit victims' trusted relationships with the services to trick them into disclosing their credit card information.

Utah CTO Resigns After Massive Security Breach

The breach exposed 780,000 Medicaid recipients' personal data.

Facebook Hacker Gets a Year in Jail

Gareth Crosskey pleaded guilty to the attack following his arrest in July.

iCloud Accounts May Have Been Hacked

Several users say their accounts have been distributing spam.

Chrome 19 Patches Over 20 Security Flaws

For the browser update, Google paid security researchers $7,500 in bug bounties.

Intel Launches New Generation of Secure Processors

Security gets embedded in the latest generation of vPro chips, as Intel continues to drive McAfee technologies into the hardware layer.

The Pirate Bay Taken Down by Cyber Attack

The site has been inaccessible for over 24 hours.

QuickTime for Windows Update Patches Security Flaws

The update patches 17 vulnerabilities in versions of the software for Windows 7, Windows Vista and Windows XP.

California's IHSS Program Suffers Massive Data Loss

Lost data included the Social Security numbers of 375,000 employees.

Hackers Hit Multiple Human Rights, Foreign Policy Sites

Targets include the Center for Defense Information and Amnesty International Hong Kong, among many others.

BeyondTrust Buys eEye Digital Security

The company will integrate eEye's Retina CS Vulnerability Management and Analytics solutions with BeyondTrust's PowerBroker family of products.

Kickstarter Security Flaw Leaked Data on 70,000 Projects

Accessible data included the project description, goal, duration, rewards, video, image, location, and more.

Mac OS X Leopard Update Removes Flashback Malware

The update removes common variants of the Flashback Trojan on OS X 10.5.

Accused LulzSec Hacker Pleads Not Guilty

Jeremy Hammond's next court date is July 23.

Oops! Avira Anti-Virus Update Disables Windows PCs

A recent update detected almost every executable file as malware.

Artemis Proposes .secure Domain

Registrants would be required to agree to a code of conduct for security standards, and to ensure ongoing compliance with those standards.

New Android Malware Poses as Adobe Flash Player

Once installed, the malware sends SMS messages to premium numbers without the user's permission.

Hackers Steal $90,000 in Bitcoins

A database storing user names, e-mail addresses and account histories was also accessed.

Scammers Get 25 Years for Identity Theft

Veronica Dale and Alchico Grant have also been ordered to pay $2.8 million in restitution to the IRS.

Adobe Agrees to Provide Free Photoshop, Illustrator Security Updates

The company now says it will release free patches for Illustrator, Photoshop and Flash Professional.

Severity of Windows 8 Privacy Flaw Questioned

Security experts say concerns about a recently-disclosed privacy flaw in Windows 8 may be overblown.

University of Maine Hacked

1,175 Social Security numbers and 435 credit card numbers may have been accessed.

Suspected SOCA Hackers Arrested in Norway

The two teenagers face a maximum sentence of six years in jail.

Amnesty International UK Site Hacked, Serves Malware

The malware could enable attackers to access a victim's files, e-mails, passwords and other sensitive data, according to Websense researchers.

UNC Charlotte Acknowledges Massive Security Breach

Approximately 350,000 Social Security numbers were exposed.

Anonymous Hackers Respond to Activision's 'Terrorist' Label

The hackers have released CEO Eric Hirshberg's personal information, and have threatened to hack the company.

Trusteer Warns of New Financial Malware Variant

While the new version of the Tatanga malware is currently focused on Spanish banking customers, it may be spreading to other countries.

Teen TeaMp0isoN Hacker Arrested in UK

The 17-year-old, who uses the nickname 'MLT,' is accused of being a spokesman for the group.

Rogue Android Apps Found on Google Play

The applications were all uploaded by a single developer named Thasimola.

Anonymous Hackers Target Virgin Media

The company's Web site was taken down by a DDoS attack after it agreed to block access to The Pirate Bay.

Hackers Publish 55,000 Twitter Passwords

The company says many of the posted credentials are either incorrect or for suspended accounts.

Ustream Disabled by Cyber Attack

The DDoS attack was intended to disrupt live streaming of Russian anti-government protests.

Anonymous Hackers Hit the Kremlin

The Kremlin's Web site was briefly taken down today, with members of Anonymous claiming responsibility.

FBI Warns of Malware Attacks Being Delivered via Hotel Wi-Fi

The FBI says travelers are being targeted through pop-up windows when they connect to the Internet in hotel rooms.

Adobe Patches Security Flaws ... For a Price

The upgrades that patch the vulnerabilities cost as much as $249.

TeamGhostShell Hackers Hit Chinese University, Forex Trading Site

More than 150,000 user names, hashed passwords and e-mail addresses were published online.

U.S., China to Cooperate on Cyber Security

U.S. Defense Secretary Leon Panetta says it's crucial for the two countries to avoid any misunderstanding that could lead to a crisis.

YoVille Hacked

Several hundred players recently found that their inventories had been ransacked by hackers.

Microsoft Issues 23 Fixes In Big Patch Tuesday Release

Jumbo patch set fixes "Sons of Duqu" vulnerabilities across the Microsoft code base.

Georgia Man Admits Involvement in $1.3 Million Phishing Scam

Chase Bank, Bank of America, ADP and Branch Bank & Trust Co. together lost $1.3 million as a result of the fraud.

Apple's iOS 5.1.1 Patches Serious Security Flaws

The update patches several vulnerabilities, including one that could lead to remote code execution.

Barracuda Labs Warns of OpenID Phishing Attacks

A fake sign-in page is designed to steal victims' user names and passwords.

Mac OS X Security Flaw Exposes Passwords in Plain Text

The vulnerability was first noted soon after Apple's latest OS X update was released.

Adobe Patches Critical Flash Player Security Flaw

All users are urged to update to version 11.2.202.235.

Lockheed Martin Wins $454 Million Pentagon Cyber Defense Contract

The company will provide the Department of Defense Cyber Crime Center with technical, functional and managerial support.

U.S. Natural Gas Pipeline Companies Targeted in Major Cyber Attacks

The attacks, which began in December of last year, may also be targeting Canadian natural gas pipeline companies.

Atlanta Student Suspended for Breach of School Database

The unidentified 19-year-old student has been suspended for seven days, and may be expelled.

OpenX Plans Fix for Security Flaw

Company CTO Michael Todd says a new version will be released early next week.

Study Finds Child Identity Theft on the Rise

According to AllClear ID, identity theft affecting children ages five and under grew by 105 percent since last year.

Nearly 13 Million U.S. Facebook Users Fail to Use Privacy Controls

A Consumer Reports study has found that many members share sensitive data that could be used against them.

'Unknown' Hackers Hit NASA, Harvard, U.S. Air Force, Others

The group claims to have hacked its targets in order to warn them of significant vulnerabilities.

Mozilla Raises CISPA Privacy Concerns

The company says the legislation 'has a broad and alarming reach that goes far beyond Internet security.'

UK Organized Crime Agency Hit by Cyber Attack

SOCA was previously targeted in June of last year.

Hackers Blackmail Bank with Threat of Data Breach

The hackers say their request for 150,000 Euros isn't blackmail -- it's an 'idiot tax.'

Anonymous Hackers Target University of Pittsburgh

The hackers claim to accessed more than 200 GB of data, including student user names and passwords, address information and credit card data.

Lookout Warns of New 'NotCompatible' Android Trojan

The researchers say this appears to be the first time hacked Web sites are being used specifically to target mobile devices.

Google Patches Five Security Flaws in Chrome 18

Three of the vulnerabilities are rated high risk.

Oracle Database Security Flaw Remains Unpatched

'ALL versions are vulnerable and will remain vulnerable,' says researcher Joxean Koret.

NYT IDs Google Street View Designer

The designer was Marius Milner, best known as the developer of NetStumbler.

Sophos: 64 Percent of People Find Cloud Storage Services 'Scary'

...but that isn't keeping 45 percent of them from using the services at work.

Israel's Institute for National Security Studies Hacked

The Web site has been injected with malicious code for over a week, according to Websense.

Trusteer Warns of New Ransomware Variant

The Reveton ransomware demands payment of a $100 fine before the victim's computer can be unlocked.

Study Finds Leading Android Apps Demand Excessive Permissions

According to AhnLab, fully 42.6 percent of apps require excessive permissions for device information access.

Symantec: Flashback Malware Earned $10,000 a Day

The researchers report that the Trojan's key objective is simple: revenue generation.

Tennessee Community College Acknowledges Massive Security Breach

Approximately 14,000 names and Social Security numbers were exposed.

Check Point Launches Free ZoneAlarm Anti-Virus/Firewall Combo

ZoneAlarm Free Antivirus + Firewall 2013 is intended to provide consumers with a complete free Internet security solution.

Skype Privacy Flaw Found

A simple process can reveal any Skype user's remote and local IP addresses.

Cryptic Studios Hacked

The breach occurred in December 2010, but was only recently uncovered by the company.

Symantec: More Malware on Religious Sites Than Porn Sites

Pornographic Web sites are less likely to be infected than religious, automotive or health sites, according to the company.

International Police Association Hacked

The hackers defaced the site's main page with a statement alleging that admin passwords were stored in plain text.

Columbia University Acknowledges Security Breach

Names, addresses, Social Security numbers and bank account numbers were published online.

Microsoft Security Essentials Updated to Version 4.0

The company says the new version improves both scanning performance and malware detection rates.

Despite Veto Threat, CISPA Clears House

The House of Representatives passes the controversial cybersecurity legislation, but opponents vow to stop it in the name of online privacy.

Almost All SSL Web Sites Are Insecure, Say Researchers

Only 19,024 of 200,000 sites studied are 'genuinely secure,' according to the research results.

Microsoft Patches Critical Security Flaw in Hotmail

Hackers have been offering to exploit the bug for as little as $20 per account.

Two Plus Two Poker Forum Acknowledges Security Breach

The forum was shut down after a hacker demonstrated the ability to access e-mail addresses and passwords.

Backdoor Found in RuggedCom Industrial Control Systems

The Rugged Operating System (ROS) comes with a static username and an easily identifiable password.

LinkedIn Blog Hacked by Syrian Electronic Army

The hackers redirected visitors to a page supportive of the country's president.

Kaspersky: Apple Security Is '10 Years Behind Microsoft'

Eugene Kaspersky says Apple has a lot of catching up to do.

Study: 1 in 10 Used Hard Drives Contains Recoverable Data

In response to the findings, the ICO has published guidelines to help people delete all data from used hard drives.

Researcher Warns of Vulnerabilities in Samsung Devices

Luigi Auriemma says he came across the issue by accident while trying to play a practical joke on his brother.

LulzSec Hacker Publishes VMware Source Code

The code for VMware ESX dates from the 2003 to 2004 timeframe, according to the company.

Context Warns of Significant Cloud Security Flaws

A vulnerability could give attackers access to other users' data.

HITRUST Launches Security Response Center for Healthcare Industry

The center is aimed at helping the industry identify and remediate cyber attacks and threats.

Facebook Partners with Five Security Firms

Six-month trials of five different security solutions are available in the company's Anti-Virus Marketplace.

IBM Gets Behind Snort, Expands Anomaly Detection

Big Blue embraces the open-source IPS signature system.

1 in 5 Macs Infected with Windows Malware

According to Sophos, 20 percent of Macs are infected with Windows malware, while 2.7 percent are infected with Mac malware.

Cybercrime Does Pay: Russian Hackers Made $4.5 Billion Last Year

Russian-speaking cybercriminals doubled their annual income from 2010 to 2011, according to Group-IB.

Intego Warns of New Flashback Malware Variant

The new version, Flashback.S, doesn't request an administrative password prior to installation.

Lookout, Deutsche Telekom Partner on Mobile Device Security

The companies will work together on research and development, and will make Lookout's security app available to Deutsche Telekom's customers.

Google Announces Huge Increase in Vulnerability Rewards

The maximum bounty has been increased to $20,000.00.

London Marathon Suffers Massive Security Breach

All entrants' home and e-mail addresses were published online.

Nissan Hacked

The company says user IDs and hashed passwords were stolen.

WordPress 3.3.2 Patches Security Flaws

Vulnerabilities were patched both in the platform itself and in three external libraries.

Penn State, IBM Researchers Develop TapLogger Android Trojan

The proof-of-concept malware uses the device's motion sensors to steal passwords and other user data.

Sophos: India Leads the World in Spam

The country was responsible for 9.3 percent of all spam between January and March of this year.

Anonymous Hackers Dominate IT Security Pros' Fears

Sixty-one percent of survey respondents expect to be attacked by Anonymous within the next six months.

Malware Attack Targets Iran's Oil Industry

The Iranian government has acknowledged that some data was stolen.

FBI Investigates CSU Student for Election Fraud, Identity Theft

Matt Weaver is accused of stealing approximately 700 students' user IDs and passwords in order to affect the results of an election for student body president.

Abortion Provider Hit by 2,500 Cyber Attacks Following Hacker's Arrest

Almost half of the attacks came from North America, according to BBC News.

Researchers Develop Personal Firewall Solution for Pacemakers, Insulin Pumps

The MedMon device is intended to protect wireless medical devices from cyber attacks.

Anonymous Hackers Target Formula One Over Bahrain Race

The action was taken to protest ongoing human rights abuses in the country.

South Carolina Man Arrested for Medicaid Data Theft

Christopher Lykes is accused of stealing 228,435 people's personal data, including names, phone numbers, dates of birth and Medicaid account numbers.

Rogue Anti-Virus Software Being Spread via Twitter

According to Kaspersky researchers, hundreds of compromised accounts are currently spamming as many as eight messages per second.

Emory Healthcare Acknowledges Massive Data Breach

Ten misplaced backup discs contained personal data on approximately 315,000 patients.

Google Issues Malware Infection Warnings to 20,000 Web Sites

The sites appeared to be redirecting visitors to malicious Web sites.

Anonymous Hackers Launch Pastebin Alternative

The AnonPaste service is based on the open source ZeroBin software.

Russian Charged with Hacking Brokerage Firms, Stealing Identities

Petr Murmylyuk is accused of causing $1 million in losses to brokerage firms, and stealing the identities of more than 300 people.

Symantec Reports Gradual Decline in Flashback Infections

The security firm says the number of infected computers is now down to 140,000.

Researchers Warn of Malware in Fake Instagram App for Android

The malicious apps are being offered on Web sites that mimic the official Instagram site.

Trusteer Warns of Malware Targeting Hotel POS Systems

The Trojan is being sold on underground forums for $280.

China, U.S. Conducting Cyber War Games

The first exercises were held in Beijing last June, and in Washington last December.

Teen Hacks 259 Web Sites in 3 Months

The 15-year-old was caught when his anonymizing software failed.

Trend Micro Names BlackBerry 7 Most Enterprise-Ready Mobile OS

The operating system scored well for its security, authentication, device wipe functionality, firewall and virtualization.

Texas A&M University Acknowledges Data Breach

Personal information on almost 4,000 former students was mistakenly attached to an e-mail.

FBI Used Metadata to Catch CabinCr3w Hacker

Higino O. Ochoa III posted a photo without purging the metadata -- which included the GPS location where the pic was taken.

New Windows Ransomware Found

The new variant stops the operating system from loading until a ransom is paid.

Accused Utah Police Hacker Pleads Not Guilty

John Anthony Borell III faces up to 10 years in prison and a fine of $250,000.

Survey Finds Steady Increase in Healthcare Data Breaches

A recent study found that 27 percent of respondents reported at least one security breach in the past 12 months.

Mozilla Enhances Plug-in Control in Firefox

Software engineer Jared Wein says the aim is to improve security, reduce memory usage, and open up the Web.

New Sabpab Mac Malware Found

The Trojan doesn't require any user interaction to infect a victim's machine.

Anti-Abortion Hacker Gets 32 Months in Jail

James Jeffery accessed the names, e-mail addresses and phone numbers of approximately 10,000 women.

Android Trojan found on Google Play

McAfee says the malware has already been downloaded by at least 70,000 users.

Report: Stuxnet Malware Was Planted by Iranian Double Agent

Intelligence sources say the virus was planted at the Natanz nuclear facility using a memory stick.

Accused TeaMp0isoN Hackers Arrested Over Scotland Yard Attack

The two teenagers were arrested by members of the UK's Police Central e-Crime Unit.

Study Warns of Security Flaws in Open Source Components

More than 80 percent of enterprise software applications built in-house use open source components that may contain vulnerabilities.

Apple Releases Flashback Malware Removal Tool

The latest Mac OS X Lion update also disables the automatic execution of Java applets.

Boeing Plans High-Security Android Smartphone

The company says it's nearing the end of the development cycle and plans to launch the phone in late 2012.