Skip to main content

Security

Russian hacker linked to massive 2012 LinkedIn hack arrested in Prague

posted onOctober 20, 2016
by l33tdawg

Czech police have arrested a Russian hacker suspected of hacking targets in the United States, officials said on Tuesday (18 October). LinkedIn said on Wednesday that the arrest, carried out in cooperation with the FBI, was related to the massive 2012 hack on LinkedIn that compromised over 100 million users' information, including emails and passwords.

Netflix reminds password re-users to run a reset

posted onOctober 17, 2016
by l33tdawg

Netflix has reminded people whose user IDs are circulating in breach-lists to check their security and if necessary reset their passwords.

The issue resurfaced late last week, when an Adweek writer posted that he'd received a “reset your password” message:

“As part of our regular security monitoring, we discovered that credentials that match your Netflix email address and password were included in a release of email addresses and passwords from a breach at another company.”

Nearly 6,000 online stores hit by hackers

posted onOctober 17, 2016
by l33tdawg

Thousands of retailers have been hit by credit card detail stealing malware. They way the hackers got in? Unpatched software flaws.

Over 5,900 e-commerce sites contain malware that steals victim's credit card details, according to a security researcher.

The malicious code has been placed on 5,925 compromised sites by hackers, according to Dutch security analyst Willem De Groot. He said that hackers gained access to a store's source code using various unpatched software flaws.

Thousands Of Secure Websites Dubbed Insecure Due To Cert Error

posted onOctober 17, 2016
by l33tdawg

A maintenance exercise gone awry at root certificate authority GlobalSign caused what could be thousands of websites to be mistakenly treated as insecure by web browsers and therefore become inaccessible to users attempting to reach them.

GlobalSign itself has resolved the issue at its end. But users who visited the affected sites before the problem was resolved could find themselves being blocked until their browser cache expires—a process that could take four or more days.

Self-Checkout Skimmers Go Bluetooth

posted onOctober 16, 2016
by l33tdawg

This blog has featured several stories about payment card skimming devices designed to be placed over top of credit card terminals in self-checkout lanes at grocery stores and other retailers. Many readers have asked for more details about the electronics that power these so-called “overlay” skimmers. Here’s a look at one overlay skimmer  equipped with Bluetooth technology that allows thieves to snarf swiped card data and PINs wirelessly using nothing more than a mobile phone.

Cyber-attacks 'targeted nuclear lab'

posted onOctober 16, 2016
by l33tdawg

A research center at the University of Toyama famous for its work on tritium, a substance used to fuel nuclear fusion reactors, is feared to have been targeted by cyber-attacks over a period of about six months, according to an internal investigation by the university and other sources.

The possibility of cyber-attacks was discovered in June of this year. Information is feared to have been stolen from the computer terminal of a researcher at the university's Hydrogen Isotope Research Center.

Cisco patches critical authentication flaw in conferencing servers

posted onOctober 13, 2016
by l33tdawg

Cisco Systems has patched a critical vulnerability that could allow hackers to gain access to Cisco Meeting and Acano servers that are used in enterprise environments for video and audio conferencing.

The flaw allows an unauthenticated attacker to masquerade as a legitimate user because the Extensible Messaging and Presence Protocol (XMPP) service incorrectly processes a deprecated authentication scheme, Cisco said in an advisory.

Healthcare companies are facing a cyber security crisis

posted onOctober 13, 2016
by l33tdawg

Many industries have found that the rapid expansion in demand for digital information has outpaced efforts to keep the data secure. This is a particular issue for healthcare organizations which handle confidential records yet have seen some headline breaches in recent years.

UpGuard, the company behind the CSTAR security preparedness score for enterprises, has released a new report which provides fresh data on the security failings of companies in the healthcare industry.