Skip to main content

Security

Vietnam's TPBank thwarted $1m cyber heist similar to Bangladesh Bank attack

posted onMay 16, 2016
by l33tdawg

A bank in Vietnam successfully managed to thwart an attempt made by hackers to pull-off a cyber heist similar to the one on Bangladesh Bank in February. The Tien Phong Bank in Hanoi said on 15 May that the cyberattack targeted a vendor that the bank had previously used to connect to Swift's systems, which the bank has since stopped using.

According to reports, the TPBank had identified a suspicious request made via Swift's messaging system and subsequently contacted all parties involved to stop the transfer of the funds in the fourth quarter of 2015.

SELinux vs Systemd: What's Safer for Linux Servers?

posted onMay 13, 2016
by l33tdawg

Among the most disruptive changes in Linux over the last decade has been in the introduction and broad integration of the systemd init system into Linux.

In a keynote session at the CoreOS Fest in Berlin this week, Lennart Poettering, one of the lead developers of systemd, delivered a detailed technical keynote on some of the key parameters in systemd and how they can be used to secure Linux servers.

Flash Player update fixes zero-day vulnerability and 24 other critical flaws

posted onMay 13, 2016
by l33tdawg

Adobe Systems has released a security update for Flash Player in order to fix a publicly known vulnerability, as well as 24 privately reported security flaws.

The company issued a warning about the zero-day -- previously unknown and unpatched -- vulnerability on Tuesday, saying that it is aware of an exploit available in the wild. The flaw, tracked as CVE-2016-4117, was reported by security researchers from FireEye.

SWIFT warns of malware attack on another customer

posted onMay 13, 2016
by l33tdawg

Financial transaction network SWIFT has renewed its warning to customers to be on their guard following the discovery of malware at another bank using its services.

The bank first asked customers to take steps to secure their systems in the wake of an attempt to steal US$951 million from Bangladesh Bank in February. Attackers there appear to have used custom malware installed on computers at the bank to send fraudulent messages over the SWIFT network seeking to transfer money from the bank's account with the U.S. Federal Reserve Bank of New York.

Germany says Russia probably behind cyber attack on Bundestag

posted onMay 13, 2016
by l33tdawg

Russian intelligence agencies were probably responsible for a massive cyber attack on Germany's lower house of parliament last year which forced its computer systems to be shut down for days, Germany's domestic intelligence agency said on Friday.

The agency, known as the Federal Office for the Protection of the Constitution (BfV), said a hacker group known as "Sofacy" was behind the attack.

Sony 2014 breach linked to $81m Bangladesh Bank cyber heist

posted onMay 13, 2016
by l33tdawg

Security firm BAE Systems' analysis of the malware used in the $81m cyber theft from Bangladesh Bank in March has turned up links to the tools used in the 2014 attack on Sony Pictures.

BAE published its analysis on Friday shortly after payment network SWIFT announced that a second unnamed banking customer had been hit with malware to compromise the bank's use of the SWIFT messaging system.

Smart energy meters vulnerable to hackers, claims Labour MP

posted onMay 13, 2016
by l33tdawg

Insecure smart energy meters are allowing hackers "through the back door", according to a Labour minister.

Shadow business, innovation and skills minister Chi Onwurah claimed the Government has been complacent about protecting consumers' data.

Popular cache Squid skids as hacker pops lid

posted onMay 12, 2016
by l33tdawg

Tsinghua University postgraduate student Jianjun Chen has reported a critical cache poisoning vulnerability in the Squid proxy server, a transparent cache widely deployed by internet service providers.

The vulnerability allows attackers to compromise connections using a maliciously-crafted packet. A patch has been produced for daily versions but not yet distributed for regular builds, according to researchers.

UK companies turn to ex-hackers for security expertise

posted onMay 12, 2016
by l33tdawg

Almost half of UK businesses believe an industry skills shortage is affecting their ability to adopt data-driven security, a study has revealed.

Nearly all (97%) of those surveyed at SecureData’s annual customer event in London said data-driven security is a prerequisite for any modern cyber security strategy.