| Miami-Dade inmates hack into strangers' phone lines Posted: InfoSec News: Miami-Dade inmates hack into strangers' phone lines: http://www.miamiherald.com/2010/03/28/1552713/miami-dade-inmates-collect-call.html
By David Ovalle MiamiHerald.com 03.29.10
Hacking their way into home fax lines, inmates in Miami-Dade jails are racking up tens of thousands of dollars in collect calls billed to unsuspecting citizens. [...] |
| Activists' E-Mails Hacked in China Posted: InfoSec News: Activists' E-Mails Hacked in China: http://www.nytimes.com/2010/03/31/world/asia/31china.html
By Andrew Jacobs The New York Times March 30, 2010
BEIJING -- In what appears to be a coordinated assault, the e-mail accounts of at least a dozen rights activists, academics and journalists [...] |
| FAA Teams With IBM On Cybersecurity Posted: InfoSec News: FAA Teams With IBM On Cybersecurity: http://www.informationweek.com/news/government/security/showArticle.jhtml?articleID=224200778
By J. Nicholas Hoover InformationWeek March 30, 2010
The Federal Aviation Administration has begun a research and development pilot aimed at helping the agency detect and react to hackers before [...] |
| Organizations Rarely Report Breaches to Law Enforcement Posted: InfoSec News: Organizations Rarely Report Breaches to Law Enforcement: http://www.darkreading.com/database_security/security/attacks/showArticle.jhtml?articleID=224200824
By Kelly Jackson Higgins DarkReading March 30, 2010
Most organizations hit by breaches that don't require public disclosure don't call in law enforcement -- they consider it an exposure risk, with [...] |
| Microsoft issues emergency patch for 10 IE holes Posted: InfoSec News: Microsoft issues emergency patch for 10 IE holes: http://news.cnet.com/8301-27080_3-20001428-245.html
By Elinor Mills InSecurity Complex CNet News March 30, 2010
Microsoft issued an emergency security update on Tuesday to plug 10 holes in Internet Explorer, including a critical vulnerability that has been exploited in attacks in the wild. [...] |
| TJX Accomplice Sentenced to 7 Years in Prison Posted: InfoSec News: TJX Accomplice Sentenced to 7 Years in Prison: http://www.wired.com/threatlevel/2010/03/christopher-scott-sentencing/
By Kim Zetter Threat Level Wired.com March 29, 2010
BOSTON -- A hacker who helped TJX hacker Albert Gonzalez and others gain access to corporate networks was sentenced to 7 years and one day on Monday . [...] |
| Cyberwar Rhetoric Is Scarier Than Threat of Foreign Attack Posted: InfoSec News: Cyberwar Rhetoric Is Scarier Than Threat of Foreign Attack: http://www.usnews.com/opinion/articles/2010/03/29/cyberwar-rhetoric-is-scarier-than-threat-of-foreign-attack.html
By Marcus Ranum Opinion USNews.com March 29, 2010
Marcus Ranum is an expert on security system design and chief security officer for Tenable Network Security. [...] |
| Problem 6: Burned Out Yet? Posted: InfoSec News: Problem 6: Burned Out Yet?: http://blogs.csoonline.com/1181/problem_6_burned_out_yet
By Dan Lohrmann Lohrmann on GovSpace CSO 2010-03-28
"I love my job!" Can you say that? Honestly?
Or, maybe we should take off the exclamation point and change a few words around. How about: "My job is pretty cool, and I like being a [...] |
| [Dataloss Weekly Summary] Week of Sunday, March 21, 2010 Posted: InfoSec News: [Dataloss Weekly Summary] Week of Sunday, March 21, 2010: ========================================================================
Open Security Foundation - DataLossDB Weekly Summary Week of Sunday, March 21, 2010
58 Incidents Added.
======================================================================== [...] |
| Windows 7 Less Vulnerable Without Admin Rights Posted: InfoSec News: Windows 7 Less Vulnerable Without Admin Rights: http://www.darkreading.com/insiderthreat/security/app-security/showArticle.jhtml?articleID=224200601
By Thomas Claburn, InformationWeek Special to Dark Reading March 29, 2010
Taking away the administrative rights from Microsoft Windows 7 users will lessen the risk posed by 90 percent of the critical Windows 7 vulnerabilities reported to date and 100 percent of the Microsoft Office vulnerabilities reported last year.
It will also mitigate the risk of 94 percent of vulnerabilities reported in all versions of Internet Explorer in 2009 and 100 percent of the vulnerabilities reported in Internet Explorer 8 during the same time period.
Finally, it will reduce the danger posed by 64 percent of all Microsoft vulnerabilities reported last year.
These findings come from a study conducted by BeyondTrust, which perhaps unsurprisingly sells software that restricts administrative privileges. The company argues that companies need its software to protect themselves, particularly during the time between Microsoft's publication of vulnerability information and the application of Microsoft's fixes.
[...]
|
| FISMA: A good idea whose time never came Posted: InfoSec News: FISMA: A good idea whose time never came: http://gcn.com/articles/2010/03/29/cybereye-032910.aspx
By William Jackson Cybereye GCN.com March 29, 2010
A funny thing happened with the Federal Information Security Management Act of 2002. Critics complain that the law has created a "culture of [...] |
| MS to release emergency IE fix on Tuesday Posted: InfoSec News: MS to release emergency IE fix on Tuesday: http://www.theregister.co.uk/2010/03/29/ie_emergency_fix/
By John Leyden The Register 29th March 2010
Microsoft has announced plans to release an out-of-sequence patch, designed to resolve a zero-day vulnerability in Internet Explorer.
A cumulative update to Internet Explorer (MS10-018) plugs a security hole in IE 6 and IE 7 exploit by hackers over recent weeks. The latest version of Microsoft's browser - IE 8 - is not vulnerable to the flaw, which Microsoft first acknowledged was a problem on 9 March.
The vulnerability involves a flaw in the iepeers.dll library involving the handling of invalid values passed to the "setAttribute()" function. Exploits create a means to drop malware onto the PCs of victims, providing they visit booby-trapped website using vulnerable version of IE, as explained in our earlier story here.
[...]
|
| Apple delivers record monster security update Posted: InfoSec News: Apple delivers record monster security update: http://www.computerworld.com/s/article/9174337/Apple_delivers_record_monster_security_update?taxonomyId=17
By Gregg Keizer Computerworld March 29, 2010
Apple today patched 92 vulnerabilities, a third of them critical, in a record update to its Leopard and Snow Leopard operating systems. [...] |
