Security News:

Top Security Story

Security News
24 Nov 2009
	New Zeus spam poses as Social Security statements (Security Bytes blog) Trojan steals banking credentials at small and midsize businesses.
23 Nov 2009
	New Facebook worm propagates using sexy model (Security Bytes blog) Facebook worm uses a cross-site request forgery attack to spread via the victim's wall posting.
	Exploit code targets Internet Explorer zero-day display flaw Exploit code is publically available targeting an Internet Explorer cascading style sheet (CSS) handling error, according to Symantec.
20 Nov 2009
	Increase in Gumblar backdoors poses FTP credential problems (Security Bytes blog) Security Researcher explains how to detect the Trojan, but many victimized website owners don't have the technical expertise to fix the problem.
19 Nov 2009
	Hackers to sharpen malware, malicious software in 2010 Symantec researchers predict an increase in attacks using social network architectures, third-party applications and URL shortening services.
	Health Net healthcare data breach affects1.5 million A lost hard drive contained seven years of patient data including Social Security numbers and medical records of more than a million Health Net customers.
18 Nov 2009
	UK police arrest two in connection with Zeus Trojan (SearchFinancialSecurity.com) Malware that steals online banking credentials believed to have infected tens of thousands of computers worldwide
	H.D. Moore on future of Metasploit attack platform (Security Wire Weekly podcast) Metasploit creator H.D. Moore says the Rapid7 acquisition strengthens development on the platform.
	Massive T-Mobile UK security breach involves insiders A UK agency suspects insiders are behind a massive data breach at T-Mobile UK where customer data was pilfered and sold to competitors.
17 Nov 2009
	InZero Systems launches hardware-based security gateway New InZero gateway uses hardware to halt malware by separating the endpoint from the network and isolating desktop software.
	Russian cybercriminals target H1N1 Swine Flu fears (Security Bytes blog) Report outlines massive affiliate campaigns pushing counterfeit Tamiflu and making Russian hackers millions.
	H.D. Moore speaks about Metasploit Project deal, Release 3.3 Founder talks about the community's reaction to the Rapid7 acquisition, big changes in the latest Metasploit Framework release and what the future might hold.
16 Nov 2009
	Windows 7 DoS flaw allows hackers to freeze Microsoft's newest OS A Server Message Block (SMB) flaw in Microsoft's latest OS can be remotely exploited by an attacker to cause Windows 7 machines to stop responding.
	Secure your remote users in 2010 As companies shave operational costs by hiring more remote workers, IT security teams should plan to protect sensitive data being used by a highly mobile workforce in 2010.
12 Nov 2009
	Web application vulnerability assessment shows patching progress White Hat founder and CEO Jeremiah Grossman said more improvements are needed, but companies can learn from firms taking website security seriously.
	Web security firm ranks Firefox, Safari browsers as flaw prone Penetration testing firm Cenzic says Mozilla Firefox and the Apple Safari browsers contain the most vulnerabilities in a study covering the first half of 2009.
11 Nov 2009
	Layoffs prompt insider threat fears, cybersecurity survey finds The 12th annual Ernst & Young Global Information Survey found senior IT professionals worried about reprisals from disgruntled employees.
10 Nov 2009
	Four hackers indicted in RBS WorldPay breach (SearchFinancialSecurity.com) Alleged international hacking ring masterminded highly sophisticated attack and stole data used in $9 million coordinated ATM heist, prosecutors say
	New vendor risk assessment tools address cloud computing (SearchFinancialSecurity.com) Shared Assessments program unveils updated tools for assessing security of service providers, including cloud providers
	Microsoft patches serious Windows kernel flaws Vulnerabilities in several Windows kernel drivers could be remotely exploited to gain complete access to a system.
	Botnet masters turn to Google, social networks to avoid detection Cybercriminals turn to cloud computing to feed commands to the throngs of zombie computers under their control and avoid detection.
Security News Archive