Saturday, May 16, 2009

Around The Horn vol.1,100

Microsoft bans Memcpy() in their SDL program

By Robert A. on Security Tools

"Memcpy() and brethren, your days are numbered. At least in development shops that aspire to secure coding. Microsoft plans to formally banish the popular programming function that's been responsible for an untold number of security vulnerabilities over the years, not just in Windows but in countless other applications based on the...

Avsim Flight simulation site deleted by hacker, no backups....

By Robert A. on IndustryNews

"The site, which launched in 1996, covered all aspects of flight simulation, although its main focus was on Microsoft's Flight Simulator. The attack took down the site's two servers and the owners had not established an external backup system. The site's founder, Tom Allensworth, said that the site would be down...

DMCA conviction for seller of bogus Microsoft product keys

By Greg Sandoval

Federal authorities accused Adonis Gladney of selling counterfeit Microsoft product keys, and on Thursday he was convicted of violating the Digital Millennium Copyright Act.

Gladney, 24, is believed to be the first person convicted for DMCA violations dealing with the circumvention of security protections on software, according to Assistant U....

McAfee to buy whitelisting vendor Solidcore

By Lance Whitney

Intent on beefing up its security offerings, McAfee is adding another company to its mix. McAfee announced on Friday an agreement to buy Solidcore Systems, a vendor of whitelisting technology.

McAfee will pay $33 million upfront to acquire privately held Solidcore, with the promise of an extra $14 million if ...

U.K. police swamped by surveillance TV data

By Tom Espiner

The police cannot deal with the amount of information generated by surveillance cameras, according to the U.K.'s Association of Chief Police Officers.

Ian Readhead, director of information for the ACPO Criminal Records Office, said this week that police are overwhelmed by the volume of such data and that ...

Tech Insight: Keeping Server Virtualization Secure

There are plenty of risks with virtualizing servers, but planning and awareness can prevent security meltdown

Rapidly Spreading 'Gumblar' Attack Redirects Users' Web Searches

Emerging malware redirects users' Web searches to unintended sites

DoD Official Charged With Handing Over Classified Data To China

User with classified data access sold Defense Department information, documents

DOD seeks e-mail security for grid network

The Defense Department wants information from industry on how to provide e-mail security for its Global Information Grid network.

Fight Against Cybercrime Gets Organized

By Toralv Dirro on Uncategorized

The fight against cybercrime is showing some very promising progress over the last few years. We are certainly not where we want to be, but we’re on a good path. McAfee’s own Inititiative to Fight Cybercrime has been in force for more than a half-year. Recently our Cybercrime Response Unit was launched; it’s an online [...]

Google's Chrome was 'hackable' at Pwn2Own contest

Although Google's Chrome browser was the only one left standing after March's Pwn2Own hacking contest, it was vulnerable to the same bug that a German college student used to bring down Apple's Safari, Google said this week.

'Gumblar' Hacked Sites Install Google-targeting Malware

A new round of Web sites hijacks is attempting to install malicious, Google-focused software on unpatched PCs, according to security company ScanSafe, further cementing the drive-by-download approach as a bad-guy tactic of choice.

McAfee buying Solidcore for whitelisting technology

McAfee today announced it intends to acquire Solidcore Systems for about $33 million in cash and an additional $14 million if certain performance targets are met.

Botnet War: The Story So Far

What a Botnet Looks Like

REEL-LIFE IT: A peek at technoogy, Star Trek style

In the Star Trek movie, the Romulan enemy Nero produces a mug shot of Spock in the hopes of finding him. But it's not just any mug shot. It's the 3-D floating hologram kind, thrown into the air like a ball before halting in mid-air before its onlookers. Certainly, it can be a little discomfiting to be faced by a floating head, but we don't live in star date 2233.04 where visual displays are so not like we know them today.

Facebook Slammed with Another Phishing Attack

Facebook was hit with yet another phishing attack yesterday as malicious e-mails went to some of the social networking site's 200 million users. The attack, which Facebook is actively fighting, asked members to leave Facebook and access outside sites that then stole user names and passwords.

News Analysis: Courts grapple with law enforcement's use of GPS tracking

Two recent court decisions highlight the continuing struggles that courts around the country are having over law enforcement's use of GPS devices to track an individual's movements.

SMBs lack basic security and storage measures: Symantec

A group of surveyed small and medium businesses (SMBs) from the region lack basic security and storage measures, said information security vendor Symantec.

Plug Critical Hole in Adobe Reader

A new patch from Adobe, released Tuesday, closes a critical hole in Adobe Reader and Acrobat that could potentially allow an attacker to take control of a vulnerable system.

Is the U.S. ready for government-sponsored cyberattacks?

The Navy Cyber Defense Operations Command is ready to defend against cyberattacks. Meanwhile other parts of the U.S. military -- and other countries -- are developing cyber weapons for offensive use. Is the spread of cyber weapons akin to the proliferation of nuclear weapons after World War II?

Patch Adobe's PDF bug pronto, expert urges

Although Microsoft's PowerPoint patch received lots of attention Tuesday, Adobe's patch for a zero-day flaw in its popular Adobe Reader software update should be at the top of people's to-do list, a security expert said today.

Fake URLs new malware threat

According to Websense Security Labs, criminals are seeking to mislead web surfers by flooding the internet with URLs that include words like FaceBook, MySpace and Twitter.

Hacked flight sim site in catastrophic crash and burn
Avsim, RIP

A popular website for users of flight simulation gear has been felled, most likely fatally, after malicious hackers attacked both of the servers housing more than 12 years worth of content supplied by its 60,000 members.…

D-Link exposes WiFi routers with new 'security feature'
It's not a lock. It's a key

A new security feature added to some D-Link wireless routers actually makes users more susceptible to network intrusion, according to a hacker blog, which provides enough evidence to be taken seriously.…

Facebook users warned over renewed phishing assault
As Gray Lady's fashion blog gets pwned

Facebook users are facing a new wave of phishing attacks following a previous barrage in April.…

New script outstrips all other drive-by download risks
Major malicious domo

A newly-created malicious script has become the source of almost half the drive-by download attacks tracked by one security firm.…

Malware infested MPs' PCs inflate leak risk
Four in five Parliamentary machines pwned in last year

Comment "That's one of those irregular verbs, isn't it? I give confidential security briefings. You leak. He has been charged under section 2a of the Official Secrets Act." (Bernard Woolley, Yes Minister)…

Warranty void if seal shredded?, (Fri, May 15th)

Fellow ISC handler Patrick Nolan commented earlier on the changes to HIPAA requirements that the rec ...(more)...

Judge Dismisses Almost All Civil Claims Against Hannaford (May 13 & 14, 2009)

A US District Court Judge has thrown out all civil claims against Hannaford Bros.......

Pentagon Official Charged with Espionage Conspiracy (May 13 & 14, 2009)

A Pentagon official has been charged with espionage conspiracy for allegedly leaking confidential documents to a Chinese government operative.......

BSA Says 41 Percent of Software on PCs Worldwide is Pirated (May 12, 2009)

According to statistics from the Business Software Alliance (BSA), 41 percent of all software installed on PCs worldwide in 2008 was pirated.......

Former FBI Agent Gets Probation for Unauthorized Data Access (May 14, 2009)

Former FBI agent Mark Rossini was sentenced to one year of probation for using agency computers to search for information about a Hollywood wiretapping case in which he was not involved.......

Guilty Plea in Scientology DDoS Case (May 12, 2009)

Dmitriy Guzner has pleaded guilty to charges that he used a botnet to launch a distributed denial-of-service (DDoS) attack against Church of Scientology websites in January 2008.......

DHS Information Sharing Platform Breached (May 13, 2009)

A US Department of Homeland Security official has acknowledged a security breach of the platform the department uses to share sensitive, unclassified information with state and local authorities.......

DHS IG Report Says Data Centers Need Improvements (May 13, 2009)

A report from DHS Inspector General Richard Skinner said that two DHS data centers were established without adequate protection from physical threats.......

Microsoft Releases Fixes for PowerPoint Flaws in Windows (May 13, 2009)

Microsoft's decision to release a patch for just the Windows version of PowerPoint has met with criticism.......

Adobe Issues Updates for Acrobat and Reader (May 13, 2009)

Adobe has issued updates to address security flaws in its Acrobat and Reader products.......

Apple Issues Security, OS X Update (May 12 & 13, 2009)

Apple has issued Security Update 2009-002/Mac OS X v10.......

University of Toronto Programs Offer Cyber Intelligence Tools to Civil Liberties Groups (May 12, 2009)

The Information Warfare Monitor and Citizen Lab programs were established at the University of Toronto with the goal of providing civil liberties organizations and other similar groups with tools to conduct effective Internet intelligence research in their areas of interest; such tools are normally available only to law enforcement authorities and computer security investigators.......

McAfee to acquire Solidcore Systems for whitelisting

By Robert Westervelt, News Editor

The $47 million deal adds Solidcore's whitelisting technology to McAfee's product line up.

McAfee to Buy SolidCore Systems for $33 Million

McAfee will buy SolidCore Systems, a small, privately-held security company based in Cupertino, Calif. for $33 million. SolidCore specializes in security software that protects automated bank teller machines and other computers used in the banking industry.
- McAfee announced Friday it will buy privately held SolidCore Systems Inc, a maker of software to protect automated bank tellers and other specialized computers. The software maker announced the acquisition as executives met with analysts in New York in presentations that were broadcast over the I...

McAfee, EMC team up vs Symantec in online backup (Reuters)

In technology

Reuters - McAfee Inc, the No. 2 computer security company, plans to team up with EMC Corp to offer online PC backup services, and announced the acquisition of a company that protects ATMs against hackers.

No comments:

Post a Comment

My Blog List