ISR News: Google Adsense, Bank Hijacked
Excerpts From WashingtonPost.com
DNS based attacks can be devastating because they undermine everything we take for granted about Web browsing. Late last year, attackers hijacked the DNS records of Checkfree.com, the largest online bill-paying service, redirecting would-be visitors to a site in Ukraine that served up malicious software.
ISR News: 33% Would Steal Sensitive Data
Excerpts From CIO.com
“Criminals are very adept at finding the vulnerable workers who can be tempted into betraying their employers, therefore, organisations should ensure that they have trained their people to protect sensitive information and have adequate technology and processes in place to help them enforce security policies that comply with current regulation and legislation,” said Tamar Beck, group event director, Infosecurity Europe.
ISR News: Federal Reserve Tech Arrested
Excerpts From CIO.com
A former IT analyst at the Federal Reserve Bank of New York and his brother were arrested Friday on charges that they took out loans using stolen information, including sensitive information belonging to federal employees at the bank.
ISR News: DOD’s Cyber Warfare Command
Excerpts From InformationWeek.com
Last week, Secretary of Defense Robert Gates testified that the military had spent $100 million on cybersecurity in the last six months alone responding to attacks, which are on the rise. Federal agencies reported to the U.S. Computer Emergency Readiness Team that they had been victims of 18,050 cybersecurity attacks in fiscal 2008, more than triple the number from 2006.
ISR News: Credit Card Cloners Steal £3.5m
Excerpts From Finextra.com
The accused allegedly went on a spree between 28 September and 8 October last year as Barclaycard migrated cardholders from the Goldfish credit card business it acquired from Discover Financial Services earlier in the year.
ISR News: Tech Layoffs Reach 2002 Levels
Excerpts From Forbes.com
It’s ugly out there in tech land. The recession has so far forced Yahoo! and Microsoft to lay off thousands; Oracle, Intel, Cisco and others are pruning their workforces too. Even the august Google has pared away at least 200 jobs in sales and several thousand part-time contractor jobs.
ISR News: Sustained Attacks on Register.com
Excerpts From WashingtonPost.com
The outage was the result of what’s known as a distributed denial of service (DDoS) attack, in which attackers cause hundreds or thousands of compromised PCs to flood a target with so much junk traffic that the Web site can no longer accommodate legitimate visitors. Typically, DDoS attacks are waged as a way for criminals to extort money from the targets, who are told the attack will cease when a ransom demand is paid.
ISR News: PowerPoint Hit By Zero-Day Hack
Excerpts From PC World
Malicious PowerPoint files (.ppt) are currently being used to exploit a newly reported security hole in the Office app. The isn’t yet any patch available for the zero-day flaw, but Microsoft says the attacks are currently limited and targeted.
ISR News: Contractor Steals 1600 Identities
Excerpts From Nashville City Paper
A former child support worker was arrested after attempting to sell the personal information — including names, Social Security numbers and bank account numbers — of 1,600 people.
ISR News: Next-gen SQL Injection Flaws
Excerpts From The Register
Research to be presented at the Black Hat security conference in Amsterdam later this month will show how so-called SQL injection attacks open the door to much more serious exploits that give hackers unfettered access to a website’s database and the operating system that runs it. Penetration tester Bernardo Damele Assumpcao Guimaraes says his techniques prey on design flaws in three of the most popular databases, including MySQL, PostgreSQL, and Microsoft SQL Server.
