The fallout from the hack of the DigiNotar certificate authority in the Netherlands means that SSL certificates can no longer be trusted, says Mark Knight, director of product management with Thales e-Security.
Employers beware: Fix known flaws or risk retaliation
Companies should fix known access vulnerabilities in order to prevent disgruntled former employees from wreaking havoc on their systems, advises Adam Bosnian with Cyber-Ark Software.
GlobalSign web certificate authority back online after hacker breach
Belgian web certificate authority (CA) GlobalSign is back online after investigating claims by the hacker who breached the Dutch DigiNotar CA that its systems had also been breached.
Hacker accesses 40,000 credit and debit cards processed by arcade vendor
Vacationland Vendors, a Wisconsin-based supplier of arcade equipment and vending machines, said credit and debits cards used in its card processing system over a two and a half year period may have been exposed.
Russia’s UK embassy reports DDoS attack on website
The Russian embassy in London has complained that its website mysteriously crashed over the weekend, after being hit by a DDoS attack. The site downing reportedly coincided with Prime Minister David Cameron’s visit to Moscow.
Android keylogger app – powered by accelerometer/gyroscope movements – revealed
An associate professor in the computer science department of the University of California has developed a proof-of-concept app that uses the smartphone/tablet’s on-device accelerometer/gyroscope technology to interpret – and record – users’ keystrokes.
More botnets using the same compromised devices, Damballa finds
The number of botnets running on compromised devices increased in the first half of 2011, despite the recent takedown of a number of high-profile botnets, according to Damballa’s first half 2011 Advanced Threat Report.
Mobile malware up 273% in first half of 2011
Malware for smartphones and tablets is up 273% in the first half of 2011, compared with the same period in 2010, a study from G Data has shown.
Reverse engineering specialist dissects the Morto worm
Tomer Bitton, a reverse engineering specialist with Imperva, has successfully dissected the operation of the Morto worm, a malware executable that is notable for being the only worm seen to date that exploits Microsoft’s remote desktop protocol (RDP).
Researcher suggests bribery behind recent arrest of ChronoPay co-founder
The arrest of Pavel Vrublevsky, the co-founder of Russia’s largest processor of online payments earlier this year, was the result of a bribe by his fellow co-founder, security researcher Brian Krebs has reported.