Andrew Brandt, The newly-installed director of threat research with Solera Networks, has been analyzing what appears to be a hybrid spear phishing attack against a colleague and revealed the effort that goes into making these targeted attack emails loo…
Jericho Forum talks about identity security strategies
At the RSA Europe event earlier this month, Infosecurity got a chance to catch up with Paul Simmonds, a board member of the Jericho Forum.
Application vulnerability ranked as key threat by 72% of IT security professionals
Research just released by (ISC)² claims to show that application vulnerability was ranked as the number one threat by more than 72% of IT security professionals.
Duqu should act as an alarm for IT security professionals
Responding to Symantec – and McAfee’s – reports last week about the ‘Son of Stuxnet’ worm appearing and harvesting information from industrial control systems, Venafi says the Duqu malware is definitely a major security threat.
Barnaby Jack hacks diabetes insulin pump live at Hacker Halted
At the Hacker Halted conference in Miami, Florida, McAfee research architect, Barnaby Jack, demonstrated how to hack into an insulin pump live in his presentation titled ‘Life threatening vulnerabilities’.
JBoss worm exploiting old bug to infect unpatched servers
Old bugs, it seems, do not die – nor do they fade away – as Dennis Fisher, editor of Kaspersky Lab’s ThreatPost newswire says that there is a new worm in the wild that is compromising servers running older versions of the JBoss Application Server and t…
Anonymous has tools to take down critical infrastructure, says Sourcefire
Anonymous does not need sophisticated tools like Stuxnet or Duqu to carry out its threat to attack industrial control systems that regulate critical infrastructure, warned Dominic Storey with Sourcefire.
Nasdaq breach allowed hackers to spy on company directors
Hackers who infiltrated Nasdaq’s computer systems last year were able to eavesdrop on communications of company directors, according to people familiar with the investigation.
AVG’s popularity means it is being targeted by fake maintenance site scams
AVG’s free anti-virus is one of the most popular free IT security applications in the market, but according to one security researcher, its success has meant a surge in the number of fake download sites charging a subscription for the service.
RSA hackers may have hit several hundred firms, says security researcher
The widely publicized data breach revealed by RSA back in March may not have been the only one to hit a major company, a leading security researcher has said.