SHA1 is probably the most widely used password cryptographic hash function; but perhaps it shouldn’t be. The first attack faster than brute force against SHA1 was discovered in 2005, and just over two months ago NIST declared, “Federal agencies should …
Gartner IAM Notes
In case you missed all the live tweeting by me and others, here are some notes from this week’s Gartner IAM Summit:
There seemed to be a common theme that the primary driver
for IAM projects has shifted from operational (early) to compliance (recent) …
Malware set to take a big bite out of Apple in 2013
As Macs and other Apple devices move from the purview of the creative and CxO arenas into a more entrenched home in the enterprise, SophosLabs expects malware developers to reallocate their resources accordingly.
Zeus malware throws €36+ million lightning bolt across Europe
A highly sophisticated, multi-pronged cybercriminal attack used to steal an estimated €36+ million from more than 30,000 bank accounts across Europe has been uncovered. The attack uses a new, souped-up form of the Zeus trojan.
2012: The Year Malware Went Nuclear
Kaspersky Lab has broken down the top security stories of 2012, and the list is certainly filled full of doozies. The Mac OS X Flashback epidemic, cyber-espionage, the Android mobile malware explosion and Java zero-days are but a few of the greatest hi…
Swiss intelligence agency loses terabytes of data to an insider
An IT technician working for the Swiss intelligence agency NDB simply downloaded and walked out with terabytes of data – the equivalent of ‘thousands or even millions of printed pages.’
O2 Ireland loses back-up tape with unknown, unencrypted data
O2 Ireland, part of the Spanish telecommunications company Telefónica Europe, has admitted the loss of a backup tape. The loss happened in September 2011, O2 learned about it in the summer 2012, and is now telling its customers.
Acer India hacked by Maxney; 15,000 user details leaked
It was announced on Sunday that the Acer India website has been hacked over the weekend, and a 41 Mb file was stolen and published on RapidShare.
Microsoft tackles click-fraud in online advertising
Microsoft is teaming up malware researchers with its online advertising fraud experts in order to tackle a rising tide of online click-fraud.
EMV global payment standard will drastically reduce credit-card fraud in the US
With the Europay, MasterCard and Visa (EMV) global standard for credit and debit cards poised to be adopted in the US (there is an April 2013 migration deadline), analysts at Frost & Sullivan say that credit card payments will become much more secure. …