The Internal Revenue Service (IRS) just can’t catch a break when it comes to its information security posture; the US Treasury’s auditors are joining the criticisms begun by the Government Accountability Office (GAO) about infosec shortcomings at the U…
UK hacker G-Zero jailed for using Zeus and SpyEye
Edward Pearson, aka G-Zero, has been jailed for 26 months at Southwark Crown Court for “making an article for use in fraud and two counts of possession of an article for use in fraud.”
Mac users: “If you have no real need for Java, remove it”
Discussing the latest drive-by threat to Mac users that exploits an unpatched Java vulnerability known as CVE-2012-0507, Graham Cluley of Sophos blogs, “My advice is that if you have no real need for Java, remove it.”
Adobe offers malware classification tool for ‘quick malware triage’
Adobe has released a free tool that helps IT administrators classify suspicious files as malicious or benign using machine-learning algorithms.
ACLU finds widespread warrantless cell phone tracking by local police
A report issued this week by the American Civil Liberties Union (ACLU) claims that local law enforcement is engaged in pervasive warrantless tracking of cell phones.
ManTech buys HBGary, a security firm well known for its Anonymous run-in
US defense firm ManTech has acquired technology security firm HBGary, which was at the center of a controversy last year when it claimed to have infiltrated Anonymous and was then attacked by the hacktivist group.
Global Payments cops to 1.5 million total on credit card breach
Global Payments, a third-party payment card processor, has admitted that around 1.5 million credit card numbers may have been stolen in a massive data breach last month, up significantly from the original report of 50,000.
California child services loses storage devices with info on 800,000 people
Computer storage devices containing personal information on 800,000 California residents were lost following a disaster recovery exercise held by IBM and Iron Mountain on behalf of the California Department of Child Support Services (DCSS).
Imperva analyzes LulzSec’s attack tool
In its latest Hacker Intelligence Initiative report, Imperva analyzes remote and local file inclusion (RFI/LFI) attacks as favored by LulzSec.
GCHQ to get real-time access to personal traffic data
The EC Data Retention Directive is already in force in the UK as a Statutory Instrument – The Data Retention (EC Directive) Regulations 2009. A proposed new bill will now force ISPs and telecommunications providers to make this data available to law en…