Users are sharing information on social networks and using public cloud services to move data from corporate to personal devices in ways that by-pass company security policies and systems, and expose company data.
1.6 million records hacked and dumped by GhostShell
Hacking group Team GhostShell launches a new logo, drops 1.6 million hacked records in the name of ProjectWhiteFox (NASA, European Space Agency, Bigelow Aerospace and more), and signs off until the new year.
Shamoon was an external attack on Saudi oil production
In its first comment on the apparent purpose behind the August Shamoon attack on Aramco, Saudi Arabia said Sunday that it was an external attack not just against Aramco, but against the Saudi economy.
GPU cluster can crack any NTLM 8-character hashed password in 5.5 hours
A cluster of 25 AMD Radeon GPUs using OpenVCL and the Hashcat password recovery software is claimed to make 348 billion guesses per second against NTLM hashed passwords, and 63 billion against SHA1 hashed passwords according to a presentation at last w…
Cyber-attacks that kill, IPv6, and vulnerability markets on tap for 2013
As rough of a year as 2012 was for cybersecurity, in 2013 we will see higher stakes than ever before, researchers say. WatchGuard’s security research analysts are predicting upticks in emerging cyber threats – including those that can cause loss of hum…
Goodbye, 123456: Blackberry bans weak passwords
Blackberry has always had a reputation for taking particular care when it comes to security. Its enterprise-server-based deployment configuration was one of the reasons the Blackberry soared to such a high penetration rate in North America, pre-iPhone….
New and improved SHA1 cracking method for passwords published
SHA1 is probably the most widely used password cryptographic hash function; but perhaps it shouldn’t be. The first attack faster than brute force against SHA1 was discovered in 2005, and just over two months ago NIST declared, “Federal agencies should …
Gartner IAM Notes
In case you missed all the live tweeting by me and others, here are some notes from this week’s Gartner IAM Summit:
There seemed to be a common theme that the primary driver
for IAM projects has shifted from operational (early) to compliance (recent) …
Malware set to take a big bite out of Apple in 2013
As Macs and other Apple devices move from the purview of the creative and CxO arenas into a more entrenched home in the enterprise, SophosLabs expects malware developers to reallocate their resources accordingly.
Zeus malware throws €36+ million lightning bolt across Europe
A highly sophisticated, multi-pronged cybercriminal attack used to steal an estimated €36+ million from more than 30,000 bank accounts across Europe has been uncovered. The attack uses a new, souped-up form of the Zeus trojan.