Computerworld UK Security

Swagg Security hackers claim to have stolen internal Foxconn data

cwukfeedback@idg.co.uk (Michael Kan) — Thu, 09 Feb 2012 11:15:00 GMT

Hackers from Swagg Security claimed to have stolen internal data from Apple supplier Foxconn, and leaked the information online, in response to media reports of poor working conditions at the electronics manufacturer's factories in China.

Europe cares about privacy, so you must too

cwukfeedback@idg.co.uk (Scott Bradner) — Wed, 08 Feb 2012 15:33:00 GMT

In late January, the European Commission published a proposal "on the protection of individuals with regard to the processing of personal data and on the free movement of such data."

Trustwave admits allowing SSL spying

cwukfeedback@idg.co.uk (Lucian Constantin) — Wed, 08 Feb 2012 14:38:00 GMT

Digital Certificate Authority (CA) Trustwave revealed that it has issued a digital certificate that enabled an unnamed private company to spy on SSL-protected connections within its corporate network, an action that prompted the Mozilla community to debate whether the CA's root certificate should be removed from Firefox.

UK cyber strategy implementation 'too slow', says former security minister

cwukfeedback@idg.co.uk (Anh Nguyen) — Wed, 08 Feb 2012 14:05:00 GMT

The UK government needs to set out a clear timetable for the implementation of its cyber security strategy, former security minister Baroness Pauline-Neville Jones has said.

Symantec admits product source code leaked

cwukfeedback@idg.co.uk (Ellen Messmer) — Wed, 08 Feb 2012 10:55:00 GMT

Symantec is in an ongoing fight against hackers in the group Anonymous that last January attempted to extort a payment of around $50,000 from Symantec in exchange for not publicly posting stolen Symantec source code they had stolen for various older Symantec security products dating to 2006.

Number of denial of service attacks on the rise

cwukfeedback@idg.co.uk (Lucian Constantin) — Tue, 07 Feb 2012 16:30:00 GMT

Both the number and volume of distributed denial-of-service attacks are increasing, according to new reports from DDoS mitigation companies Prolexic and Arbor Networks.

UK cyber security skills are 'wholly inadequate', says former security minister

cwukfeedback@idg.co.uk (Anh Nguyen) — Tue, 07 Feb 2012 16:27:00 GMT

The UK needs to significantly bolster its cyber security skills to fight against cyber threats, according to former security minister Baroness Pauline Neville-Jones.

Kelihos botnet variant being assembled, claim Kaspersky and Microsoft

cwukfeedback@idg.co.uk (Gregg Keizer) — Tue, 07 Feb 2012 13:47:00 GMT

Microsoft insist the Kelihos botnet is dead despite reports last week suggesting otherwise; but the company acknowledged that a new botnet is being assembled using a variant of the original malware.

Spammers abusing DreamHost sites following January hack

cwukfeedback@idg.co.uk (Lucian Constantin) — Tue, 07 Feb 2012 11:31:00 GMT

The security breach suffered by DreamHost in January has resulted in hundreds of rogue PHP pages redirecting users to work-at-home scams, according to researchers from cloud security vendor Zscaler.

Symantec's pcAnywhere source code is on Pirate Bay, says Anonymous

cwukfeedback@idg.co.uk (John Ribeiro) — Tue, 07 Feb 2012 10:45:00 GMT

Hacker group Anonymous claimed late Monday that the source code of Symantec's pcAnywhere had been uploaded on The Pirate Bay site.

Facebook hackers using fake CNN links to spread malware

cwukfeedback@idg.co.uk (Cameron Scott) — Mon, 06 Feb 2012 23:37:00 GMT

A "worrying number" of Facebook users are sharing a link to a malware-laden fake CNN news page reporting the US has attacked Iran and Saudi Arabia, security firm Sophos claims.

Google Chrome endorsed by German government

cwukfeedback@idg.co.uk (Gregg Keizer) — Mon, 06 Feb 2012 15:15:00 GMT

Google Chrome has been recommended to Windows 7 users by Germany's cybersecurity agency because of the browser's sandbox and auto-update features.

File host SendSpace used by malware authors to swap data

cwukfeedback@idg.co.uk (Jeremy Kirk) — Mon, 06 Feb 2012 14:45:00 GMT

Trend Micro researchers have discovered a piece of malicious software that automatically uploads its stolen data cache to the SendSpace file-sharing service for retrieval.

Anonymous hack law firm that defended Marine in Haditha case

cwukfeedback@idg.co.uk (Jaikumar Vijayan) — Mon, 06 Feb 2012 10:45:00 GMT

Hacking collective Anonymous said on Friday that it broke into the website of a law firm that represented a US Marine accused of killing civilians in Haditha, Iraq.

Marriott hotel hacker sentenced to 30 months in prison

cwukfeedback@idg.co.uk (Jaikumar Vijayan) — Mon, 06 Feb 2012 10:00:00 GMT

A Hungarian hacker who attempted to extort money from Marriott by stealing confidential data from its computers and threatening to expose it was sentenced to 30 months in prison last week.

Symantec should not go back on Android malware claim

cwukfeedback@idg.co.uk (Tony Bradley) — Sun, 05 Feb 2012 11:38:00 GMT

Symantec stirred up controversy last week when it announced the discovery of apps in the Android Market that it deemed malicious. Symantec has now stepped back from calling the apps "malware", but it still maintains that the apps in question do unwanted things that legitimate apps shouldn't do. So what's the difference, exactly?

Anonymous releases recording between FBI and UK law enforcement

cwukfeedback@idg.co.uk (Jeremy Kirk) — Fri, 03 Feb 2012 17:57:00 GMT

Hacktivist group Anonymous have released a 17-minute recording of a conference call between British and US law enforcement agents coordinating an ongoing investigation into the group.

Anonymous data isn't really so anonymous after all, says Microsoft

cwukfeedback@idg.co.uk (Tim Greene) — Fri, 03 Feb 2012 16:25:00 GMT

Data routinely gathered in Web logs - IP address, cookie ID, operating system, browser type, user-agent strings - can threaten online privacy because they can be used to identify the activity of individual machines, Microsoft researchers say.

Microsoft researchers discover cookie forwarding scheme

cwukfeedback@idg.co.uk (Tim Greene) — Fri, 03 Feb 2012 14:30:00 GMT

Microsoft researchers checking how easy it is to identify users by analysing commonly collected web-log data incidentally discovered a cookie-forwarding scheme that can be used to aid session hijacking.

FBI arrests software copyright fugitive on his return to the US

cwukfeedback@idg.co.uk (Michael Cooney) — Fri, 03 Feb 2012 12:05:00 GMT

The FBI today said it arrested a man on charges of illegally reproducing and distributing more than 100 copyrighted commercial software programs who had fled the country after being indicted last year.

Google aims for higher government security accreditation for Apps

cwukfeedback@idg.co.uk (Anh Nguyen) — Fri, 03 Feb 2012 11:31:00 GMT

Google is looking to gain higher security accreditations that would enable wider use of Google Apps by the UK government.

Fortune 500 firms and US government agencies infected with DNSChanger

cwukfeedback@idg.co.uk (Gregg Keizer) — Fri, 03 Feb 2012 11:27:00 GMT

Half of all Fortune 500 companies and major US government agencies own computers infected with the "DNSChanger" malware that redirects users to fake websites and puts organisations at risk of information theft, a security company warned yesterday.

VeriSign finally admits 2010 hack but details hidden in SEC filing

cwukfeedback@idg.co.uk (John E Dunn) — Fri, 03 Feb 2012 09:54:00 GMT

Internet giant VeriSign suffered a series of data breaches in 2010 and even now senior executives are not sure exactly what was compromised, the company has admitted in a filing made to the Securities and Exchange Commission (SEC).

How to keep off-site business meetings safe

cwukfeedback@idg.co.uk (Joan Goodchild) — Thu, 02 Feb 2012 17:16:00 GMT

When an organization hosts an offsite event, whether it is a small meeting, or a massive industry conference, it also presents an opportunity for the security department.

How to prevent your domain name from being hijacked

cwukfeedback@idg.co.uk (Meridith Levinson) — Thu, 02 Feb 2012 15:30:00 GMT

On the night of Monday, January 23, the hacktivist group UGNazi hijacked Coach.com, the Internet domain name of luxury goods manufacturer Coach. For several hours, fashionistas who wanted to ogle Coach's new Willis handbag on Coach.com or get a deal on its Penelope shoulder bag at Coachfactory.com were redirected to UGNazi's cryptic website.