IT security, vunerabilities, bugs, fixes, flaws, RSA conference and Infosec.
vnunet.com

« July 2006 | Main | September 2006 »

The great AT&T hack

AT&T has admitted that hackers have broken into one of its online stores and could have made off with around 19,000 credit card details. That's a pretty big mistake guys...

August 31, 2006 | Permalink | Comments (0) | TrackBack

Rootkit warning

Panda is warning that a new malware has been discovered that loads a rootkit onto infected PCs and then alters DNS settings. The malware purports to be a multimedia codec called Zcodec.

August 30, 2006 | Permalink | Comments (1) | TrackBack

Apple core cleared

Well, well. Apple has been cleared in the 60 second wifi hack. Apparently it wasn't an Apple wireless driver that was breached at all, but a third party one running on a MacBook. Bit naughty.

August 21, 2006 | Permalink | Comments (0) | TrackBack

Sharing secrets

Woah! Card-not-present fraud increased 21 per cent last year, costing banks £183m, according to Apacs. So naturally, now it's looking at an alternative to PIN based verification. Apparently the 'shared secret' method is one of those under review, as well as a system that generates one time use PINs.

August 17, 2006 | Permalink | Comments (0) | TrackBack

RIM's response to security threat

RIM has hit back at accusations that its BlackBerry can be used by hackers as a simple gateway into a corporate network. The company has said that the attack described by Jesse D'Aguanno makes a number of assumptions that security features are disabled.

RIM makes a good point in that users cannot download attachments, malicious or otherwise.

August 15, 2006 | Permalink | Comments (0) | TrackBack

Worm attack imminent

Or so says nCircle. These guys believe a significant worm attack is likely and imminent following the latest security update from Microsoft. "The worm is likely to be widespread, fast-moving and could cause significant network downtime," the company says.

August 13, 2006 | Permalink | Comments (0) | TrackBack

The problem with biometric passports

Is that they're not infalliable. As airports on both sides of the atlantic step up the security alerts big time someone goes and clones the info on a biometric passport. Imagine, all that planning and money spent on something that is broken before it is even issued.

Maybe we need something more substantial than RFID?

August 10, 2006 | Permalink | Comments (0) | TrackBack

To the lions...

Well, if Microsoft is going to invite hackers to take a pop at Vista, they better be prepared for the worst.

Yep, Vista was publicly busted at Black Hat.

August 8, 2006 | Permalink | Comments (0) | TrackBack

Security should be non-intrusive

Maybe this is a no-brainer, but apparently research shows that security should be non-intrusive. Although consumers value better online security, financial institutions need to provide it with a minimum level of perceived distraction, according to a survey by RSA Security.

What goes on behind the scenes?

August 7, 2006 | Permalink | Comments (0) | TrackBack

Non intrusive security

Maybe this is a no-brainer, but apparently research shows that security should be non-intrusive. Although consumers value better online security, financial institutions need to provide it with a minimum level of perceived distraction, according to a survey by RSA Security.

What goes on behind the scenes?

August 7, 2006 | Permalink | Comments (0) | TrackBack

More Apple hacking

Another one in the eye for Apple as security guys at Black Hat in Vegas show how to hack a MacBook via poorly coded wireless drivers. The flaw is not unique to Macs though, it's actually more generic.

August 4, 2006 | Permalink | Comments (0) | TrackBack

eBay plague of the bots

Apparently some scammers have turned to automated bots to create eBay accounts with a positive feedback record. This can then be used to dupe users into believing they are dealing with a trustworthy individual, but really they won't receive any goods.

August 2, 2006 | Permalink | Comments (0) | TrackBack