Microsoft launched a new Web-based
mechanism for researchers to securely report stolen credentials, bank
and credit card data, or other data they discover, and as a way to
quickly alert the appropriate banks, retailers, or government agencies
of a compromise. Read the full article. [Dark Reading]
Operating and planting an ATM skimmer can be a risky venture, because the crooks have to return to the
scene of the crime to retrieve their skimmers along with the purloined
data. Some criminals are now using ATM skimmers that
eliminate much of that risk by relaying the information via text
message. Read the full article. [KrebsonSecurity]
Attention-piquing malicious spam emails purportedly coming from the DHS,
the Pentagon or the Transportation Security Administration have
recently been spotted by researchers. Read the full article. [Help Net Security]
As soon as a new technology gets traction, smart criminals figure out a
way to misapply it, and one of the hottest features in the mobile
world, location awareness, is next in line for exploitation. A contest involving 300 testers found close to 900 bugs in three leading
location/check-in services. Read the full article. [InfoWorld]
Banks in Russia and Ukraine are under continued siege by criminal gangs
wielding a sophisticated, next-generation exploitation kit that hacks
the financial institutions’ authentication system and then hits it with a
denial-of-service attack. Read the full article. [The Register]
The dream of bolting security onto the Internet’s Domain Name System
takes one step closer to reality as Internet
policymakers hosted a ceremony in northern Virginia to generate and
store the first cryptographic key that will be used to secure
the Internet’s root zone. Read the full article. [Network World]
Researchers from M86 Security Labs are reporting on a recently
detected malware campaign, using a working exploit targeting the (fixed) EasyBits Extras Manager Unspecified Vulnerability, reported in October, 2009. Read More. [ZDNet]
A hacker in the Goatse Security group that discovered the AT&T iPad-related flaw was arrested following the
execution of an FBI search warrant of his home in Arkansas. Read the full article. [CNet]
Just because there have been no big attacks linked to Conficker since
April 2009, it is dangerous to assume that nothing is happening, said the director of the Conficker Working Group, Rodney Joffe. Read the full article. [Infosecurity]
Authorities in 14 countries raided stolen credit card groups and six cloning labs manned by criminal organizations in the U.S., Spain, France, Germany, Italy, Ireland with arrests in Australia, Sweden, Greece, Finland
and Hungary. Read the full article. [Reuters] Read the Interior Minister statement. [Spain]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
