A proposal to let Internet service providers conceal the contact
information for their business customers is drawing fire from a number
of experts in the security community, who say the change will make it
harder to mitigate the threat from spam and malicious software. Read the full article. [KrebsonSecurity]
Customers of Countrywide Financial have filed a
class-action lawsuit over the 2008 data breach that enabled company
insiders to steal and sell their personal information. Read the full article. [Dark Reading]
A Bank of America computer specialist is set
to plead guilty to charges that he hacked the bank’s automated tellers
to dispense cash without recording the activity. Read the full article. [Computerworld]
Former State of Pennsylvania CISO Robert Maley has been watching all the news about his firing for talking about a security incident without permission at last month’s RSA conference. He began a talk on application security at CSO Perspectives 2010 by going off topic and addressing the controversy head on. Read the full article. [CSO]
A new type of cross-site scripting (XSS) attack that exploits commonly used network administration tools could be putting users’ data at risk, a researcher says. Read the full article. [Dark Reading]
The level of information security in systems run by some companies that
want to be linked electronically with the Centers for Medicare and
Medicaid Services (CMS) is so rudimentary that it is “almost
embarrassing,” said Julie Boughn, CMS’ chief information officer. Read the full article. [Federal Computer Week]
Romanian police have arrested 70 suspected cybercrooks, thought to be
members of three gangs which allegedly used compromised eBay accounts
to run scams. Read the full article. [The Register]
A rash of home foreclosures and abandoned dwellings had already taken its toll on the tax revenue for the Village of Summit, a town of 10,000 just outside Chicago. Then, in March, computer crooks broke into the town’s online bank account, making off with nearly $100,000. Read the full article. [KrebsonSecurity]
Espionage network GhostNet, first identified about a year ago, is much larger and more sophisticated than previously assumed according to a study entitled “Shadows in the Cloud”, by the Munk Centre for International Studies, the Information Warfare Monitor, the SecDev Group and the Shadowserver Foundation. Read the full article. [The H Security]
Not surprisingly, spam using the Apple iPad as a lure to get users to
give up personal or credit card information has began to make rounds of
Twitter users. Read the full article. [Help Net Security]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
