From Black Hat DC: Sites
like Amazon offer affiliate programs that pay users for sending them
new customers. And now, malware authors, always quick to adopt tactics
that work elsewhere, have developed
their own affiliate program. Read the full article. [MIT Technology Review]
Michael Gough, an information security specialist and president of the Austin, Texas, chapter of ISSA, owner of the web site skypetips.com gave CSO his thoughts on Skype’s benefits and security challenges in the business environment. Read the full article. [CSO]
Miami hacker, Edwin Andrew Pena, has admitted to a Federal New Jersey court that he pocketed more than $1m by selling
millions of minutes of voice over IP calls and surreptitiously routing
them through the networks of telecommunications companies. Read the full article. [The Register]
Credit card numbers are so passe. Today’s hackers know the real powerhouse data to steal is emission certificates. That’s exactly what hackers went after last week when they obtained
unauthorized access to online accounts where companies maintain their
carbon credits. Read the full article. [Wired]
A hacker attack at payroll processing firm Ceridian Corp. has potentially revealed the names, Social Security
numbers, and, in some cases, the birth dates and bank accounts of
27,000 employees working at 1,900 companies nationwide. Read the full article. [StarTribune]
Hackers broke into computer systems at a Massachusetts chapter of the
United Way last month and attempted to make off with more than $150,000
from one of the nation’s largest charities with the use of a money mule duped by a “Work-at-home” scam. Read the full article. [KrebsonSecurity]
An IBM ISS researcher at Black Hat DC revealed major
security holes in a little-known wiretapping architecture for IP
networks created by Cisco Systems for law enforcement. The weaknesses
could result in an attacker interfering with legal surveillance or
performing some unauthorized surveillance of his own. Read the full article. [Dark Reading]
A pair of Spanish researchers here today
demonstrated a way to hack the connection between a Web application and
a database, letting the attacker hijack Web credentials and perform
other nefarious activities. Read the full article. [Dark Reading]
Lax security screening at Apple’s App Store and a design flaw are putting iPhone users at risk of downloading malicious apps that could steal data and spy on them, a Swiss researcher warns at Black Hat DC. Read the full article. [cnet]
Adware slingers have taken advantage of the buzz around the latest version of Firefox to establish a fake browser download site. Read the full article. [The Register]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
