Malwarians at the Gate: Banks, Businesses and ACH Fraud
Banks and their customers are on opposite ends of a feud over which is responsible when online banking accounts get hacked and pillaged. But where does the fault really lie?
Cryptography
‘Padding Oracle’ Crypto Attack Affects Millions of ASP.NET Apps
A pair of security researchers have implemented an attack that exploits the way that ASP.NET Web applications handle encrypted session cookies, a weakness that could enable an attacker to hijack users’ online banking sessions and cause other severe problems in vulnerable applications. Experts say that the bug, which will be discussed in detail at the Ekoparty conference in Argentina this week, affects millions of Web applications.
National Science Foundation: Time for Web Makeover
The National Science Foundation (NSF) has doled out grants worth up to
$32 million in total to a pack of universities dedicated to rethinking
everything about the Internet from from its core routing system to its
security architecture and addressing the emergence of cloud computing
and an increasingly mobile society. Read the full article. [Computerworld]
Banks and their customers are on opposite ends of a feud over which is responsible when online banking accounts get hacked and pillaged. But where does the fault really lie? And is there a cure for the plague of online banking fraud?
Banks and their customers are on opposite ends of a feud over which is responsible when online banking accounts get hacked and pillaged. But where does the fault really lie? And is there a cure for the plague of online banking fraud?
HEI Hospitality, owner and operator of upscale hotels operating under
the Marriott, Sheraton, Westin and other monikers, has sent letters
informing some 3,400 customers that their credit card data may have been
compromised. Read the full article. [IDG News Service]
Mozilla has joined Apple in being among the first to fix the DLL load hijacking attack vector that continues to haunt hundreds of Windows applications.
A run on programmable USB boards suggests that an open source version of the recent PSJailbreak could make it tough for Sony to stamp out PS3 piracy.
The countdown to the saturation of the IPv4
address supply is now down to a matter of months: and along with the
vast address space of the next-generation IPv6 architecture comes more
built-in network security as well as some new potential security
threats. Read the full article. [Dark Reading]
Heartland Payment Systems has agreed to pay $5 million to Discover to
settle claims arising from the massive data breach disclosed by the
payment processor last year. Read the full article. [Computerworld]
