The Norwegian University of Science and Technology (NTNU) and the
University of Erlangen-Nürnberg together with the Max Planck Institute
for the Science of Light in Erlangen have recently developed and tested a
technique exploiting imperfections in quantum cryptography systems to
implement an attack. Read the full article. [Science Daily]
Organized cyber thieves stole more than $600,000 from the Catholic Diocese of Des Moines, Iowa
earlier this month with the help of
dozens of unwitting co-conspirators hired through work-at-home job
scams, at least one of whom was told the money was being distributed to
victims of the Catholic Church sex abuse scandals. Read the full article. [KrebsonSecurity]
According to the developers, the latest release of the free SSH
connectivity tools include a number of bug fixes and several new
features. Read the full article. [The H Security]
In this video from the OWASP AppSec Research conference in Sweden, security researcher Ivan Ristic of Qualys discusses practical methods for breaking SSL.
Penn State researchers managed to
identify the pass code patterns on two Android smartphones (the HTC G1
and the HTC Nexus One), 68 percent of the time using photographs taken under
different lighting conditions, and camera positions. Read the full article. [ZDNet]
Dennis Fisher talks with Alex Hutton of the Verizon Business RISK team about the new Data Breach Investigations Report, the involvement of the Secret Service in this year’s report and the need for more and better data on attacks and successful defenses.
A password of less than seven characters will soon be “hopelessly
inadequate” even if it contains symbols as well as alphanumerical
characters, according to computer scientists at the Georgia Tech
Research Institute. Read the full article. [The Register]
A non-profit group that tracks malicious activity online has just started a new free service that enables users to check executable files against a database of known good applications and to help determine whether a given file is malicious.
A 15-year-old vulnerability in technology used to authenticate users on
Windows and Unix networks continues to put the organizations that rely
on it at risk, said a researcher. Read the full article. [The Register]
This year’s Verizon Data Breach Investigations Report (DBIR) challenge is well and truly underway. I see where the (public) contestants are stumped so, here’s a clue to nudge them along:
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
