A hacker attack at payroll processing firm Ceridian Corp. has potentially revealed the names, Social Security
numbers, and, in some cases, the birth dates and bank accounts of
27,000 employees working at 1,900 companies nationwide. Read the full article. [StarTribune]
A pair of Spanish researchers here today
demonstrated a way to hack the connection between a Web application and
a database, letting the attacker hijack Web credentials and perform
other nefarious activities. Read the full article. [Dark Reading]
The ultra-secure technology used to protect
some of the world’s most commonly used microchips might not be so
secure, a researcher said at Black Hat DC. Read the full article. [Dark Reading]
Apple has shipped a patch to cover five documented vulnerabilities that expose iPhone and iPod Touch users to malicious hacker attacks. The most serious flaw could allow remote code execution if an iPhone/iPod Touch user opens audio and image files.
Brian Krebs talks with Rick Doten, chief scientist at Lockheed Martin’s Center for Cyber Security Innovation. Doten has built an impressive slide deck on ATM fraud attacks. Read the full article. [KrebsonSecurity]
When a computer virus infection at a business allows thieves to steal tens of thousands of dollars from the company’s commercial banking account, banks typically don’t reimburse the victim company. But the truth is, most banks make that decision on a case-by-case basis. Take, for example, the case of two Umpqua Bank customers in Vancouver, Wash., both of which suffered major financial losses last year after compromises at employee computers allowed thieves to access their accounts remotely. Read the full article. [KrebsonSecurity]
Matthew Delorey of New Bedford, MA was arrested on wire fraud and conspiracy charges
relating to his sale of hacked cable modems modified to permit a user to hide his or her identity
and steal service from Internet service providers. Read the full statement. [FBI.gov]
A vast majority of voice encryption products are seriously flawed, according to controversial tests by an anonymous hacker.
Using the commercially available FlexiSpy wiretapping utility and a
‘homemade’ Trojan, Notrax (the anonymous hacker’s nickname) claims to
have defeated 11 out of 15 voice encryption technologies in tests. Read the full article. [The Register]
Researchers at the University of Cambridge Computer Laboratory, say the
3D Secure (3DS) authentications system branded as the “Verified by
Visa” and “MasterCard SecureCode” schemes are “a text book example of
how not to design an authentication protocol.” Read the full article. [The H Security]
By Scott Crawford & Nick SelbyThere has been much talk recently about the “Advanced Persistent Threat.” According to Richard Bejtlich [1] and others, the term originated with the US Air Force around 2006, which explains why Bejtlich and others with an Air Force pedigree, such as Mandiant founder Kevin Mandia, have made much of the term.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
