The developers behind the OAuth protocol have developed a new variant called OAuth WRAP that is simpler and easier to implement. It’s a stop-gap solution that will enable broader OAuth adoption while
OAuth 2.0, the next generation of the specification, is devised by a
working group that is collaborating through the Internet Engineering
Task Force (IETF). Read the full article. [Ars Technica]
A patch for the MIT’s Kerberos 5 implementation is to fix integer underflows in the functions for decrypting AES and RC4 ciphertexts. Read the full article. [The H Security]
Security reporter Brian Krebs goes visual with ATM skimmers, asking readers to look at images and see if they would be able to tell the difference between a real ATM card reader and actual skimming devices. Read the full article. [KrebsonSecurity.com]
Security measures such as the use of one-time passwords and phone-based user authentication — considered among the most robust forms of IT defenses — are no longer enough to protect online banking systems against fraud, a Gartner report warns. Read the full article. [Computerworld]
A day after confirming a major security breach by Chinese hackers looking for GMail account information, Google has turned on default “https:” access for its popular Web mail service.
Math is hard and cryptography is even harder. So in light of the news that another of the ciphers used to secure traffic on 3G GSM networks has been cracked, we turned to mathematician and cryptographer Bruce Schneier to explain the attack and its ramifications.
On January 1, 2010, two important state data security and privacy laws
took effect in Nevada and New Hampshire that create new
obligations for most companies that do business in Nevada and for
health care providers and business associates in New Hampshire. Read the full article. [Hunton & Williams Law Blog]
Banks, military contractors and software companies, along with federal
agencies, are looking for “cyber ninjas” to fend off a sophisticated
array of hackers, from criminals stealing credit card numbers to
potential military adversaries. Read the full article. [NY Times]
The FBI is investigating the theft of nearly a half million dollars
from tiny Duanesburg Central School District in upstate New York, after
cyber thieves tried to loot roughly $3.8 million from district online
bank accounts last month. Read the full article. [KrebsonSecurity]
Kingston Technology has asked customers to return certain models of its DataTraveler secure flash drives for an update, following the discovery of a flaw in the memory sticks. Read the full article. [ZDNet]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
