The attackers who infiltrated Target’s network several weeks ago and made off with 40 million credit and debit card numbers used a multi-stage attack, funneling their stolen data through an FTP server and then a VPS server in Russia. It took more than two weeks, but the attackers eventually exfiltrated about 11 GB of data, researchers say.
US-CERT issued an alert warning of the recent rash of network time protocol (NTP) amplification attacks. NTP attacks have been blamed for recent DDoS attacks against popular online gaming sites.
Dennis Fisher talks with Rich Mogull of Securosis about the Target data breach, how the attack may have worked, why these breaches are still so common and what can be done to improve the situation.
The Syrian Electronic Army is claiming responsibility for compromises of the official Microsoft blog as well as the official Xbox and Skype Twitter accounts.
OpenSUSE forums have been taken offline after hackers exploited a vulnerability in the forums’ vBulletin implementation to access a database and steal email addresses.
Researchers have conceptualized a narrative-based authentication system based on a user’s recent interaction with their computer.
OpenSSL says hackers took advantage of a weak password used at its hosting provider to gain access to a hypervisor and deface the organization’s website.
Probes are surging against a port used by a backdoor discovered in Linksys networking gear, according to the SANS Internet Storm Center.
The Syrian Electronic Army took advantage of the relative calm of New Year’s Day to make a loud statement about the NSA’s surveillance program and Microsoft’s alleged participation in it.
Researchers Sean Cross and Dr. Andrew Huang demonstrated yesterday at the Chaos Communication Congress that they could write arbitrary code onto various flash-based SD memory cards.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
