Hacks


Two Members of LulzSec Plead Guilty to Cyber Crimes

Two members of the hacker group Lulz Security (LulzSec) pleaded guilty today to taking part in a cyber crime spree that launched attacks against Web sites belonging to law enforcement, corporations and media companies.

Ryan Cleary, 20, of Wickford, Essex and Jake Davis, 19, of Lerwick, Shetland admitted in a London courtroom to two counts of conspiracy to do an unauthorized act or acts with intent to impair, or with recklessness as to impairing, the operation of a computer or computers, according to numerous published reports.


There is a line of thinking that pervades and pollutes the discussions of many sporting events, and it goes something like this: “You can’t let LeBron James/Derek Jeter/Lionel Messi beat you. You have to force someone else to beat you.” It’s a flawed strategy for a number of reasons, but it’s even more problematic when you realize that this same mentality could be applied to information security.

A significant flaw in the Face.com mobile application KLIK has been fixed to prevent Facebook and Twitter users from having their accounts hijacked.KLIK is a camera app that uses face recognition to tag friends in Facebook photos in real time. It also apparently granted access to KLIK users’ private authentication tokens for Facebook and Twitter accounts, allowing them to be taken over by another user.

One day after a hacker using the handle “Reckz0r” claims to have infiltrated 79 different banks and leaked information allegedly belonging to Visa and MasterCard customers, there are questions about whether a hack actually occurred.

In case you thought that the mass exodus of researchers from TippingPoint’s Zero Day Initiative in recent months meant that the demand for third-party vulnerability markets was waning, fear not. Several former members of the ZDI team have come back together to form a new firm called Exodus Intelligence that will have its own vulnerability purchasing program, among other offerings.