The Apple iPhone may still be the gold standard when it comes to smartphones, but the Android platform has become the playground of choice for attackers and malware authors looking to make a quick buck. The latest example is a premium-rate SMS Trojan that not only automatically sends costly SMS messages, but also prevents users’ carriers from notifying them of the new charges.
Members of the loosely organized group conducting the AntiSec hacking campaign have compromised a company called IRC Federal, which does contracting for the FBI and other federal agencies, posting a large trove of information online in retaliation for what the group says is IRC Federal’s record of “selling out their ‘skills’ to the US empire.
One thing that CME Group, the company that runs the Chicago Mercantile Exchange, wants to make perfectly clear is that it places a “high value on protecting its intellectual property and trade secrets.” That was the clear message from CME following the arrest of an employee for stealing company secrets.
Siemens AG issued an advisory to customers on Tuesday warning of a weakness in its Simatic S7 programmable logic controllers that could allow a remote attacker to intercept and decipher passwords, or change the configuration of the devices.
The clock is ticking for Apple to issue a patch for the iOS operating system that powers iPhones, iPods and iPads following the release of a remote exploit that uses specially crafted PDF files to defeat iOS’s content protection mechanisms and “jailbreak” mobile devices like the iPhone and iPad.
Worried that your organization might be the victim of a targeted attack or data breach? The proof may be right out in the open: posted for the world to see on Pastebin.com, LodgeIT, Pastie.org and other sites according to security expert Lenny Zeltser.
Microsoft’s Patch Tuesday release next week will comprise four bulletins, one of which is rated critical, covering vulnerabilities in numerous versions of Windows as well as Visio 2003.
It wasn’t long ago – just a month in fact – that Apple’s iOS mobile operating system was being called the ‘Most secure’ OS. Period.’ A few weeks later, and the security of that OS has fallen (again) to the talents of Comex, an as-yet-unnamed mobile device hacker whose work is attracting kudos from some of the world’s top hackers, vulnerability researchers and exploit writers.
The Internet Systems Consortium has released new versions of the ubiquitous BIND server software that fix a pair of vulnerabilities in existing releases, one of which enables an attacker to stop the software from running on remote DNS servers.
HED: U.S. Secret Service investigating Fox News Hack after Obama assassination messages postedDEK: The U.S. Secret Service said it is investigating the July 4 account hijack of a twitter account belonging to Fox News after messages reporting the assassination of U.S. President Barack Obama were posted on the account. The U.S. Secret Service said it is investigating the July 4 account hijack of a twitter account belonging to Fox News after messages reporting the assassination of U.S. President Barack Obama were posted on the account. Spokesman Max Milien told Threatpost that the Secret Service, which is charged with protecting the President and other high ranking government officials, was conducting an investigation of the hack and macabre messages, which were posted early Monday, July 4, on the account @FoxNewsPolitics. However, Milien declined to comment on the breadth of the investigation or whether the U.S. Secret Service was working in coordination with the FBI or other entities. The investigation stems from an embarassing breach of security for the @FoxNewsPolitics, an account that distills the networks political news stories and that enjoys more than 38,000 followers. (http://threatpost.com/en_us/blogs/fox-news-caught-sleeping-after-twitter-account-hacked-070411) As part of the attack, erroneous twitter messages (or “tweets”) were posted claiming that U.S. President Obama had been assassinated in Iowa and that Vice President Joe Biden had assumed the presidency. Those messages remained up on Twitter for more than seven hours while Fox and Twitter regained control of the account. A source with knowledge of the attack says that Fox reacted immediately to the breach, but that San Francisco based Twitter was slow to remove the offending messages. Twitter has not responded to requests for comment from Threatpost. The U.S. Secret Service investigation is likely to focus on the source, rather than the technical details of the attack. Word of the breach first spread from a Twitter account @thescriptkiddie. That account was suspended on Monday and remained offline on Tuesday. The U.S. Secret Service said it is investigating the July 4 account hijack of a twitter account belonging to Fox News after messages reporting the assassination of U.S. President Barack Obama were posted on the account.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
