Google Sorry For Business User Data Leak
Google is apologizing after it mistakenly e-mailed potentially sensitive business data last week to other users of its business listings service. Read the full article. [InfoWorld]
Vulnerabilities
ATM, Gas Pump Skimming On The Rise
Criminals hit ATMs in two states over the recent holidays to skim
account numbers and PINs from customers in North Carolina and Florida,
according to police. Read the full article. [BankInfoSecurity.com]
Lethic Spamming Botnet Shut Down
Yet another botnet has been shut down as of
today as researchers joined forces with ISPs to cut communications to
the prolific Lethic spamming botnet — a development that illustrates
how botnet hunters increasingly are going on the offensive to stop
cybercriminals, mainly by disrupting their valuable bot
infrastructures. Read the full article. [Dark Reading]
The image of an open Amazon delivery box has a prominent place in the
latest spam campaign that aims to trick users into downloading an
alleged order update coming from the dot com giant. Read the full article. [Help Net Security]
The group that took down Twitter.com last
month has apparently claimed another victim: China’s largest search
engine Baidu.com. Read the full article. [Computerworld]
A group of cryptographers has developed a new attack that has broken Kasumi, the encryption algorithm used to secure traffic on 3G GSM wireless networks. The technique enables them to recover a full key by using a tactic known as a related-key attack, but experts say it is not the end of the world for Kasumi.
In 2009, the Identity Theft Resource Center recorded 498 breaches, less than the 657 in 2008, more than the 446 in 2007. Are data breaches increasing or decreasing? That is the question no one can answer. Read the full article. [Help Net Security]
A false rumor suggesting that Facebook is to start charging is being used to bait malware traps.Thousands of disgruntled users, angry at the false claims that a $4.99 a month charge
for using the social networking site that will supposedly kick in have been induced to
visit “protest group” sites in response to spam emails. Read the full article. [The Register]
A phisher hoping to harvest bank login details managed to smuggle his app onto the Android app store. Malicious apps posted by Droid09 were quickly identified, prompting a warning to legitimate users and a ban for the VXer. Read the full article. [The Register]
Proof of concept exploit code was posted by a security researcher demonstrating a
vulnerability in versions 10.5 and 10.6 of Apple’s Mac OS X operating
system. Read the full article. [Dark Reading]
