The age-old adage that there’s “no honor among thieves” appears to be playing out in the world of hacking, as well, as members of the online hacking group Lulzsec published information identifying two associates they accuse of informing on them to authorities.
WordPress, the popular blogging platform, is requiring users to change their account passwords after members of the company’s security team discovered cleverly disguised backdoors in some of the platforms most popular plug-ins.
Google announced on Tuesday the availability of a new free application testing tool, dubbed “DOM Snitch,” that it says will help Web application developers find vulnerabilities in client side Web applications.
UK authorities have arrested an 19 year-old from Essex, England who is believed to be a member of the anarchic group Lulzsec following an investigation by the U.S. Federal Bureau of Investigation and British intelligence.
The U.S. CERT has issued a security advisory firms using industrial control systems software from the Chinese firm Sunway in the U.S. after a researcher discovered remotely exploitable holes that could be used to knock out or take control systems running the company’s software.
This is the first in a two-part interview with Aaron Barr, the former CEO of HBGary FederalEach of us has made mistakes in our lives – woeful errors that we’ve been forced to learn from at great personal cost. Blessedly, those painful experiences are typically private affairs. Tears are spilled. Mea culpas are issued to those we’ve wronged, then we, the folks we hurt and the storm clouds move on.
BITS, a financial services industry trade group has published a guide to malicious software and cyber crime that finds many industry attempts to fight the problem haven’t worked. The report calls on financial services firms to cooperate more in fighting malware.
In the wake of a report about vulnerabilities in its products, Siemens issued a patch for its Simatic S7 industrial controllers on Monday. ICS CERT, the Cyber Emergency Response Team for Industrial Control Systems, issued an alert advising Siemens customers to apply the patch.
UPDATE: Feds aren’t the only ones who are paying attention to the demonstrations at security conferences like Black Hat and DEFCON – the folks who actually don the black hats are, also.
Citigroup
is warning its credit card users that attackers have stolen account information
belonging to 200,000 customers. The breach apparently was discovered last
month.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
