Security

Hacking Software Guru Faces the Music in US Court
May 06, 2013

Hamza Bendelladj, an Algerian national known by his alias "Bx1," appeared in an Atlanta court last week, where he faced a 23-count indictment stemming from his alleged participation in the cybercrime consortium responsible for hacking software known as "SpyEye." Bendelladj, 24, was the target of a three-year manhunt that ended in a Bangkok airport in January.

Scan of Entire Internet Reveals Too Many Leaky Devices
May 06, 2013

There are 3.7 billion IP addresses on the Internet, and HD Moore has pinged every one of them. Moore is chief security officer at Rapid7, a cyberthreat and risk management company. In February, he decided as a hobby project to conduct a census of all the devices connected to the Internet, using a nest of computers in a spare room in his home.

Risk and Compliance: The Yin and Yang of Security
May 04, 2013

Mushrooming industry and government mandates that govern IT security have led to a highly regulated environment and annual compliance fire drills. Compliance, however, does not necessarily equal better security. We are reminded of this fact nearly every day when breaches make headlines. So what role should compliance and risk management play?

Mobile Industry Castigated for Limp Response to Cellphone Theft
May 03, 2013

The mobile industry isn't doing enough to prevent cellphone theft or to help its victims, critics allege. Theft of mobile devices is on the rise. In some cities, notably Washington, D.C., and San Francisco, it represents a significant portion of all robberies. Device manufacturers could offer tech solutions to help quickly trace devices or disable them once they are reported stolen.

Facebook's New Security Feature Puts Friends First
May 03, 2013

Have you forgotten or lost your Facebook password? Relax. You can now turn to friends for help. Facebook on Thursday rolled out Trusted Contacts account recovery, a feature it has tested with a limited number of people as the Trusted Friends capability since 2011. Users can select three to five trusted contacts from their security settings at any time.

The Real Mozilla Stands Up to Firefox-Cloaked Spyware
May 02, 2013

Mozilla, the creator of the Firefox browser, has sent a cease-and-desist letter to Gamma International, a German company that sells spyware to governments and law enforcement agencies. The move was a reaction to the news that a booby-trapped Microsoft Word document -- sent out for upcoming Malaysian elections -- embeds a copy of Gamma's FinSpy spyware that masquerades as a Firefox executable.

Airbnb Declares No Vacancies for Anonymity
May 01, 2013

Authentication requirements for some travelers looking for shared accommodations around the world will be getting a little tougher. Airbnb -- which allows people to list, discover and book unique accommodations through a sharing model -- announced Tuesday that it will be asking for more personal information from U.S. consumers who want to use its services.

Big IT Firms Apply Talents to Fed Cybersecurity Research
April 30, 2013

Protecting Internet information has become a costly enterprise, with worldwide spending on security estimated at $60 billion in 2012. That figure will grow to $86 billion by 2016, according to a Gartner study. To help ensure that those investments are being spent wisely -- and to keep technology a step ahead of threats -- 11 major companies have joined a program designed to research data security.

Millions of Livingsocial Users Now Prime Phishing Targets
April 29, 2013

LivingSocial's customers received some bad news on Friday: The popular daily deal site had been hacked, compromising some 50 million members' customer data. There was some good news -- credit card data was not affected, the company promised in its notice to customers. Also, the Facebook credentials of users who connected to LivingSocial using Facebook Connect were not compromised.

Report: Criminals Put a Bull's-eye on Web Infrastructure
April 29, 2013

Cybercriminals have begun focusing their malicious endeavors on the sinew of the Internet to reap greater rewards. For months now, Net bandits have targeted key infrastructure elements -- from the domain-naming service to certificate-issuing authorities to hosting services -- in order to spread cash-producing malware. "They're going after the infrastructure of the Internet," said Dave Jevans, chairman of Marble Security.

What Happens When Android Fails?
April 29, 2013

I've just finished doing yet another news program on the increasing risks of using an Android phone, and the discussions have started to drift to the potential for class-action lawsuits, commercial plane crashes, and cyberdisasters that would make 9/11 seem trivial -- all connected to this platform.

The Future Is Now With AT&T's New Home Automation Tech
April 26, 2013

AT&T has introduced Digital Life, a home security and automation system that realizes a goal the company set more than a decade ago of creating tools that would allow people to manage lights and security systems remotely. Digital Life will allow homeowners to control appliances, lock and unlock doors, and monitor their homes remotely using a number of mobile apps.

Fingerprint-Recognition Flubs May Be Foiling iPhone Production
April 26, 2013

Fingerprints may do more than smudge the screen of the next iPhone. They may be holding up its production. There reportedly has been some grumbling in Apple's supply chain due to delays in getting the next iPhone on the assembly line. Production originally scheduled for June may have to be pushed back.

Sony Launches Rugged, Super-Zoom 3D-Recording Binoculars
April 24, 2013

Sony is giving bird-watchers -- or anyone else who wants a closer look at something -- a way to truly zoom in on the action with its new DEV-50 binoculars, set to ship in June. While many nature lovers and sports fans can't put a price on what they might see through the binoculars, Sony has put a price on the actual device. It will cost $2,000.

Market Jitters Hint at Social Hacks' High Threat Level
April 24, 2013

Shortly after 1 p.m. ET on Tuesday, the world just about ended as far as Wall Street was concerned, when the AP tweeted that President Obama had been injured by explosions at the White House. Within minutes, the Dow dropped 145 points. Shortly afterward, the AP reported its Twitter account had been hacked. The markets quickly settled back into their normal rhythm of buying and trending, but the event left its mark.

Aussie Police Nab Possible Lulzsec Ringleader
April 24, 2013

Police in Australia have arrested a 24-year-old who claims to be a high-level member of the international hacking collective Lulzsec. The IT worker was charged with two counts of unauthorized modification of data and one count of unauthorized access to/modification of restricted data. In other words, he attacked and defaced a government website.

Report: State-Sponsored Cyberattacks Heat Up in 2012
April 23, 2013

State-sponsored cyberespionage incidents tripled over last year, according the 2013 Verizon Data Breach Report. 96 percent of those attacks were attributable to East Asia. Verizon's study, which analyzed 47,000 security incidents, expanded its contributors this year to 19, including a wider range of worldwide law enforcement agencies. Three key types of cyberattackers were identified in the report.

Fed Budget Makes Room for Cloud, Cybersecurity Upgrades
April 23, 2013

From partial unpaid furloughs of personnel to travel cutbacks, U.S. government agencies are scrounging to come up with ways to save money. In that light, the Obama Administration's proposed 2014 federal budget for information technology resources is good news for agency IT shops -- and for vendors serving the market. The administration has proposed spending $82 billion for information technology in fiscal 2014.

Android: A Second Career in Security?
April 23, 2013

Many of us have a wealth of decommissioned corporate-provisioned mobile devices: We've bought them, handed them out, and seen them used successfully for years. Now they're on their way to the great docking station in the sky. However, because these devices are already off the books adapting them for specific security functions can mean achieving certain goals practically for free.

Social Sharing May Be Eroding Office Security
April 22, 2013

It's no secret that security experts don't have a lot of love for social media. Information freely available at social media sites makes it easier for net marauders to fashion targeted attacks on organizations. However, social media may be undermining data security in a more profound way. Much has been made of the growing willingness of people to cough up personal information about themselves.