« IT Security Highlights March 2 2010 | Main | IT Security Highlights March 4th 2010 »
IT Security Highlights March 3rd 2010
By Kelli Tarala | March 4, 2010
Resembling ‘cartels,’ hackers become more industrialized
Hackers are more “industrialized” than ever before and hacking communities now resemble an organized “drug cartel”, according to a report released on March 1. Imperva, a data security company, found that today’s cybercrime industry has transformed and automated itself to mimic the 19th century industrial revolution, which accelerated assembly from single to mass production.
Gmail security enhancements expected this week
Google will roll out a number of security enhancements to Gmail the week of March 1, and perhaps as early as March 2, says a source with knowledge of the new 20 features. The changes are specifically designed to cut down on phishing and hacking attacks on Gmail accounts.
Full Story:
http://techcrunch.com/2010/03/01/gmail-security-enhancements-expected-tuesday/
Microsoft warns of new bug affecting IE users
Steer clear of the F1 key while surfing the Web, at least for a little while. Microsoft warned on March 1 of a new vulnerability that affects Internet Explorer users, saying that it could be exploited by hackers to install malicious software on a victim’s computer.
Full Story:
http://www.networkworld.com/news/2010/030210-microsoft-warns-of-new-bug.html?hpg1=bn
Report: Aurora attack was tested last summer
The attacks on Google and others late last year weren’t as sophisticated as initially believed and appears to have cropped up last summer, according to a report to be released Tuesday by security firm Damballa. Damballa is just the latest company to analyze the attacks and offer an opinion. McAfee dubbed the attacks “Operation Aurora” and said they were highly complex and advanced. While ‘Aurora’ was a very damaging attack that breached some of the most sophisticated networks in the world, it is a ‘garden variety’ botnet and can be traced back to July 2009 when the criminal operators first began testing.
Full Story: http://news.cnet.com/8301-27080_3-10461935-245.html
Word of Warcraft authenticators bypassed by middlemen hackers
Crooks have developed a man-in-the-middle-attack designed to circumvent authentication kit used by dedicated World of Warcraft gamers. World of Warcraft players are reporting that the new infection file is managing to intercept login data (getting around the authenticator) and send it elsewhere, by means of a “Man in the middle attack.” The approach of the gaming fraudsters is broadly similar to man-in-the-middle attacks against online banking accounts, where users are obliged to input a code generated by an authentication device as well as their password.
Full Story:
http://www.theregister.co.uk/2010/03/02/warcraft_account_hack/
Read the Complete DHS Infrastructure Report
www.enclavesecurity.com/blogresources/cdr_030310.pdf
Topics: DHS Infrastructure Reports |
Comments are closed.