security news

Top 10 worst tech presents for Christmas

Here are ten geek gifts for people who’ve been naughty, or not naughty enough.

http://www.pcauthority.com.au/News/163327...

New Twitter Attack Details Emerge

The attack that took down Twitter Dec. 17 used legitimate credentials to log in and redirect Twitter.com to a site purporting to be under the control of the Iranian Cyber Army. The incident underscores the importance for businesses of keeping an eye on DNS security.

http://www.eweek.com/c/a/Security/New-Twitter-Attack...

Beyond ACTA: Proposed EU - Canada Trade Agreement Intellectual Property Chapter Leaks

Canada's participation in the Anti-Counterfeiting Trade Agreement negotiations has understandably generated enormous public concern as leaked documents indicate that ACTA would have a dramatic impact on Canadian copyright law. The U.S. has proposed provisions that would mandate a DMCA-style implementation for the WIPO Internet treaties and encourage the adoption of a three-strikes and you're out system to cut off access where there are repeated allegations of infringement.

http://www.michaelgeist.ca/content/view/4627/125/

Bank's antifraud tactics stun security expert: How much do they know?

AVG's Roger Thompson discusses brush identity-theft prevention measures

http://www.networkworld.com/news/2009...

Our [Honey Pot Project] 1 Billionth Spam Message

On Wednesday, December 9, 2009 at 06:20 (GMT) Project Honey Pot received its billionth email spam message. The message, a picture of which is displayed below, was a United States Internal Revenue Service (IRS) phishing scam. The spam email was sent by a bot running on a compromised machine in India (122.167.68.1). The spamtrap address to which the message was sent was originally harvested on November 4, 2007 by a particularly nasty harvester (74.53.249.34) that is responsible for 53,022,293 other spam messages that have been received by Project Honey Pot.

http://www.projecthoneypot.org/1_billionth_spam_message_stats.php

Getting Started With Full Disk Encryption

Today, full-system encryption in software is feasible and practical. Here's how to get up and running using solutions from PGP, McAfee, Sophos, and open-source options TrueCrypt and DiskCryptor.

http://www.informationweek.com/news/infrastructure...

Hackers Brew Self-Destruct Code to Counter Police Forensics

Hackers have released an application designed to thwart a Microsoft-packaged forensic toolkit used by law enforcement agencies to examine a suspect’s hard drive during a raid.

http://www.wired.com/threatlevel/2009/12/decaf-cofee

US and Russia in cyber security talksDecember 14, 2009 by John Lister

The United States and Russia have begun discussions on increasing security online. The two sides are also said to be working for an agreement to cut the number of online military attacks.

http://tech.blorge.com/Structure:%20/2009/12/14/...

SQL attacks take off in last year

Online attacks against databases have taken off in the past 18 months, according to data released by IBM’s X-Force security team.

http://www.securityfocus.com/brief/1048

Unu hits Kaspersky a second time with SQL Injection disclosure

Unu, who has gained a good deal of attention lately, is known for his vulnerability disclosures that center on SQL Injection. In his latest adventures, he returns to a vendor he has targeted in the past, security software specialist Kaspersky.

http://www.thetechherald.com/article.php/200950/4931/Unu-hits...