ATM, Gas Pump Skimming On The Rise

Criminals hit ATMs in two states over the recent holidays to skim account numbers and PINs from customers in North Carolina and Florida, according to police. Read the full article. BankInfoSecurity.com...

AIX 530009 : U825279

The remote host is missing AIX PTF U825279 which is related to the security of the package devices.common.IBM.atm.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

U.S. Takes Down $9 Million RBS WorldPay Hacking Ring

U.S. and international prosecutors have taken down a criminal ring that they allege was responsible for an ATM scam last year that stole about $9 million from RBS WorldPay. The criminals were able to evade the company’s encryption system used on payroll debit cards and withdraw money from ATMs in...

Fraudsters Trying to Capture Bank Cards at Machines

If your cash card gets eaten by the automated-teller machine, it may not end up in the hands of a bank employee. European financial institutions are seeing a sharp rise in card “trapping,” where criminals use various tricks in order to capture and retrieve a person’s ATM card for fraudulent use...

The Difficulty of Un-Authentication

By Bruce Schneier In computer security, a lot of effort is spent on the authentication problem. Whether it’s passwords, secure tokens, secret questions, image mnemonics, or something else, engineers are continually coming up with more complicated — and hopefully more secure — ways for you to prov...

Video: Man Caught Installing 'Skimmer' on ATM

LiveLeak has posted surveillance video footage from earlier this month of a guy in Brazil installing a skimming device onto a bank ATM. The second half of the tape shows him being arrested and officials revealing the device. Via Consumerist...

AIX 5.3 TL 6 : devices.common.IBM.atm.rte (U822017)

The remote host is missing AIX PTF U822017, which is related to the security of the package devices.common.IBM.atm.rte. The muxatmd command contains a buffer which can overflow. A local attacker may exploit this overflow to execute arbitrary code with root privileges because the command is setuid...

Debian DSA-1787-1 : linux-2.6.24 - denial of service/privilege escalation/information leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-4307 Bryn M. Reeves reported a denial of service in the NFS filesystem...

[SECURITY] [DSA 1787-1] New Linux 2.6.24 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1787-1 [email protected] http://www.debian.org/security/ Dann Frazier May 2, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1787-1] New Linux 2.6.24 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1787-1 [email protected] http://www.debian.org/security/ Dann Frazier May 2, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-1787-1 linux-2.6.24 - several vulnerabilities

Bulletin has no description...

MDVA-2008:190 : drakx-net

This update adds support for ATM bridging in the network configuration tools and backend. It is mostly used for ADSL pppoe connections with USB modems bug 35797. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

Ubuntu 8.10 : linux vulnerabilities (USN-715-1)

Hugo Dias discovered that the ATM subsystem did not correctly manage socket counts. A local attacker could exploit this to cause a system hang, leading to a denial of service. CVE-2008-5079 It was discovered that the inotify subsystem contained watch removal race conditions. A local attacker coul...

Mandriva Linux Security Advisory : kernel (MDVSA-2009:032)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service kernel infinite loop by making two calls to svclisten for the same socket, and then reading a...

Mandriva Update for drakx-net MDVA-2008:190 (drakx-net)

Check for the Version of drakx-net OpenVAS Vulnerability Test Mandriva Update for drakx-net MDVA-2008:190 drakx-net Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for drakx-net MDVA-2008:190 (drakx-net)

Check for the Version of drakx-net OpenVAS Vulnerability Test Mandriva Update for drakx-net MDVA-2008:190 drakx-net Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for kernel MDKSA-2007:012 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKSA-2007:012 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Card-sniffing malware on Diebold ATMs

By Bob McMillan, ComputerWorld Diebold has released a security fix for its Opteva automated teller machines after cybercriminals apparently broke into the systems at one or more businesses in Russia and installed malicious software. McMillan reports that Diebold learned of the incident...

RedHat Security Advisory RHSA-2009:0053

The remote host is missing kernel updates announced in advisory RHSA-2009:0053. These updated packages address the following security issues: a flaw was found in the Asynchronous Transfer Mode ATM subsystem. A local, unprivileged user could use the flaw to listen on the same socket more than once...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise MRG 1.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...