Facebook Conceal Java Crypto LIbrary Open Sourced

Facebook has released to open source its Conceal Java crypto libraries for Android devices. Conceal, according to Facebook, offers developers a lightweight and efficient crypto library. The social media giant developed Conceal to handle encryption of storage on removable SD cards, something that...

Chewbacca Tor-Based Malware Targets Point of Sale Systems

Before you think that RAM scraper malware was a phenomenon specific to the Target breach, think again. A four-month-long crime spree targeting point-of-sale systems in a number of industries has been discovered; the campaign, however, is not related to the mammoth Target break-in or other recentl...

Tor-enabled Point-of-Sale malware 'ChewBacca' stole Credit Card data from 11 Countries

+malware+stole+credit+card+data+from+11+Countries.jpg After the massive data breaches at U.S retailers Target and Neiman Marcus in which financial credentials of more than 110 million and 1.1 million customers were compromised respectively, shows that the Point of Sale POS system has become a new...

Hardcoded Vendor Credentials Used in Target Data Breach

Attorney General Eric Holder told members of a Senate Judiciary Committee yesterday that the U.S. Justice Department is investigating the Target data breach. Target has already brought in the Secret Service and a computer forensics company to look into the break-in, which reportedly lasted betwee...

Honey Encryption Deceives Hackers with Plausible Data

Traps are constantly set on the Internet to snare hackers in order to research their behavior and tactics. Many of these traps are honeypots or honeynets that take the form of deliberately unpatched computers or infrastructure exposed to the Internet that lure attackers to break in while their...

Michaels Data Breach Under Investigation

Officials at Michaels, the large craft and home goods retailer, are investigating a potential data breach that has apparently affected an unknown number of cards used in the chain’s stores in the last few weeks. The company has released very little detail about the compromise but said that it is...

Possible Data Breach at Arts and Crafts Retailer 'Michaels Store'

Western landscapes are facing a hell lot of data breaches started with Target, Neiman Marcus and now country's largest crafts chain 'Michael’s Art and Crafts' may be is the latest retailer hit by a security breach. In a statement, Irving, Texas-based company acknowledged a possible data security...

CBI arrests Indian mastermind behind Hire-a-Hacker service on FBI tip-off

For the first time in history, Indian Law Enforcement Agency 'Central Bureau of Investigation' CBI has arrested a Cyber criminal after getting a tip-off from the US Federal Bureau of Investigation FBI. 33-Year-old Amit Vikram Tiwari, son of an Indian Army colonel and an engineering dropout, who...

Bluetooth Gas Pump Skimmer Scam Nets $2 Million

Thirteen men were indicted this week for allegedly using Bluetooth-enabled skimmers to steal more than $2 million from customers at gas stations across the Southern United States between 2012 and 2013. Documents released on Tuesday by the offices of Manhattan District Attorney Cyrus R. Vance, Jr...

GLSA-201401-18 : OpenSC: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201401-18 OpenSC: Arbitrary code execution Multiple stack-based buffer overflow errors have been discovered in OpenSC. Impact : A physically proximate attacker could possibly execute arbitrary code using a specially crafted smart...

Bluetooth enabled Credit Card Skimmers planted at Gas Station lead to $2 Million heist

Cyber Criminals will not let any way out without making Money. Another huge Credit Card theft and this time they targeted Gas Stations. 13 men were suspected and charged for stealing banking information, using Bluetooth enabled Credit Card Skimmers planted on the gas stations throughout the...

CCID: Arbitrary code execution

Background CCID is a generic USB Chip/Smart Card Interface Devices driver. Description CCID contains an integer overflow vulnerability in ccidserial.c. Impact A physically proximate attacker could execute arbitrary code via a smart card with a specially crafted serial number. Workaround There is ...

OpenSC: Arbitrary code execution

Background OpenSC is a tools and libraries for smart cards. Description Multiple stack-based buffer overflow errors have been discovered in OpenSC. Impact A physically proximate attacker could possibly execute arbitrary code using a specially crafted smart card. Workaround There is no known...

Starbucks Patches Vulnerable iOS App

Starbucks has patched a vulnerability in its iOS app that was found last week spilling user data, including usernames and passwords, by adding what it’s called an “additional safeguard measure” to protect its customers. While it’s a relatively quick turnaround for the company – it only took about...

vSkimmer Point-of-Sale Terminals Server Information Disclosure

vSkimmer is a Trojan-like malware designed to infect Windows-based servers attached with payment card readers. Post infection, the malware gathers sensitive information such as Credit Card numbers and sends it back to the C server...

20 Million Credit Cards stolen in South Korea; 40% Population affected by the Data Leak

Since all threats to data security and privacy often come from outside, but internal threats are comparatively more dangerous and a difficult new dimension to the data loss prevention challenge i.e. Data Breach. The "Insider threats" have the potential to cause greater financial losses than attac...

Target Attackers Took 11 GB of Data, Researchers Say

The attackers who infiltrated Target’s network several weeks ago and made off with 40 million credit and debit card numbers used a multi-stage attack, funneling their stolen data through an FTP server and then a VPS server in Russia. It took more than two weeks, but the attackers eventually...

NSA admits to collect 200 Million text messages per day under Project DISHFIRE

After the exposure of various surveillance programs, including PRISM, XKeyscore, MUSCULAR, DROPOUTJEEP in recent revelation, NSA has come up as the only ‘Government that Actually Listen’. Another day and here comes another revelation - According to the The Guardian, National Security Agency NSA h...

Detecting and Preventing Compromises in Retail Payment Systems

Information Weeks Matthew Swartz published an article on the recently- confirmed payment card breaches at Target, Nieman Marcus and three other unnamed retailers. This article and many others reveal that these attacks involve sophisticated malware and some even suggest it is the work of the same...

US retailer Neiman Marcus confirmed data breach after TARGET

The TARGET Hack was not the only massive Data breach that happened during the last Black Friday, but also other three major US Retailers were also hacked. Recently, Neiman Marcus also confirmed a data breach that involves Credit card theft from its customers during the holiday shopping season,...