Dennis Fisher and Mike Mimoso Discuss the Windows HTTP.sys Vulnerability and More

Dennis Fisher and Mike Mimoso discuss the Windows HTTP.sys vulnerability, Google’s decision to turn off the NPAPI in Chrome and the voting machine security disaster in Virginia. Download: digitalunderground195.mp3 Music by Chris Gonsalves...

Virginia Voting Machines Exposed to Low-Level, Election Altering Hacks Since 2004

The Virginia Information Technologies Agency VITA is calling on the board of elections in that commonwealth to immediately discontinue use of its electronic voting devices after an examination revealed the systems lack strong credentials and encryption and are utterly vulnerable to vote...

Court: Government Need Not Justify Warrantless Data Requests

A Virginia appeals court on Friday denied a right-to-access order filed by the Electronic Frontier Foundation and the American Civil Liberties Union on behalf of Icelandic parliamentarian Birgitta Jonsdottir and computer security researchers Jacob Appelbaum and Rop Gonggrijp. The denial confirms ...

CIA Admits It Monitors, Analyzes Facebook, Twitter

The Associated Press published a report today detailing, for the first time, a unit within the CIA, referring to itself as the ‘vengeful librarians,’ that is responsible for monitoring the vast and various social networks, local and international news, radio, and television, Internet chat rooms,...

Amazon Web Service Down, No Timeline for Remedy

Amazon Web Service’s AWS Elastic Compute Cloud EC2, based in Northern Virginia, went offline early this morning, taking with it a number of popular sites including, news aggregator Reddit and question and answer site and TechCrunch darling, Quora.The Web hosting firm’s Relational Database Service...

Thieves Steal $1 Mil from Univ. of Virginia

Cyber crooks stole just shy of $1 million from a satellite campus of The University of Virginia last week. Read the full article. KrebsonSecurity...

DNSSEC Ceremony Generates Master Root Key

The dream of bolting security onto the Internet’s Domain Name System takes one step closer to reality as Internet policymakers hosted a ceremony in northern Virginia to generate and store the first cryptographic key that will be used to secure the Internet’s root zone. Read the full article...

800 Virginia PCs Destroyed By Possible 'Time Bomb'

The City of Norfolk, Virginia is reeling from a massive computer meltdown in which an unidentified family of malicious code destroyed data on nearly 800 computers citywide. Read the full article. KrebsonSecurity...

Inside An Online Banking Money Mule Scam

New evidence indicates one of the gangs chiefly responsible for bank attacks actually managed to hack directly into a West Virgina U.S. bank last year and siphon off tens of thousands of dollars with the aid of unsuspecting money mules. Read the full article. KrebsonSecurity...

Virginia Loses Records for 103,000 Adult Education Students

The parade of large-scale data losses is continuing unabated. The latest incident involves an unencrypted Flash drive containing the personal information of more than 100,000 adult education students in Virginia. The drive was lost late last month and no one seems to have found it yet. According ...

Hackers break into database, demand ransom

From WaPo Security Fix Brian Krebs Hackers last week broke into a Virginia state Web site used by pharmacists to track prescription drug abuse. They deleted records on more than 8 million patients and replaced the site’s homepage with a ransom note demanding $10 million for the return of the...