EU Officials, Privacy Agencies Attempt to Clarify Cookie Rules

Officials in Europe this week are hoping to set clearer rules for online advertisers with new guidelines that are supported by the continent’s leading digital privacy agencies. According to a report from the Wall Street Journal, agencies from the European Union’s EU member countries met last week...

How The Free Market Fails Privacy-Conscious Consumers

Editor’s Note: This is the first of a two-part podcast with security researcher Chris Soghoian. It’s a truism that the pace of technological change outstrips society’s ability to grasp the impact of that change. For the most part, the consequences of this are benign and the remedies...

NGS00153 Patch Notification: McAfee Email and Web Security Appliance v5.6 - Reflective XSS allowing an attacker to gain session tokens

High Risk Vulnerability in McAfee Email and Web Security Appliance 29 March 2012 Ben Williams of NGS Secure has discovered a high risk vulnerability in the McAfee Email and Web Security Appliance Impact: Reflective XSS allowing an attacker to gain session tokens Versions affected: All versions...

Tapes Containing Information On 800K Lost From California Child Support Agency

Backup cartridges containing records on 800,000 individuals belonging to the California Department of Child Support Services DCCS were lost in transit between an IBM facility in Colorado and DCCS’s headquarters in California On March 12, according to a statement from DCCS. PDF The records in...

EU Gets Tough: Gives Google Two Weeks To Explain Data Practices

A French data privacy watchdog is raising alarms about Google’s data collection practices and has given the Internet search giant a little over two weeks to explain the way it handles the information of its users. The Commission Nationale de l’Informatique CNIL sent a letter .PDF late last week t...

Loophole in iOS Allows Developers Access to Users' Photos

A recently discovered hole in Apple’s iOS allows third-party developers access to users’ iPhone, iPad or iPod Touch photos by exploiting the device’s location data, according to a report from the New York Times’ Nick Bilton on the Bits blog yesterday. The loophole lies in the way that application...

Data Privacy Day 2012 – BYOD

January marks Data Privacy Month and on January 28th we celebrated Data Privacy Day. In the past year, we have seen an increase in the consumerization of IT and "Bring Your Own Device" BYOD in the enterprise. In honor of Data Privacy Day 2012, we have partnered with The Center for Identity at The...

FAA US Academy (AFS) - Auth Bypass Vulnerability

Document Title: =============== FAA US Academy AFS - Auth Bypass Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=171 Release Date: ============= 2012-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 171 Common...

Removing CarrierIQ Is A Really Bad Idea For Most Mobile Phone Users

The controversy over stealthy monitoring software by CarrierIQ has raised important questions about user privacy and business ethics in the Brave New World of smart phones, tablets and the like. In the uproar over CarrierIQ’s surreptitious monitoring of mobile phone users, various tools have...

Anonymous releases 25,000 records of the Austrian police

Anonymous releases 25,000 records of the Austrian police Anonymous Austria post via the official Twitter account about 25,000 records Austrian police officers. Observers suspect that the data from the Austrian section of the "International Police Association" could come. Meanwhile, the far-right...

Massachusetts Attorney General, Victim of an iTunes Scam, Says She'll Demand Answers

Massachusetts Attorney General Martha Coakley said on Tuesday that her office would be inquiring into long-standing complaints about fraudulent purchases that leverage Apple’s popular online music store. In a lunchtime address to business and technology leaders in Massachusetts, Coakley said she...

WordPress Tweet Old Post 3.2.5 SQL Injection

Exploit Title: WordPress Tweet Old Post plugin Software Link: http://downloads.wordpress.org/plugin/tweet-old-post.zip Version: 3.2.5 tested --------------- PoC POST data --------------- URL: http://localhost/wordpress/wp-admin/admin.php?page=ExcludePosts POST Data:...

USN-1159-1: Linux kernel vulnerabilities (Marvell Dove)

Brad Spengler discovered that the kernel did not correctly account for userspace memory allocations during exec calls. A local attacker could exploit this to consume all system memory, leading to a denial of service. CVE-2010-4243 Alexander Duyck discovered that the Intel Gigabit Ethernet driver...

Laptop Containing 8.6m Medical Records Lost in UK

A laptop from the UK’s National Health Service NHS containing 8.6 million patient records has gone missing, prompting warnings from UK authorities. The device was last seen in a room in an NHS facility in North Central London and was missing for three weeks before being reported to authorities...

New WhisperMonitor Tool Gives Users Control of Android Security and Privacy Options

As the concerns surrounding the data collected and transmitted by mobile apps continue to grow, Whisper Systems, a small start-up, has released WhisperMonitor, a free tool that enables owners of Android phones to control exactly what each of their installed apps can do and monitor what data is se...

Hacker Pleads Guilty To Theft of 600K Credit Cards, Could Get 10 Years

A 26 year-old Georgia man pleaded guilty in federal court in Virginia to the theft of hundreds of thousands of credit cards and a years-long fraud scheme that netted him more than $100,000 in illicit profits – money he used to buy himself a BMW and luxury clothing. Rogelio Hackett of Lithonia,...

Secret iPhone Feature Tracks Owners' Whereabouts

Security researchers have discovered a hidden iPhone feature that secretly tracks and saves the meanderings of the phone – and presumably its owner. The tracking feature was described in a presentation at the Where 2.0 Conference in San Francisco on Wednesday. According to the researchers, Pete...

Pandora Mobile App Transmits Gobs Of Personal Data

A popular free mobile application from online music service Pandora.com that is the subject of a Grand Jury investigation into loose data privacy practices in the mobile application market confirms that the application silently sends reams of sensitive data to advertisers. The analysis was...

Restaurant Chain is First Fined Under Massachusetts Data Breach Law

UPDATE: A Massachusetts restaurant chain was the first company fined under the state’s toughest in the nation data breach law and will have to pay $110,000 in penalties, according to a statement by the Massachusetts Attorney General. The Briar Group LLC entered into a settlement with Massachsuett...

Facebook Announces Social Verification and HTTPS option

Facebook announced yesterday that they will begin offering secure HTTPS connections and a new verification method called social verification to users of the most popular social network in the world. The move comes, conveniently, just a day after Facebook CEO and founder Mark Zuckerberg’s personal...