AT&T Hit By Insider Breach

AT&T is warning consumers about a data breach involving an insider who illegally accessed the personal information of an unspecified number of users. The compromised data includes Social Security numbers and driver’s license numbers. In a letter sent to the Vermont attorney general, AT&T official...

Windows 10 Preview Has A Keylogger to Watch Your Every Move

This week Microsoft announced the next version of its Operating system, dubbed WIndows 10, providing Windows 10 Technical Preview release under its "Insider Program" in order to collect feedback from users and help shape the final version of the operating system, but something really went WRONG!...

Microsoft Unveils Windows 10 — The Next Version Of Windows Operating system

While the whole world was waiting for the next generation of Windows operating system, i.e. Windows 9, but skipping right over 9, Microsoft has announced the next version of its Windows is Windows 10, disclosing its first details on Tuesday at an event in San Francisco. The latest version of...

U.S. Air Force Aiming to Raise Cyber Awareness on Networks with MAMA

The United States Air Force is attempting to enhance what the military service branch is calling cyber situational awareness in order to contend with “increasingly sophisticated” threats to its networks and systems. The Air Force Research Laboratory’s Information Directorate announced it was...

CVE-2014-5724

The Gambling Insider Magazine aka com.triactivemedia.gambling application @7F0801AA for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Gambling Insider Magazine aka com.triactivemedia.gambling application @7F0801AA for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5724

The CVE-2014-5724 entry concerns the Android app Gambling Insider Magazine (package com.triactivemedia.gambling). Affected component: SSL/TLS certificate validation is not performed when connecting to SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive informat...

Intelligence Insiders Disclose Bug Information With Tor

The executive director of the Tor Project told the BBC that U.S. and U.K. intelligence agencies are in an internal cat and mouse game, with one faction trying to break the anonymity network, and another one sharing bugs anonymously with Tor developers. Andrew Leman, in an extensive...

Privileged User Access Lacking Trust But Verify

Jerome Kerviel, Terry Childs, Edward Snowden: All infamous insiders; all reviled to differing degrees for abusing their access to computer-based resources. And likely, all of them could have been stopped if their respective employers had a better grasp on what these privileged users were doing. N...

Snowden used web crawler tool to access and download 1.7 million Secret NSA Files

National Security Agency NSA – the one that had ruled over the privacy of the entire world from countries to individuals, the one with master access to read anyone’s data, intruded into large fiber networks, and can target anyone, at any time, at any place; but lapsed somewhere in protecting its...

20 Million Credit Cards stolen in South Korea; 40% Population affected by the Data Leak

Since all threats to data security and privacy often come from outside, but internal threats are comparatively more dangerous and a difficult new dimension to the data loss prevention challenge i.e. Data Breach. The "Insider threats" have the potential to cause greater financial losses than attac...

CloudFlare's Red October Crypto app with two-man rule style Encryption and Decryption

It is always important to secure our system against outside threats i.e. Hackers, but it also required to protect against insider threats. The potential of damage from an Insider threat can be estimated from the example of Edward Snowden who had worked at the NSA, and had authorized access to...

NSA's Reactive Security Measures Too Late to Stop Snowden

The National Security Agency, as it turns out, is just as reactive when it comes to information security as 99 percent of the enterprises out there. America’s top spy agency gives out too much privileged access to employees and contractors, allows removable storage devices in sensitive areas, and...

2 Million Customer Records Stolen in Vodafone Germany breach

Security experts are warning Vodafone customers, particularly those in Germany, of a possible increase in phishing attacks after an insider at the telecommunications giant accessed a database and stole personal information on as many as two million customers. German police have a suspect, adding...

Point-of-Sale Terminals Compromised at 63 Barnes & Noble Locations

UPDATE – America’s largest book retailer, Barnes & Noble, announced this morning it has detected evidence of tampering in 63 PIN-pad devices used in as many stores by criminals trying to steal payment card information. Barnes & Noble claims to have disconnected all the affected devices from servi...

Data Breach Reports Remain Spotty, Study Finds

In a twist on Tolstoy’s famous observation that “all happy families are alike,” the Identity Theft Resource Center ITRC is warning that the public is being told that ‘all data breaches are alike,’ as corporations paint a worryingly bland portrait of breaches and other data loss incidents affectin...

Employees Admit They'd Walk Out With Stolen Data If Fired

Privileged accounts have become an important attack vector, and if a recent survey of mostly IT managers and executives is any indication that threat will continue to grow. According to results of ID management provider Cyber-Ark’s sixth annual global “Trust, Security and Passwords Survey,” just...

Sky News Twitter account Hacked

Sky News Twitter account Hacked Hackers yesterday accessed the Twitter account for Sky News business desk and posted a tweet claiming that James Murdoch had been arrested by London police. It has also lately been used by hacker groups to simply raise their profile and make the public aware of the...

Computershare Says No Customer Data Exposed In Breach

The investor services company told Threatpost that an investigation has determined that data stolen by a rogue employee didn’t contain shareholder data. However, the company still hasn’t retrieved two USB drives containing company email and documents that outline some of Computershare’s closely...

Financial Records of Millions At Risk After Computershare Insider Copies Data To USB… Then Loses The USB

Computershare, the investor services firm, has filed suit against a former employee it charges with making off with thousands of pages of proprietary company documents, including information on shareholder names, account numbers and financial holdings. The company warned that the data, which was...