FTC Settles With CyberSpy Software

The U.S. Federal Trade Commission has reached a settlement with Florida spyware vendor CyberSpy Software, two years after suing the company for selling “100 percent undetectable” keylogging software. Read the full article. IDG News Service...

Bank Settles With Customer On Wire Transfer Theft

An unusual legal dispute between a Texas bank and a business customer over the online theft of more than $800,000 from the latter’s account at the bank has been quietly settled. Read the full article. Computerworld...

Heartland Settles with MasterCard

Heartland Payment Systems has made a third settlement deal, this time with MasterCard, related to a massive data breach two years ago at the card payments processor. As part of the deal, Heartland has agreed to pay as much as $41.1 million to MasterCard issuers that lost money. Read the full...

U.S. Brokerage Firm to Pay $375K for Breach

US brokerage D.A. Davidson has agreed to pay $375,000 to settle charges that lax security practices allowed criminal hackers from Latvia to pilfer the confidential information of some 192,000 of its customers. Read the full article. The Register...

LifeLock Settles with FTC for $11 Million

LifeLock, an Arizona company promising customers protection from identity theft, has agreed to pay $12 million to settle charges that the company overstated its benefits and used “scare tactics” to gain subscribers. Read the full article. Computerworld...

Heartland Pays $3.6 Mil to Amex for Breach

Heartland Payment Systems will pay American Express $3.6 million to settle charges relating to the 2008 hacking of its payment system network. Read the full article. Computerworld...

Debian Security Advisory DSA 964-1 (gnocatan)

The remote host is missing an update to gnocatan announced via advisory DSA 964-1. A problem has been discovered in gnocatan, the computer version of the settlers of Catan boardgame, that can lead the server an other clients to exit via an assert, and hence does not permit the execution of...

CVE-2006-6875

Buffer overflow in the validateospheader function in the Open Settlement Protocol OSP module in OpenSER 1.1.0 and earlier allows remote attackers to execute arbitrary code via a crafted OSP header...

CVE-2006-6875

Buffer overflow in the validateospheader function in the Open Settlement Protocol OSP module in OpenSER 1.1.0 and earlier allows remote attackers to execute arbitrary code via a crafted OSP header...