security

According to reports, U.S. senators drafted legislation aimed at giving the federal government unprecedented authority over the nation's critical infrastructure, including the power to shut down or limit traffic on private networks during ... emergencies. The draft of the proposed legislation is allegedly intended to establish cyber-security standards to be imposed on both the government and the private sector, including companies providing software, IT work, or other services to networks deemed as 'critical' infrastructure, as well as mandating licenses for any and all individuals who administer ... (view more)

With the Conficker worm spreading worldwide and social malware figures expected to quadruple in the near future, there is perhaps no greater time to maintain and protect your online identity than right now. In response to these concerns, a new ... iPhone application is set to be released, hoping to make it virtually impossible for someone to infiltrate and steal your personal information. The complex application will generate an additional password for most AOL, eBay and PayPal accounts. To access these protected accounts, users must now input their user ID, password and a six-digit number unique ... (view more)

China is receiving a double dose of blame for the Conficker virus, as reports suggest that the country may either be the source of the virus, the reason why it spread so quickly, or both. The Conficker virus is due to update itself on Wednesday . ... China has already been in the news recently for security issues. It's been blamed for a widespread network of spy computers which have allegedly infected computers including those of the Dalai Lama. Origins may reach as far back as 2001 Vietnamese security firm BKIS says it has analyzed Conficker's coding and believes there are some unmistakable ... (view more)

A computer running Windows 7 stayed secure for longer than a Mac in the "PWN2OWN" hacking contest this week. But the challenge showed that Internet Explorer 8 -- just released today -- is still vulnerable. The contest, dubbed PWN2OWN, takes place at ... the annual CanSecWest security conference. Participants have to find a way to breach security on one of several computers, each running a different browser and operating system which have been fully patched with all currently available security updates. The winner this year took just 10 seconds to compromise a MacBook. It's bad news for ... (view more)

How much thought do you give to security when you use your credit card at a retail location? According to the Chicago Tribune, most consumers don't think about what happens to their credit card information when their plastic gets swiped at the cash ... register. Unfortunately, large retailers have networks that are potentially vulnerable to breaches connected to cash registers, bar code scanners and store computers. (Source: chicagotribune.com ) In some high-profile cases of network vulnerability, thieves don't just pluck one credit card number. They pluck millions of them. For instance, in 2007 ... (view more)

The frightening Conficker worm is just getting bigger and meaner all the time. W32.Downadup.C, a third variant of the Conficker/Downadup worm , is reportedly being pushed out to systems that are already infected. Analysis of the third variant of the ... worm by Symantec is still in the early stages, but their initial research found a couple of new attributes -- one of which includes targeting antivirus software and security tools with the intention of disabling them. (Source: symantec.com ) New Variant Protects itself from AntiVirus Software The Conficker/Downadup authors moved from a 250-a-day ... (view more)

eBay buyers are being asked to take extra precautions when conducting their online shopping after security specialists warned that a string of hackers had infiltrated the popular auction site. The hackers exploited several unpatched vulnerabilities ... in Firefox and Internet Explorer browsers to create false listings and entice people to bid on fraudulent items. Details of the Stealth Attack Analysts believe that it was an XSS (cross-site scripting) attack that implemented unauthorized java script elements stored on third-party websites. This allowed eBay pages to contain outside email links and ... (view more)

Microsoft has warned users that yet another critical vulnerability has been found in its popular Office spreadsheet program Excel. The flaw could allow remote hackers to open and run malicious code on an unsuspecting user's computer through an ... infected spreadsheet file. The attack effects users of Microsoft Office Excel 2007 but also those using any of the older binary .XLS files. A user opening a file, probably through an email, will be asked to open a malicious spreadsheet. They'll then begin downloading at least two files onto their system, one valid, the other the malicious binary. Once ... (view more)

Research teams at Microsoft are currently working on a new and improved browser that has the potential to be far more secure than the existing options. In the wake of financial problems, layoffs, and legal nightmares, Gazelle -- Microsoft's new ... browser-operating system hybrid -- could help the software company recover from its landslide in market shares . The Gazelle prototype, first unveiled in 2008 under the title "MashupOS" at the Microsoft TechFest Research Fair, incorporates the best of both browser and operating system characteristics in order to provide enhanced security features. ... (view more)

A reward of $250,000 has reportedly been offered by Microsoft to find who is behind the Downadup/Conficker virus. Since its inception last October, the Conficker worm has infected millions of computers worldwide. Microsoft is offering a cash reward ... because they view the Conficker as a criminal attack and believe the people responsible for writing it have to be held accountable. As noted by Sophos, Microsoft's reputation is badly shaken whenever a computer virus causes widespread problems for its users, so it's not surprising that they would offer a reward. (Source: sophos.co.uk ) George ... (view more)