06 Feb 2012

feedPlanet Security

Heise Security: German government makes recommendations for secure Windows PCs

Anti-virus software, backups, updates, an alternative browser and a healthy level of mistrust are the main components of the German Federal Office of Information Security's (BSI's) PC security concept



06 Feb 2012 9:10am GMT

Hack in the box: State of SCADA Security Worries Researchers

http://www.flickr.com/photos/greenmambagreenmamba/5234235948/in/set-721576254247

Recent reports painted a bleak picture of the security issues plaguing industrial control systems, but the situation is exacerbated by the fact that administrators are naïve about the dangers, researcher said.

Source:
eWeek
Tags:
SCADA
Security

06 Feb 2012 8:23am GMT

Hack in the box: Do you password-protect your gadgets?

http://images.theage.com.au/2011/06/02/2404288/ipad-art-wide-pg1-cyber-security-

How paranoid are you about data security?

We all love shiny new gadgets, but unfortunately they're also attractive to burglars, muggers and pickpockets. Thieves are generally looking to offload your gadgets for some quick cash, but the data they contain may be of far more value to you.

Source:
The Age (Australia)
Tags:
Hardware
Security

06 Feb 2012 8:19am GMT

Hack in the box: Hackers may be able to 'outwit' online banking security devices

http://www.flickr.com/photos/58534808@N00/335134622/

Criminal hackers have found a way round the latest generation of online banking security devices given out by banks, the BBC has learned.

After logging in to the bank's real site, account holders are being tricked by the offer of training in a new "upgraded security system". Money is then moved out of the account but this is hidden from the user.

Source:
BBC
Tags:
Hackers
Encryption
Security

06 Feb 2012 8:17am GMT

Hack in the box: How to monitor devices with Cacti

http://www.flickr.com/photos/tquelhas/5978868369/

There are many ways to monitor devices: netflow, span port, switchport and so on. Today I will explain how to monitor bandwith, CPU, … of routers and switches using SNMP and Cacti.

Source:
Ciscozine
Tags:
Hardware
Software-Programming

06 Feb 2012 8:13am GMT

Hack in the box: Remotely start your car using an Arduino

http://biobug.org/blog/wp-content/uploads/2011/12/Image.jpg

This DIYer had a 1st generation iPhone lying around, so he decided to put it to good use. You can use any phone to accomplish this, even a $10 prepaid phone. An SMS to the iPhone goes through an Arduino which tells yours car to start or stop from anywhere. There's some custom circuitry and programming which is all included in the instructions. When a text message is sent to the iPhone, the iPhone tells the Arduino to start the engine, and the iPhone sends a message back reporting that the start has commenced.

Requirements:

Source:
Blobug
Tags:
Arduino
Technology
Software-Programming
Hackers

06 Feb 2012 8:11am GMT

Hack in the box: Over 3 years later, "deleted" Facebook photos are still online

http://static.arstechnica.net/assets/2012/02/facebook-burning-photo-4f2c523-intr

Facebook is still working on deleting photos from its servers in a timely manner nearly three years after Ars first brought attention to the topic. The company admitted on Friday that its older systems for storing uploaded content "did not always delete images from content delivery networks in a reasonable period of time even though they were immediately removed from the site," but said it's currently finishing up a newer system that makes the process much quicker.

Source:
Arstechnica
Tags:
Facebook
Privacy

06 Feb 2012 8:08am GMT

Hack in the box: PHP security patch creates critical vulnerability

http://www.flickr.com/photos/mylesdgrant/2512410172/

The PHP Group released PHP 5.3.10 on Thursday in order to address a critical security flaw that can be exploited to execute arbitrary code on servers running an older version of the Web development platform.

The vulnerability is identified as CVE-2012-0830 and was discovered by Stefan Esser, an independent security consultant and creator of the popular Suhosin security extension for PHP.

Source:
CSO Online
Tags:
Security
Software-Programming

06 Feb 2012 8:06am GMT

Hack in the box: Anonymous sits in on FBI conference call

http://youranonnews.tumblr.com/

A member of the Anonymous collective infiltrated a conference call between Scotland Yard and the FBI last month.

An unknown member accessed the 17-minute call using the conference telephone number and password. The call was recorded and posted to YouTube. It revealed a conversation between five members of the agencies who discussed alleged Anonymous and LulzSec operatives.

Source:
IT News (Australia)
Tags:
Anonymous
GOV
Law and Order

06 Feb 2012 8:02am GMT

The Register - Security: Hackers may be able to 'outwit' online banking security devices

Investigators probe malware threat to 2-factor authentication

Hackers may already able to use malware to outwit the latest generation of online banking security devices, security watchers warn.…

06 Feb 2012 8:01am GMT

Hack in the box: Facebook's Zuckerberg defends hacking

http://www.flickr.com/photos/sitemarca/3503627963/

Facebook's billionaire CEO Mark Zuckerberg calls himself a hacker.

For most people, that word means something malicious - shady criminals who listen in on private voicemails, or anonymous villains who cripple websites and break into email accounts.

Source:
News24
Tags:
Facebook
Industry News
Hackers

06 Feb 2012 8:00am GMT

Hack in the box: While the world braces for e-threats, India moves slow

http://www.flickr.com/photos/nac888/297607647/

After the first four "real'' battlefields of land, air, sea and now increasingly space, India needs to get very serious about the virtual front as well. The country should begin planning a full-fledged military cyber command, instead of the current piecemeal and disjointed steps to bolster cyber-security, grappling as it already is with incessant online espionage and other attacks from China, Pakistan and others.

Source:
India Times
Tags:
India
Industry News
Security

06 Feb 2012 7:57am GMT

Hack in the box: Brain drain: Protecting your organization's IP

http://www.flickr.com/photos/imelda/5832394956/

Global healthcare provider Best Doctors employs the most robust technologies and practices available to protect the privacy of its members' personal data-but that's just a part of doing business in this industry. Less obvious but equally important is the degree of vigilance with which the company protects its brand name, which is trademarked in dozens of countries worldwide.

Source:
CSO Online
Tags:
Industry News

06 Feb 2012 7:54am GMT

Digg.com Security: Tom Brady Pirated The Super Bowl Last Year

Several sports streaming sites had their domain names seized by the Department of Justice and Homeland Security's ICE unit this week. The operation was planned a few days in advance of the Super Bowl to prevent "rogue" sports fans from watching the game through unofficial channels.

06 Feb 2012 4:35am GMT

SANS Internet Storm Center: ISC StormCast for Monday, February 6th 2012 http://isc.sans.edu/podcastdetail.html?id=2305, (Mon, Feb 6th)

(c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

06 Feb 2012 4:25am GMT

Digg.com Security: Over 3 years later, "deleted" Facebook photos are still online

Photos that you think you're deleting from Facebook are still remaining on their servers years later. Ars has been following this story for nearly three years now; Facebook says it's still working on fixing the problem, but that a solution should be ready within months.

06 Feb 2012 1:09am GMT