Dark Reading

New Banking Trojan Discovered Targeting Businesses' Financial Accounts
Feb 09,2010 | Bugat Trojan spread via the Zbot/Zeus botnet, say SecureWorks researchers

Federal CTO Position Needs Formal Description: Report
Feb 09,2010 | Without a clear definition, 'it may be difficult for the CTO to affect change in individual federal agencies or systemically throughout the federal government,' states Congressional Research Service report

Researchers Develop Code That Stops Local Scanning Worms
Feb 08,2010 | In tests, algorithm was an efficient estimator of worm virulence and could determine the size of the susceptible host population after only a few infections

Hacker Unleashes BlackBerry Spyware Source Code
Feb 08,2010 | Proof-of-concept demonstrates ease at which mobile spyware can be created to pilfer text messages and email, eavesdrop, and track victim's physical location via smartphone's GPS

Product Watch: New Tool Automatically Examines Suspicious Code In Memory
Feb 08,2010 | HBGary Responder Professional 2.0 analyzed malware behavior in the Operation Aurora in five minutes

'Rugged' Initiative Brings Secure Software Development To The Masses
Feb 05,2010 | Rugged Software Development initiative an 'on-ramp' for all types of programmers to write resilient code

SECURITY NEWS

New Banking Trojan Discovered Targeting Businesses' Financial Accounts
Bugat Trojan spread via the Zbot/Zeus botnet, say SecureWorks researchers

GAO Report: NASA Still Facing Weaknesses In IT Security
Sensitive information, systems at space agency continue to be at risk, testimony says

Test: Most Web Application Scanners Missed Nearly Half Of Vulnerabilities
Tools were scanning their own test Websites

MORE VULNERABILTY MANAGEMENT TECH CENTER STORIES

Product Watch: New Tool Automatically Examines Suspicious Code In Memory
HBGary Responder Professional 2.0 analyzed malware behavior in the Operation Aurora in five minutes

Database Account-Provisioning Errors A Major Cause Of Breaches
Database accounts are often managed manually -- if at all

Hospitality Industry Hit Hardest By Hacks
Trustwave report on data breach investigations shows hotels were breached more than financial institutions last year, and nearly all attacks were after payment-card data

MORE DATABASE SECURITY TECH CENTER STORIES

China Shutters Hacker 'Boot Camp'
Black Hawk Safety Net trained thousands of cybercriminals, authorities say

Hacker Unleashes BlackBerry Spyware Source Code
Proof-of-concept demonstrates ease at which mobile spyware can be created to pilfer text messages and email, eavesdrop, and track victim's physical location via smartphone's GPS

Product Watch: Security Scoreboard Goes Live
New site brings security vendors and products under one roof, along with customer reviews

MORE SECURITY SERVICES TECH CENTER STORIES

'Rugged' Initiative Brings Secure Software Development To The Masses
Rugged Software Development initiative an 'on-ramp' for all types of programmers to write resilient code

IBM ISS Researcher Exposes Holes In Cisco's Internet Surveillance Architecture
Wiretapping architecture could be abused by individuals under surveillance and outside attackers; Cisco reviews recommended fixes

Majority Of Online Banking Customers Use Same Credentials On Other Less-Secure Websites
Trusteer data finds that 73 percent use the same password for their online banking account on at least one nonfinancial Website

MORE INSIDER THREAT TECH CENTER STORIES

Cellcrypt Offers Free 90-Day Secure Calling Trial For BlackBerry Smartphone Users

McAfee Upgrades Consumer Security Product Line

BigFix Offers 10% Discount In The Spirit Of IT Dinosaur Awards

Verizon Business Helps Medium-Sized Businesses Combat Cyberthreats With New, Affordable Integrated Security Suite

Security Startup Rolls Out File Security System

Trend Micro Expands its Hosted Security Service And Puts Focus On Channel-Success And Protecting Mobile Workers

Smart Card Alliance Healthcare Council Plans Identity Management Focus For Upcoming Year

CA Extends Web Access Security Technology

SPYRUS Ships Secure Storage Devices With FIPS 140-2 Encryption

ENISA: 17 Golden Rules To Combat Online Risks For Mobile Social Networking

ALL SECURITY PRESS RELEASES

MICROSOFT
Microsoft Offers Deployment Advice On 13 New Patches
FEBRUARY 9, 2010  | Big Patch Tuesday addresses 26 vulnerabilities, software giant says

CNET
FBI Wants Records Kept Of Websites Visited
FEBRUARY 9, 2010  | Agency wants ISPs to keep site visit records for up to two years

IT WORLD
Can You Trust Chinese Computer Equipment?
FEBRUARY 9, 2010  | Observers suggest that China's hardware might be deliberately bugged before distribution

SEARCH SECURITY
'Sexting' Case In Supreme Court Should Prompt Review Of Employee Policies
FEBRUARY 9, 2010  | Court could rule that practice overrules policy in determining reasonable expectation of privacy

CNET
Verizon Temporarily Blocks Some 4Chan Sites
FEBRUARY 9, 2010  | Some affiliate sites may have been launching network attacks, report says

COMPUTER WEEKLY
Two-Thirds Of Online Banking Credentials Are Shared
FEBRUARY 9, 2010  | Study says most consumers use the same password for banking as they use for other sites

COMPUTERWORLD
The Top Five Mistakes Of Privacy Awareness Programs
FEBRUARY 9, 2010  | Having a few training courses doesn't constitute a true awareness program, experts say

FINEXTRA
Bank Slammed After Hackers Steal $378,000 From Poughkeepsie
FEBRUARY 9, 2010  | Bad guys broke into town's account, stole money and transferred it to Ukraine

A look at the 25 most popular stories ever posted on the pages of Dark Reading.

• Four Threats for '09 That You've Probably Never Heard Of (Or Thought About)
• PHPBB Password Analysis
• New Phishing Attack Targets Online Banking Sessions With Phony Popups
• IDC Report: Most Insider Leaks Happen By Accident
• Tech Insight: SQL Injection Demystified
• Researchers Build Anonymous, Browser-Based 'Darknet'
• Test Results: 2009 Anti-Malware Suites Better at Sniffing Out Threats
• Researchers Hack Faces In Biometric Facial Authentication Systems
• The 6 Worst Cloud Security Mistakes
• Hacking The Router Patching Conundrum
• Turkish Hackers Take Out Top Porn Site
• Social Engineering, the USB Way
• Weaponizing Apple's iPod Touch
• Defcon:  New Hack Hijacks Application Updates Via WiFi
• How Hackers Will Crack Your Password
• Widespread Confickr/Downadup Worm Hard To Kill
• Drive-By 'War Cloning' Attack Hacks Electronic Passports, Driver's Licenses
• The Seven Deadliest Social Networking Hacks
• 'Mafiaboy': Cloud Computing Will Cause Internet Security Meltdown
• Researchers Take Over Dangerous Botnet
• New Trojan Attack Masquerades As CNN News Report On Gaza
• 6 Tips For Doing More Security With Less
• Heartland Struggles To Measure Extent Of Massive Security Breach
• Visa Tests Credit Card With Random Number Generator
• Researchers To Unleash Backbone-Hacking Tools At Black Hat Europe

Free Vulnerability Management Trial
Qualys is offering a free 14-day trial of its vulnerability management solution, which helps enterprises identify, fix, and report on network security threats.

Free Security Tools from Sophos
Scan for security risks, threats, rootkits and unauthorized applications.

Info-Tech Research Group
A specialist in small and medium-sized businesses, Info-Tech offers a different perspective than research houses that focus on the Fortune 1000.

Evil Bytes
BY John H. Sawyer
Updated Tool Targets Facebook Security
February 3, 2010
02:15 PM -- Security issues surrounding social networking sites make me cringe. I understand their practical applications, but they are also the platform for easy delivery of exploits through social engineering. I've seen many systems compromised by the unconscious click on a Facebook link that users' nonchalance on similar sites and their trust in the Interne ...

SophosLabs Insights
BY Graham Cluley
70% Rise In Malware: Time To Block Facebook?
February 1, 2010
11:19 AM -- New research published by Sophos today reveals a 70 percent increase in the number of companies reporting spam and malware attacks via social networks.

Hacked Off
BY Gadi Evron
'Brand' Your Employees
February 5, 2010
06:14 AM -- You might want your product to be in the news every day, and for your PR to create miracles for you. But if you want attention, then your company must speak out on big security issues and news.

Security Views
BY Adrian Lane
Amazon's SimpleDB Not Your Typical Database
February 6, 2010
04:08 PM -- Several cloud providers offer databases specifically designed for cloud deployment. Amazon's SimpleDB, while technically a database, deviates from what most of us recognize as a database platform. Although SimpleDB is still in prerelease beta format, developers have begun designing applications for it.

Dark Dominion
BY Kelly Jackson Higgins
Litchfield's Last Hurrah
February 3, 2010
05:44 PM -- Yesterday was David Litchfield's last day at NGS Software, and he commemorated the milestone by dropping a zero-day vulnerability in Oracle's 11g database at Black Hat DC. He also surprised the audience -- and possibly himself -- by awarding Oracle a "B+" final grade for security in 11g, after nearly 10 years of keeping Oracle on its toes by callin ...

CS Island
BY Robert Richardson
New Flaws Pry Lid Off Cloud Frameworks
February 5, 2010
12:21 PM -- A new set of vulnerabilities came to light this week at Black Hat DC, and its appearance provides a good look at our bleak "next-gen" security future.

MORE BLOGS

Featured Resources