A Bank of America employee has been charged with installing malware on ATMs in North Carolina. The employee, who was a member of the bank's IT staff, was able to withdraw cash without leaving transaction records from the ATMs over the course of 7 months...
Students at the University of Cambridge have discovered a new flaw that is compromised by using a MITM attack that deceives a terminal in to thinking that a card's PIN is correct irregardless of what number is provided for the PIN. The attack uses an electronic...
From ISPreview: WeFi, a free wireless Wi-Fi broadband Hotspot locator website with a database of 47,000,000 access points around the world, has revealed that 40% of Hotspots in the USA are unlocked and do not require a security password. This compares with 25% in Europe. According to...
Scientists are set to unveil a lightweight system they say makes an operating system significantly more resistant to rootkits without degrading its performance. The hypervisor-based system is dubbed HookSafe, and it works by relocating kernel hooks in a guest OS to a dedicated page-aligned memory...
The release of OpenBSD 4.6 was released on Sunday. Highlights of the new release include: Simplified installation process. Improved documentation and man pages. New versions of packages in ports (package management system). Over 5800 packages in total. Hardware driver updates: sensors, chipsets, video devices etc. New drivers, functionality and...
A joint study conducted by TELUS and the Rotman School of Management at the University of Toronto surveyed more than 600 Canadian IT security professionals on Canadian IT security practices this year. The economic downturn has increased the risk organizations: “The threat environment worsens because when the...
Most organizations are focusing their patching efforts and vulnerability scanning on the operating system -- but 60 percent of the total number of attacks occur on Web applications, and many attacks are aimed at third-party applications such as Microsoft Office, and Adobe Flash and other...
Sun Microsystems' product plans are up in the air pending its acquisition by Oracle, but the company's chip engineers continue to present new designs in the hope they'll see the light of day. At the Hot Chips conference at Stanford University on Tuesday, Sun presented...
ISC is reporting that a new, remotely exploitable vulnerability has been found in all versions of BIND 9. A specially crafted dynamic update packet will make BIND die with an assertion error. There is an exploit in the wild and there are no access control...
Nmap Security Scanner version 5 has been released. Significant performance improvements were made, and many scripts have been added. Nmap can now log into Windows a system and perform local checks such as Conficker detection. Announcement Changes Download ...