Carries news items (generally from mainstream sources) that relate to security.

List Archives

Latest Posts

University worker accused of extorting student file sharers InfoSec News (Feb 08)
http://news.cnet.com/8301-31001_3-10449583-261.html

By Greg Sandoval
Media Maverick
CNET News
February 8, 2010

If you thought the Recording Industry Association of America was hard on
illegal file sharing, consider Dorin Dehelean.

Dehelean, an Internet security analyst, was in charge of tracking
illegal file sharing at the University of Georgia until he tried to
shake down the student downloaders he caught.

Last week, police arrested the...

Open Security Foundation - State of the Union 2010 InfoSec News (Feb 08)
http://blog.osvdb.org/2010/02/06/open-security-foundation-state-of-the-union-2010

By jkouns

The Open Security Foundation (OSF) has grown from a humble beginning in
2004 to an internationally recognized 501(c)(3) non-profit public
organization. Through the work of a small team of dedicated information
security enthusiasts, the Open Source Vulnerability Database (OSVDB) and
DataLossDB projects have provided organizations of all sizes with the...

Poughkeepsie, N.Y., slams bank for $378,000 online theft InfoSec News (Feb 08)
http://www.computerworld.com/s/article/9153598/Poughkeepsie_N.Y._slams_bank_for_378_000_online_theft?taxonomyId=17

By Jaikumar Vijayan
Computerworld
February 8, 2010

The theft of $378,000 from the town of Poughkeepsie, N.Y., is prompting
questions about the responsibility of banks to protect customer accounts
from online criminals.

In a statement last week, a Poughkeepsie town official revealed that
thieves had broken into the town's TD...

ShmooCon | Your iPhone's Dirty Little Security Secret InfoSec News (Feb 08)
http://www.csoonline.com/article/533163/ShmooCon_Your_iPhone_s_Dirty_Little_Security_Secret

By Bill Brenner
Senior Editor
CSO
February 06, 2010

WASHINGTON D.C. -- We've heard much about how our PCs and laptops can be
compromised through malware and insecure wireless access points and
often comfort ourselves with the knowledge that our smart phones are
safe from such things.

But the smarter these phones become, the more susceptible they...

Sweden Probing Cisco, NASA Hacks InfoSec News (Feb 08)
http://www.wired.com/threatlevel/2010/02/sweden-probing-cisco-nasa-hacks/

By David Kravets
Threat Level
Wired.com
February 8, 2010

Swedish investigators are probing a hacker U.S. authorities accuse of
unlawfully intruding into Cisco Systems, NASA.s Ames Research Center and
NASA's Advanced Supercomputing Division, the authorities said Monday.

Philip Gabriel Pettersson, known in the hacking world as "Stakkato,"
allegedly seized...

Oracle issues emergency security patch for WebLogic InfoSec News (Feb 08)
http://www.theregister.co.uk/2010/02/08/oracle_weblogic_update/

By Dan Goodin
The Register
8th February 2010

Oracle issued an emergency patch for its WebLogic Server almost two
weeks after a white-hat hacker disclosed a vulnerability that allows
criminals to remotely execute commands on the webserver with no
authentication necessary.

The vulnerability in the Node Manager component of Oracle WebLogic
Server can be exploited by carrying out...

Indian pleads guilty in international online brokerage hacking scheme InfoSec News (Feb 08)
http://timesofindia.indiatimes.com/world/indians-abroad/Indian-pleads-guilty-international-online-brokerage-hacking-scheme/articleshow/5544566.cms

The Times of India
7 February 2010

CHICAGO: An Indian man has pleaded guilty to participating in an international
fraud scheme to hack online brokerage accounts in the US and use them to
manipulate stock prices to reap thousands of dollars in illegal profits
and faces up to 7 years in prison...

BlackBerry has spyware risk too, researcher says InfoSec News (Feb 07)
http://news.cnet.com/8301-27080_3-10448545-245.html

By Elinor Mills
InSecurity Complex
CNET News
February 7, 2010

We've heard a lot about security issues with the iPhone, but the
BlackBerry isn't immune to threats from malicious apps.

Tyler Shields, a senior researcher at the Veracode Research Lab, has
written a piece of spyware that allowed me to shoot an SMS command to
his phone and have his contact list forwarded to my e-mail address in...

IDF considers using BlackBerry InfoSec News (Feb 07)
http://www.jpost.com/Israel/Article.aspx?id=167988

By Yaakov Katz
The Jerusalem Post
07/02/2010

When Barack Obama was elected president of the United States, he was
told he could no longer use his personal BlackBerry to receive e-mails,
as it is not secure. Shortly after he took office, though, press reports
emerged that one of America’s government agencies had succeeded in
creating an encrypted BlackBerry specially designed for Obama....

Why CSOs Should Care About ShmooCon InfoSec News (Feb 07)
http://www.csoonline.com/article/533363/Why_CSOs_Should_Care_About_ShmooCon_

By Bill Brenner
Senior Editor
CSO
February 07, 2010

WASHINGTON, D.C. -- Many CSOs view ShmooCon as an event of small
importance. You don't see the suits and ties that are on display at RSA.
In fact, to those who haven't attended, this conference is just a place
where twenty-something hackers come to get drunk and throw TVs out hotel
windows. Another crazy Black...

Biggest hacker training site shut down InfoSec News (Feb 07)
http://www.chinadaily.com.cn/china/2010-02/08/content_9440667.htm

By Wu Yiyao
China Daily
2010-02-08

What is believed to be the country's biggest hacker training site has
been shut down by police in Central China's Hubei province.

Three people were also arrested, local media reported yesterday.

The three, who ran Black Hawk Safety Net, are suspected of offering
others online attacking programs and software, a crime recently added to
the...

CSIIRW Sixth Cyber Security and Information Intelligence Research Workshop InfoSec News (Feb 07)
Forwarded from: Frederick Sheldon <sheldonft (at) ornl.gov>

CALL FOR ABSTRACTS*

CSIIRW-10
http://www.csiir.ornl.gov/csiirw

April 21-23, 2010

Sixth Cyber Security and Information Intelligence Research Workshop
Oak Ridge National Laboratory
CSIIRW-09 Proceedings

*My Apology for multiple postings;
I've endeavored to not duplicate recipient addresses

GAO Report: NASA Still Facing Weaknesses In IT Security InfoSec News (Feb 07)
http://www.darkreading.com/vulnerability_management/security/management/showArticle.jhtml?articleID=222700163

By Tim Wilson
DarkReading
Feb 05, 2010

NASA made history earlier this week by releasing up-close pictures of
Pluto. Here on Earth, however, it's the space agency's IT systems and
security practices that need a closer look.

That's the conclusion of testimony (PDF) [1] offered to the U.S. House
of Representatives Wednesday by Cristina...

Secunia Weekly Summary - Issue: 2010-05 InfoSec News (Feb 07)
========================================================================

The Secunia Weekly Advisory Summary
2010-01-28 - 2010-02-04

This week: 60 advisories

========================================================================
Table of Contents:

1.....................................................Word From...

Fugitive VoIP hacker admits 10 million minute spree InfoSec News (Feb 07)
http://www.theregister.co.uk/2010/02/03/voip_hacker_guilty/

By Dan Goodin in San Francisco
The Register
3rd February 2010

A Miami hacker has admitted he pocketed more than $1m by selling
millions of minutes of voice over IP calls and surreptitiously routing
them through the networks of telecommunications companies.

Edwin Andrew Pena pleaded guilty to two felonies in connection with the
hacking spree, which spanned the years 2004 through...

More Lists

Dozens of other network security lists are archived at SecLists.Org.