Brian Prince

Data Breach Leads to Identity Theft at North West Florida State College

A data breach has turned scores of Northwest Florida State College (NWFSC) employees into victims of identity theft in the aftermath of a massive data breach affecting nearly 300,000 people, including current and former students. The employee data was breached between May 21 and Sept. 24 after one or more hackers accessed a folder on […]

Irish Google, Yahoo Domains Taken Offline Briefly After Security Breach

Google and Yahoo’s Irish iterations were temporarily knocked offline Oct. 9 after their domain name server records were changed due to a security breach. The incident occurred when the DNS name server records of both domains were changed after a registrar’s account was accessed without authorization, according to the IE Domain Registry (IEDR). The registrar […]

Protecting Operations

Protecting Operations According to Symantec and the Online Trust Alliance (OTA), CAs should ensure the correct and secure operation of CA information processing facilities, minimize the risk of systems failure and infection by malware, and develop incident reporting and response procedures. In addition, steps should be taken to protect media from theft, loss or damage […]

Adobe Patches Flash Player in Massive Security Update

The update is rated “critical” by Adobe, and was given the highest deployment priority rating for Windows users. Adobe is not aware of any exploits targeting the vulnerabilities, which impact Adobe Flash Player 11.4.402.278 and earlier for Windows, version 11.4.402.265 and earlier for Macs and version 11.2.202.238 and earlier for Linux. The update also impacts […]

Skype Worm Spreads Ransomware, Botnet Links

Security researchers are warning Skype users about an ongoing attack that dupes people into loading a link that spreads malware According to Trend Micro, the attack has resulted in infected users spamming their contact lists with messages in both English and German. The English version of the message states: “lol is this your new profile […]

Trusteer Identifies Universal Man-in-the-Browser Attack Technique

Researchers at security firm Trusteer have observed a new form of man-in-the-browser attack that makes stealing credit cards and other information easier for cyber-criminals. The firm has dubbed the attack “universal man-in-the-browser” (uMitB). Its draw is that it enables hackers to collect data submitted to all Websites without the need for post-processing. “Traditional MitB attacks […]

Microsoft IE 10 Do Not Track Default Setting Assailed by Advertisers

The board of directors of the Association of National Advertisers is objecting to Microsoft’s plans to ship Internet Explorer 10 (IE 10) with the “Do Not Track” setting turned on by default. In a letter to Microsoft CEO Steve Ballmer, the board, which is composed of representatives from companies such as Intel and AT&T, said […]

DSL Modem Flaw Lets Attackers Infect Millions of Computers in Brazil

An ongoing cyber-attack has affected millions of Internet users’ computers in Brazil by exploiting vulnerabilities in their DSL modems, a security researcher said. Kaspersky Lab researcher Fabio Assolini detailed the attack last week at the Virus Bulletin conference which was held Sept. 26 to 28 in Dallas. According to Assolini, attacks have been underway since […]

U.S. Law Enforcement Agencies Increase Warrantless Electronic Snooping

U.S. law enforcement snooping of email and Internet communications has increased dramatically during the last two years, according to information obtained by the American Civil Liberties Union. After months of litigation, the civil rights group was able to get information about the number of pen register and trap-and-trace orders issued by federal law-enforcement agencies between […]

Internet Explorer Shines in NSS Labs Browser Security Test

A new report by NSS Labs puts Microsoft Internet Explorer ahead of the pack when it comes to fighting click fraud. Click fraud affects pay-per-click advertising when a person, automated script or program fraudulently registers a click on an ad in order to generate money from the scammer. Earlier this year, the Flashback botnet used […]