One of the US’s critical military and espionage contractors QinetiQ North America (QNA) was successfully pillaged for huge amounts of top-secret know-how by the infamous Chinese ‘Comment Crew’ or PLA 61398 hacking group in a campaign stretching over years, Bloomberg has reported.
read more...
read more...
Security researchers have discovered a new Apache web server backdoor that is so stealthy it leaves almost no trace of its redirection behaviour on the hard drive or in server log files.
read more...
Google has ported the Chrome OS’s useful ability to view Office Microsoft Word, Excel, and PowerPoint files in the Chrome browser for the first time, its develop blog has announced.
read more...
The 35 year-old Dutchman accused of masterminding the worryingly vast DDoS attack that nearly swamped anti-spam organisation Spamhaus and its partners last month has been arrested in Barcelona, reports have said.
read more...
Imperva used this week’s Infosecurity Show in London to announce what it believes is a key innovation for its line of web application firewalls – crowd-sourced threat data.
read more...
State-of-the-art cyberweapons are now powerful enough to severely disrupt nations and the organisations responsible for their critical infrastructure, Kaspersky Lab founder and CEO Eugene Kaspersky has warned in a speech to a select audience of UK police, politicians and CSOs.
read more...
Many big-brand Intrusion Prevention Systems (IPS) consistently fail to block attacks that target vulnerabilities in web-based applications using Advanced Evasion Techniques (AETs), a University of Glamorgan study has found.
read more...
Industrial espionage by Chinese “state-affiliated actors� was responsible for one in five data breaches reported to Verizon by customers and through a range of global police forces, the company’s annual Data Breach Investigations Report (DBIR) has found.
read more...
Google’s Play store security has once again been embarrassed by the discovery of an ambitious botnet that sneaked past its app vetting systems to infect possibly huge numbers of Android users.
read more...
The ICO's crackdown on a firm accused of sending huge amounts of payment protection insurance (PPI) SMS spam appears to have caused a marked drop in the number of unwanted messages being received by UK mobile users, figures from security firm Cloudmark show.
read more...
Novell is preparing to release Filr, a new on-premise file sharing product for organisations that want some of the convenience of a Dropbox-like approach while keeping data management under internal control.
read more...
Security firm Trusteer believes it has invented the first ever system that can reliably block attacks targeting vulnerabilities in a clutch of common applications such as Java, and Adobe’s Flash and PDF Reader.
read more...
Security guru and privacy campaigner Phil Zimmermann could finally fulfil the commercial potential of his famous PGP encryption software of the 1990s with the news that his Silent Circle startup has added email encryption to its roster of products.
read more...
The 21-year-old British hacker found guilty of a long string online crimes including distributing a keylogger Trojan disguised as a Call of Duty software patch, has pleaded guilty to launching DDoS attacks on the websites of Oxford and Cambridge Universities.
read more...
March’s huge DDoS attack on Spamhaus that left service providers struggling to contain a 300Gb/s DNS reflection surge was made possible by the industry's tardiness in implementing IETF recommendations on limiting forged traffic made more than a decade ago, EU security agency ENISA has argued.
read more...
British universities will be issued with overhauled security guidance after a warning by MI5 on the risk of foreign-sponsored cyber-attacks, it has been reported.
read more...
Three of the cities that lost out to Glasgow in the competition for £24 million smart cities funding in January are to be given money to develop the most interesting parts of the projects they proposed.
read more...
The North Korean military was not only behind last month’s unprecedented cyber-assault on South Korean TV stations and banks, it left behind enough evidence of its involvement to make attributing blame an open and shut case, officials have alleged.
read more...
The prodigious Shylock man-in-the-browser (MitB) banking Trojan is still being upgraded as part of a campaign to migrate from its traditional targets in UK financial services to foreign ones, Symantec has reported.
read more...