-
Amnesty UK website hacked to serve lethal Gh0st RAT Trojan
Amnesty International?s UK website was hacked to host the dangerous Gh0st RAT Trojan for two days this week, security firm Websense has revealed.
-
Digitally signed malware is increasing since Stuxnet, say researchers
Security companies have recently identified multiple malware threats that use stolen digital certificates to sign their components in an attempt to avoid detection and bypass Windows defenses.
-
Chinese Trojans used to attack pro-Tibet organisations
A malware campaign targeting activists at pro-Tibet organisations could be the work of the same Chinese group behind a major attack on the chemical industry last year, researchers from AlienVault have suggested.
-
Trend Micro brings intrusion detection back from cloud with Deep Discovery
Trend Micro today announced Deep Discovery, a threat detection tool designed to monitor network traffic in order to detect signs of stealthy attacks aimed at stealing corporate data.
-
Trusteer warns of Shylock malware resurgence
There are hints in Shylock terminology to suggest it is coming from Russia or the Ukraine. But who is involved and exactly where it is coming from remains a mystery.
-
Nortel management may have known of hacker breach
The data breach into Nortel's data systems was known to company executives, including the CEO, for over a decade, but the company refused to take steps to prevent data loss.
-
VeriSign admits it was hacked in 2010 but managers not told
Internet giant VeriSign suffered a series of data breaches in 2010 and even now senior executives are not sure exactly what was compromised, the company has admitted in a filing made to the Securities and Exchange Commission (SEC).
-
Managing X.509 certificates by spreadsheet too risky, says Gartner
Poor management of the X.509 certificates that underpin SSL security could explain a growing number of mysterious system outages, a Gartner report has suggested.
-
Secunia to coordinate vulnerability disclosures for researchers
Secunia, a Danish vulnerability management company, aims to make the task of reporting software vulnerabilities easier for security researchers by offering to coordinate disclosure with vendors on their behalf.
-
Cloud-based DNS outperforms in-house systems
A new vendor-sponsored study of the 1,000 biggest websites quantifies how much better third-party managed service providers are doing at operating DNS services across the internet cloud than enterprises that run this critical network service themselves.
