The California Assembly Bill 1681 was quietly dropped this week without a vote. The bill would have authorized $2,500 penalties for phone manufacturers and operating system providers if they do not comply with court orders to decrypt phones. In effect, it would force phone providers to include a backdoor or face repeated fines.
read more
Hacker Group Disrupts Video Game Service in DDoS Attack
“Lizard Squad” Knocks Video Game Servers of Blizzard Entertainment Offline
Servers operated by Blizzard Entertainment went down yesterday following a distributed denial of service (DDoS) attack against the video game company,claimed by the Lizard Squad hacking group.
read more
Blackhole Exploit Kit Author Sentenced to Prison
Dmitry Fedotov, the Russian national who created the now-defunct Blackhole exploit kit, was sentenced this week by a Moscow court to seven years in prison.
read more
No Patches for QuickTime Flaws as Apple Ends Support on Windows
Apple will no longer release security updates for the Windows version of QuickTime, leaving two recently-discovered remote code execution vulnerabilities unpatched.
The announcement that QuickTime for Windows is being deprecated was not made by Apple. Instead, Trend Micro-owned ZDI learned of the company’s decision after Steven Seeley of Source Incite reported finding two serious flaws.
read more
Microsoft Sues U.S. Over Secret Warrants to Search Email
San Francisco – Software titan Microsoft on Thursday sued the US government, arguing that secret warrants to search people's email violate the US Constitution.
Microsoft filed the suit against the Justice Department in federal court in Seattle, near the company's headquarters in Redmond.
read more
Hybrid Trojan “GozNym” Targets North American Banks
Researchers at IBM Security have come across a hybrid Trojan that is a combination between the Nymaim dropper and the Gozi financial malware.
read more
Clever Techniques Help Malware Evade AV Engines
FireEye researchers have identified several pieces of malware that managed to go undetected by antivirus engines for extended periods of time by using some interesting techniques.
read more
Security in a Digital World Starts with a Strategic Approach to Segmentation
Has Your Network Segmentation Approach Changed in light of new Technologies and Business Models?
read more
Phishing Attacks Hit the C-Suite With High Value Scams
Any information security professional knows that spear-phishing is effective. Cloudmark calls it "The Secret Weapon Behind the Worst Cyber Attacks", and lists 10 recent major breaches, from Target to OPM, that started with a successful spear-phish.
read more
Malicious Code in IoT Device Demonstrates Widespread Potential Risk
Security researcher Mike Olsen's recent discovery of a malicious iFrame in the embedded control code of a set of security cameras purchased from Amazon highlights one of the emerging threats to the internet of things: it is relatively easy to poison the consumer supply chain.
read more
