Virus Information News

[First]  [Previous] |    8     9     10     11     12     13     14     15     16     17    | [Next]  [Last] of 172 page(s)

Google Plans to Disable Online Revocation Checks in Future Chrome Versions | The Web Host Industry Review

thewhir.com

by Nicole Henderson

February 9, 2012

Google will disable online revocation checks in future versions of Chrome, and will reuse its existing update mechanism to maintain a list of revoked SSL certificates instead, according to a blog post on Sunday by Google researcher Adam Langley.

Trustwave Re-Ignites SSL Policy Debate with Cert Revocation, Rule Change

thewhir.com

by Nicole Henderson

February 8, 2012

Digital certificate authority Trustwave admitted via a blog post on Saturday that it issued a SSL certificate to a private company to spy on SSL-protected connections within its corporate network.

"It has been common practice for Trusted CAs to issue subordinate roots for enterprises for the purpose of transparently managing encrypted traffic. In the past, Trustwave, like many of our peers in the industry, has enabled organizations to perform this activity. Due to events of the past year, Trustwave has decided to revoke all subordinate roots issued for this purpose," Trustwave said in its policy change on its website at the end of January.

Security Firm eleven Reports Phishing Email Increase in December and January

thewhir.com

by Nicole Henderson

February 8, 2012

Email security provider eleven announced on Wednesday that it has seen explosive growth of phishing email in December and January.

According to the report, phishing email's share surged by 194 percent in December, and by a further 214 percent in January. In December, overall spam levels declined by 70.3 percent and experienced a slight increase of 9.7 percent in January. This put spam volumes at the lowest rate since early 2007.

Security Researcher Calls on Browser Developers to Support SSL-Validator

thewhir.com

by Justin Lee

February 8, 2012

Security researcher Moxie Marlinspike is calling on the support of browser developers to participate in his new open-source project that is designed to authenticate a secure sockets layer certificate's credentials, according to a report by The Register.

Convergence, which is currently in its Beta phase, is available as a Firefox add-on and enables users to query notary servers so that they can ensure the legitimacy of an SSL certificate attached to a particular site. Marlinspike said he is currently talking to browser vendors, who he said "should lead because this is the only way that Convergence can become an 'invisible platform' where surfers can use it without knowing that's what they are relying on."

Prolexic Report: DDoS Attacks Grow in Size, Decline in Duration During Q4 2011 | The Web Host Industry Review

thewhir.com

by Nicole Henderson

February 7, 2012

DDoS security provider Prolexic released on Tuesday data it collected from Q4 2011 global attacks against its clients that showed a significant rise in packet-per-second volume, a trend it predicted in its previous attack report released in July 2011.

While Prolexic says an increase in the fourth quarter is not uncommon because of holiday shopping season and the prevalence of attackers targeting e-commerce sites (November was the busiest month for attacks; December 3 - 10 was the week with most attacks), Q4 was marked by an uncharacteristic surge. According to the report, Prolexic saw a 45 percent rise in the number of DDoS attacks against its clients compared to Q410. It also saw an unprecedented 18-fold increase in packet-per-second mitigated volume compared to the same quarter in 2010. While the number and size of DDoS attacks is on the rise, the attack duration declined from 43 hours in Q410 to 34 hours this quarter.

Q&A: DreamHost CEO Simon Anderson Discusses Outages and their Impact

thewhir.com

by Nicole Henderson

February 7, 2012

On January 20, DreamHost detected unauthorized activity on its database prompting it to reset all customer FTP passwords. About a week later, its VPS and dedicated hosting customers experienced outages after a Debian OS update went awry.

With more than one issue in the span of a week, DreamHost technical support was working overtime to hang on to unhappy customers. While many DreamHost customers vowed their loyalty to the web host on Twitter, others were quick to threaten moving their business elsewhere, as some customer sites clocked more than 24 hours of downtime.

Internet Infrastructure Firm VeriSign Hit by Multiple Hacks in 2010 | The Web Host Industry Review

thewhir.com

by Justin Lee

February 2, 2012

Internet infrastructure services provider VeriSign was the target of multiple online attacks throughout 2010 which resulted in stolen information, according to a report by Reuters which cites the company's quarterly regulatory filing.

The company did not include the details of the stolen information or any specifics regarding the attacks in its 10-Q report filed in October with the US Securities and Exchange Commission. VeriSign wrote in the filing that it "faced several successful attacks against its corporate network in which access was gained to information on a small portion of our computers and servers," and that the "information stored on the compromised corporate systems was exfiltrated."

Major DreamHost Outage Hits VPS, Dedicated Hosting Customers

thewhir.com

by Nicole Henderson

January 30, 2012

Many DreamHost customers are shopping around for a new web host after an outage on Sunday that lasted more than 12 hours, according to comments on its status page.

This outage comes a week after DreamHost told customers to change their passwords after it detected unauthorized activity on its database. According to an update on Sunday night from DreamHost CEO Simon Anderson, the downtime affected many of its dedicated and VPS customers, as well as some shared hosting customers. The post says the outage occurred after a Debian OS autoupdate removed essential packages from dedicated, VPS and shared servers. Anderson says DreamHost has now turned off autoupdates and will now manually update Debian after "significant testing."

Web Host DreamHost Resets FTP Passwords After Security Breach Detected | The Web Host Industry Review

thewhir.com

by Nicole Henderson

January 23, 2012

Web hosting provider DreamHost has told its customers to change their passwords in an email on Friday night after it detected unauthorized activity on its database.

In the email, DreamHost claimed it had reset all customer FTP passwords as a precaution and that users could create new ones through the online panel. Web panel, email passwords and billing information were not exposed during the breach, according to the report. Despite this, DreamHost still urged customers to change email passwords as a precaution.

Anonymous Attacks FBI, Entertainment Sites After Megaupload Takedown

thewhir.com

by Nicole Henderson

January 20, 2012

After federal officials brought down the file-sharing website Megaupload and charged several individuals allegedly responsible for online piracy generating more than $175 million, Anonymous attacked several entertainment and gov't websites on Thursday.

According to a report by the Washington Post, Anonymous used DDoS attacks to crash the Justice Department and Universal Music website, as well as the main page of the FBI website. The Universal Music website was still down as of Friday morning, as was the Broadcast Music Inc. site.

[First]  [Previous] |    8     9     10     11     12     13     14     15     16     17    | [Next]  [Last] of 172 page(s)