Virus Information News

[First]  [Previous] |    12     13     14     15     16     17     18     19     20     21    | [Next]  [Last] of 172 page(s)

GlobalSign Stops Issuing Certificates as DigiNotar Hacker Investigations Continue

thewhir.com

by Nicole Henderson

September 7, 2011

The person responsible for the hacks, Comodohacker, allegedly has access to GlobalSign as well, according to the report.

The hacker didn't provide any proof that GlobalSign had been compromised, according to the Register, but GlobalSign says it takes this claim "very seriously" and will cease issuance of all certificates until the investigation is done. On Wednesday, GlobalSign appointed external security investigation firm Fox-IT to assist with the investigations. Fox-IT is the same firm that was hired to investigate the compromise of DigiNotar and found that hackers had issued 531 fake certificates for 344 domains, including Twitter, Wordpress and the CIA.

.XXX Domain Sunrise Period Opens Wednesday

thewhir.com

by Nicole Henderson

September 6, 2011

As of Wednesday, the sunrise period for .XXX domain registration begins. The Sunrise A and Sunrise B period will run until October 28, 2011.

The distinction between Sunrise A and B is that Sunrise A gives trademark holders in the adult community the opportunity to secure their trademark .XXX domain names. On the other hand, Sunrise B is for non-adult companies to claim trademark names for the registry to not give out to others and block it from a .XXX domain for 10 years. Sunrise B is for companies to protect their brands from being registered with non-related content. ICANN approved the .XXX TLD in March, and will register the domain with the ICM Registry.

London Police Arrest Two Men Connected to Hacking Group Anonymous

thewhir.com

by Nicole Henderson

September 2, 2011

The men, aged 20 and 24, have been charged with conspiring to commit offences under the Computer Misuse Act 1990.

The arrests are part of an global ongoing investigation into Anonymous and LulzSec. Police say the arrests are connected with suspected offences conducted under the online identity "Kayla." According to a report by Forbes, Kayla was one of the core members of LulzSec, and was part of the cyberattack on security firm HBGary in February. Hackers accessed about 50,000 corporate emails and private information in this attack.

Symantec Report Finds 92 Percent of Organizations Saw Losses from Cyberattacks

thewhir.com

by Nicole Henderson

August 31, 2011

Security solutions provider Symantec released new research on Wednesday that indicates organizations of all sizes are seeing a decline in the number and frequency of cyberattacks compared to 2010.

According to Symantec's 2011 State of Security Survey, 71 percent of organizations saw attacks in the past 12 months, from 75 percent in 2010. Symantec says the results are based on 3,300 responses in 36 countries. Conducted via telephone in April and May 2011 by third-party research firm Applied Research, it surveyed C-level professionals and individuals in charge of IT resources from companies with a range of five to more than 5,000 employees, according to the press release. 1,225 of the respondents were from companies with 1,000 or more employees.

Browsers Disable DigiNotar After Rogue Certificate Used in Gmail Attack

thewhir.com

by Nicole Henderson

August 30, 2011

Google disabled a rogue SSL certificate issued by Dutch root certificate authority DigiNotar on Monday after it received reports of attempted man-in-the-middle attacks on its Gmail service, according to a blog post.

Man-in-the-middle attacks try to get between users and encrypted services to capture login details to access a Gmail account, for example. Chrome detected the fraudulent certificate, and will disable the DigiNotar certificates while Google continues to investigate the incident, the blog post says. Google says DigiNotar "should not issue certificates for Google (and has since revoked it)."

Patch Released for Apache Software DDoS Vulnerability

thewhir.com

by Justin Lee

August 26, 2011

The Apache Software Foundation is expected to release a patch within the next couple of days for a vulnerability found in the server software that could be used to send a denial of service attack.

On August 20, an exploit that can be used against Apache HTTPD Web Server versions 1.3 and 2.X was released on the Full Disclosure mailing list. Hackers can use the "Apache Killer" exploit to launch a denial of service attack against an Apache server from a single computer, exhausting the web server's memory and performance. The Apache Software Foundation issued an alert, along with workarounds for the exploit, late Thursday evening, in advance of its promised patch.

Patch Released for Apache Software DDoS Vulnerability

thewhir.com

by Justin Lee

August 26, 2011

The Apache Software Foundation is expected to release a patch within the next couple of days for a vulnerability found in the server software that could be used to send a denial of service attack.

On August 20, an exploit that can be used against Apache HTTPD Web Server versions 1.3 and 2.X was released on the Full Disclosure mailing list. Hackers can use the "Apache Killer" exploit to launch a denial of service attack against an Apache server from a single computer, exhausting the web server's memory and performance. The Apache Software Foundation issued an alert, along with workarounds for the exploit, late Thursday evening, in advance of its promised patch.

Today's Top Threats for Web Hosts with Michael Lin of Symantec

thewhir.com

by Nicole Henderson

August 10, 2011

Lin says that hackers used to try to make a name for themselves, but now cybercrime is a huge driver of malicious attacks on hosting providers and the Internet at large.

The difference, according to Lin, is attacks today are more about cyber warfare, cyber espionage and are highly sophisticated. Lin says a lot of the early attacks were widely known and publicized, wheras now a lot of the attacks happening today are meant to be silent. He used the attack Stuxnet as an example of the sophistication of attacks today. Stuxnet started as a malicious code on a thumb drive, and ultimately hacked power and nuclear facilities.

Prolexic Predicts High Volume Packet-Per-Second DDoS Attacks on the Rise

thewhir.com

by Nicole Henderson

July 28, 2011

DDoS mitigation provider Prolexic Technologies warned organizations in Asia, Europe and North America to be cautious as the magnitude of DDoS threats is likely to escalate over the next six to eight months.

On Wednesday the company announced that it had mitigated a major DDoS attack of "unprecedented size in terms of packet-per-second volume," viewing this as an early warning of DDoS escalation. According to the press release, the attack was directed against an unnamed Asian ecommerce company. Prolexic says the attack generated larger than normal TCP SYN Floods and ICMP Floods. Paul Sop, chief technology officer at Prolexic, said the volume reached levels of approximately 25 million packets per second. In comparison, he said, most high-end border routes can forward 70,000 packets per second in usual deployments.

FBI Arrests 14 People Connected to Anonymous PayPal Hacks

thewhir.com

by Nicole Henderson

July 20, 2011

As part of an ongoing investigation, US authorities arrested 16 people on Tuesday in connection to major hacks, including an attack on PayPal last year, according to a report by Reuters.

The arrests come on the heels of a LulzSec attack on Murdoch-owned news sites on Monday. The FBI arrested 14 people in Alabama, Arizona, California, Colorado, D.C., Florida, Massachusetts, Nevada, New Mexico and Ohio on their alleged involvement in the PayPal hacks, according a press release. Between ages 20 to 42, the accused allegedly conducted the attack on PayPal's website in retaliation for suspending the accounts of WikiLeaks. In December, the FBI raided a Texas-based web hosting company and seized a computer believed to be involved in the denial of service attacks targeting PayPal.

[First]  [Previous] |    12     13     14     15     16     17     18     19     20     21    | [Next]  [Last] of 172 page(s)