Get the LinuxSecurity news you want faster with RSS
Powered By
Linux Security Week: July 2nd, 2012
Source: LinuxSecurity Contributors - Posted by Benjamin D. Thomas
Thank you for reading the LinuxSecurity.com weekly security newsletter.
The purpose of this document is to provide our readers with a quick
summary of each week's most relevant Linux security headlines.
Password guessing as an attack vector - Using password guessing as an attack vector. Over the years we've been taught a strong password must be long and complex to be considered secure. Some of us have taken that notion to heart and always ensure our passwords are strong. But some don't give a second thought to the complexity or length of our password.
Two British men accused of taking part in high-profile cyber attacks by hacking group LulzSec in 2011, have pleaded guilty to charges that include conspiring to attack Sony Pictures, FBI affiliate Atlanta Infragard and IT security company HBGary Federal.
McAfee has collaborated with security firm Guardian Analytics to uncover a ring of online banking criminals who specifically targeted corporate accounts with high balances. According to the two companies' white paper, the fraudsters have attempted to steal at least €60 million, more than L35 million of which was from the Netherlands banking system alone; L1 million involved German banking customers. The report doesn't provide any details on the actual financial damage caused.
Four alleged members of the LulzSec hacktivist group had their day in British court Monday. Two of the people charged--Ryan Cleary, 20, and Jake Leslie Davis, 19--appeared at Southwark Crown Court in England to enter guilty pleas against some of the charges against them, including hacking the public-facing websites of the CIA and Britain's Serious Organized Crime Agency (SOCA).
They're the bane of the IT security professional's existence when they're on the wrong side of the law, but the truth is, hackers often understand the nuances of network security better than your average CSO. So is it safe to bring a hacker into your IT team?
A hacker claims to have breached and backdoored security and antivirus software firm Trend Micro due to 'pseudo-security' as well as SYKES which runs support services for Trend Micro. According to Pastebin and a dump for 'proof' of the breach, the hacker claims to still be in control of a backdoor into the security firm.
Only registered users can write comments. Please login or register.