Naked Security

A summary of talks from BSides Austin including the Verizon Data Breach Investigation Report, the state of cloud security and the importance of high quality random numbers in cryptography.

More Mac malware has been discovered, capable of giving remote hackers access to your Apple Mac. Isn't it time you ran anti-virus software on your Mac?

It looked as though Google had got away with its Street View WiFi data collection fiasco in the USA. Until last Friday, when the FCC issued a resounding-sounding Notice of Apparent Liability for Forfeiture against the search giant.

Apple is prompting some of its iTunes/App Store/iOS customers to set up three new security questions and an alternate email, in an attempt to smother a growing wave of phishing and fraud.

Acai Berry spammers briefly take over Twitter account belonging to Hyatt Hotels. Is your company taking the security of its social media accounts seriously enough?

A new version of the Mac OS X Sabpab Trojan horse has come to light, and rather than relying upon a Java vulnerability - it appears to be exploiting malformed Word documents instead.

There were lots of fantastic presentations at BSides Austin last week, here are a few of our favorites.

Flaming Retort is back, this time trying to Coole and Explayne the flames we've had from some Mac users in the past few days. In a back-to-front way of making Mac fans feel better, I'll start by making everyone feel slightly worse, taking a small potshot at Windows, OS X and Linux fans alike.

Two teenagers have been arrested following a series of prank calls and DoS (denial-of-service) attacks launched against the Anti-Terrorist Hotline.

A new Bill wants to protect children by requiring all users to opt-in if they want to access porn. This would create a system of censorship by default. Is this necessary when parents already have access to porn-management tools?

In the second part of his article on how to assess the security of a third-party provider, Ross McKerchar takes a look at security functionality.

Tempted to try out the much talked about Instagram app? Well, be careful where you get it from - as malware authors are distributing malware disguised as the popular app.

User education is of course a great idea, but we all know how hard it is to get the messages across in a clear and memorable way. Sophos launches a free education toolkit to help the poor IT guys who are responsible for user education.

A recent report has shown a large increase in the number of fraudulent phone calls attempting to voice phish customers of US banks.

SophosLabs is intercepting a spammed-out malware campaign, pretending to be an email about a revealing photo posted online of the recipient. The emails, which have a variety of subject lines and message bodies, arrive with an attached ZIP file (IMG0893.zip) which contains a Trojan horse.

Anonymous hacktivists appear to have successfully blasted the Formula 1 website off the net, with a distributed denial-of-service (DDoS) attack.

A new law being debated in the US is causing concern among privacy advocates. The law is designed to encourage information sharing to thwart cybercrime, yet even the White House is expressing concerns over the privacy implications of the bill.

Chester Wisniewski and Paul Ducklin chat about the security issues surrounding Apple's new iTunes security, knowledge-based authentication, Mac malware and Google's fine from the FCC.

SophosLabs reports on the top twelve spam relaying countries for January - March 2012.

Eight men have been arrested for running a secret online store that sold more than $1 million worth of narcotics. It's alleged that the gang hid its tracks by operating on the Tor network.

BSides Austin - Verizon DBIR, cloud security and the importance of randomness

Sabpab, new Mac OS X backdoor Trojan horse discovered

FCC to Google - "We asked you nicely FIVE times, but now we are SERIOUS"

Apple ratchets up security on App Store and iTunes

Hack of Hyatt Twitter account by Acai Berry spammers is a warning for us all

New version of Sabpab Mac Trojan emerges, spread via Word documents

BSides Austin - Security tools for the cloud, password storage, GoogleTV hacks, card key hacking and how to get ahead in IT

FLAMING RETORT: All this new Mac malware - whose fault is it?

Alleged TeaMp0isoN teen hackers charged with jamming anti-terrorist hotline

New Bill in the UK wants internet to be censored from porn by default

Practical IT: how to assess a third-party provider's security (part 2)

Fake Instagram app infects Android devices with malware

Only 4% of IT staff trust users: free security toolkit now available

Fraudulent calls target US banks, another look at caller ID spoofing

IMG0893.zip - Your photo all over Facebook? Naked? Malware campaign spammed out

Formula 1 website attacked by Anonymous, brought down by DDoS

CISPA debate rages on in the US, what's all the fuss about?

SSCC 88 - iTunes security, Mac malware and Google's FCC fine

India becomes the king of the spammers, stealing America's crown

Tor-hidden online narcotics store, 'The Farmer's Market', brought down in multinational sting