SecurityWeek

In my previous column, I discussed the “So What Factor”, which reminds us that we must know our audience.  Many of the people we interact with professionally will not be as enamored by the beauty or elegance of a technical solution as we are.  Instead, they will be more concerned with consequences, effects, and results.

A serious vulnerability has been discovered in a File Transfer Protocol (FTP) client used by many Unix-like (*NIX) operating systems, representatives of the NetBSD Project reported on Tuesday.

SEOUL - North Korea attempted to hack tens of thousands of South Korean smartphones this year, using malware disguised in mobile gaming apps, the South's spy agency said in a report submitted to parliament this week.

WASHINGTON - White House technicians recently detected suspicious activity on a computer network at the US presidential mansion, and have taken steps to resolve the issue, an official said Tuesday. The White House official said the Executive Office of the President receives daily alerts concerning numerous possible cyber threats.

A Massachusetts man has been sentenced to 21 months in prison for using information hacked from customer accounts at more than a dozen banks, brokerage firms, payroll processing companies and government agencies in a plot to steal $15 million. Robert Dubuc, 41, of Malden, Mass., previously pleaded guilty to charge of wire fraud conspiracy and conspiracy to commit access device fraud and identity theft.

A reconnaissance framework documented by researchers earlier this year has been used by multiple threat groups in watering hole attacks targeting organizations in various sectors.

WASHINGTON - The US military is looking to flex its muscles in cyberspace as a "deterrence" to hackers eyeing potential American targets, the nation's top cyber cop said Tuesday.

The Dyre malware is back to doing what it does well – targeting online bankers and stealing their user credentials in a new phishing campaign.

Cybercriminals using the Dridex banking Trojan to steal sensitive information from Internet users have changed the way they are distributing the malware, according to researchers from Palo Alto Networks.

WASHINGTON - The Russian and Chinese governments are likely behind widespread cyberespionage that has hit targets in the US and elsewhere, two separate security reports said Tuesday. One team of researchers led by the security firm Novetta Solutions said it identified a hacker group believed to act "on behalf of a Chinese government intelligence apparatus."

The GNU Bash vulnerability known as ShellShock is being leveraged by cybercriminals as part of a botnet campaign, researchers reported on Friday.

WASHINGTON - Credit-card hacking is the number one crime on Americans' worry list, far above getting mugged or murdered, according to a Gallup survey released Monday. As the number of major retailers reporting cyber breaches grows, with thieves stealing credit card data belonging to tens of millions of their customers, awareness of the hacking threat has taken off.

A survey of companies across the globe has found an uptick in the number of targeted attacks against businesses.

Law enforcement authorities in the United Kingdom have arrested three individuals suspected of being part of an eastern European criminal organization that uses malware to steal money from ATMs.

An Estonian man was sentenced to more than 11 years in prison for his role in a cyber-crime operation that stole more than $9.4 million from a credit card processor.

Delaware River and Bay Authority Reports Payment Card Data BreachThe Delaware River and Bay Authority (DRBA) published a data security event notice on Friday to warn people who have made purchases at Cape May-Lewes Ferry terminals and vessels that their payment card data might have been compromised.

Network security firm Fortinet today announced that its sandboxing solution, FortiSandbox, is now available as a virtual appliance.

A researcher has identified an exit node on the Tor anonymity network which is set up to maliciously modify the files that go through it.