SecurityWeek

Early Wednesday, unknown adversaries diverted traffic intended for the Romanian sites of Google and Yahoo to a defaced Web page.

Printers manufactured by Samsung, and sold via Dell or direct channels, are vulnerable to attack thanks to a hard-coded administrator account in the device’s firmware. The company says that devices made after Oct. 31 are not vulnerable, but it will take time before a patch tool is released.

Last week, South Carolina’s (SC) Governor presented the results of the investigation over the exposure of the personal data of nearly 4 million individual filers and 700,000 businesses

The International Atomic Energy Agency (IAEA) reportedly is taking steps to secure its information after data was stolen from one of its former servers and posted online. According to the IAEA, the stolen data includes email addresses for some experts working with the agency. The data was posted online by a group going by the name Parastoo, which in Farsi translates to "swallow."

An exploit for a Java zero-day is on sale for "five digits" in an underground forum, according to a recent report.

WASHINGTON - Facebook has run into a fresh attack from privacy activists after the huge social network modified policies on how it manages users' data. The changes unveiled last week ended Facebook's effort to allow users to vote on privacy policy, but also permits sharing of information with its newly acquired photo-sharing service, Instagram.

It’s no surprise that due to the nature of data held by financial institutions, they are constantly under cyber-attack as attackers look to steal everything from credit card numbers to sensitive personal information that can be used for Identity theft and other forms of financial fraud. With these constant attacks and an increasingly complex threat landscape, financial organizations are scrambling to lock down networks and sensitive data as quickly and effectively as possible.

There’s No One Size Fits All Disaster Survival Plan: Every Incident Requires A Situationally Appropriate Response...

Cloud Encryption and Key Management Solution Encrypts Data Across Private, Hybrid and Public Cloud Environments HighCloud Security, a provider of cloud encryption and key management software, today released version 2.0 of its cloud encryption and key management software for virtual machines (VMs).

SAN FRANCISCO - Facebook is telling its users to ignore rumors spreading on the social network that they need to post a statement to protect their copyrights of their comments and other materials. "There is a rumor circulating that Facebook is making a change related to ownership of users' information or the content they post to the site," Facebook said in a "fact check" notice on its website Monday.

According to a recent study performed by B2B International on behalf of Kaspersky Lab, approximately 50 percent of organizations globally (even more in the U.S.), don’t take effective measures against the most pressing threats that exist today.

In order to combat e-commerce fraud and related crimes, Visa announced on Monday that it would be adding risk-based analysis to its information products line. The new layer of defense will support the Three Domain (3-D) secure program, which includes Verified by Visa, and is available now.

On Friday, reporter Brian Krebs published a report on a different kind of post-holiday sale, one where a seller is looking to make a quick buck and expose millions of email accounts to compromise. According to Krebs, an Egyptian hacker is selling access to Cross-Site Scripting (XSS) vulnerability in Yahoo for the sum of $700 USD.

TEHRAN - An Iranian MP has blamed the death in detention of blogger Sattar Beheshti on the country's cyber police, news agency Fars reported on Monday. "The action taken by the judiciary in Beheshti's case was lawful, but the cyber police's infraction is indisputable," said Mehdi Davatgari, the parliament's special representative on the case. Opposition activists say Beheshti, 35, was tortured to death after criticizing Iran's regime in his blogs.

WASHINGTON - US and European authorities said Monday they seized 132 websites in a transatlantic law enforcement crackdown on online sellers of counterfeit merchandise. The seizure was the latest in a string of efforts by US officials to shut down online forgers, but the first joint effort with EU officials.

Even in the digital age, some criminals are sticking to the less technical, more traditional ways of stealing information. In a new study, insurance company Travelers revealed that despite the increase of e-commerce, offline methods remain the top known causes of identity fraud.

NEW YORK - A bogus news release prompted several websites to run incorrect articles about Google making a $400 million acquisition of a wireless company on Monday, the target company said. "This was a hoax. We are investigating the source," said an emailed statement from George Strouthopoulos, chairman and chief executive of ICOA, the wireless firm Google purportedly was acquiring.

Officials on Iran's computer emergency response team poured cold water on alerts about a strain of malware security researchers have warned is infecting databases throughout the country.

Judge Loretta Preska, who is presiding over Jeremy Hammond’s trial for his role in the Christmas Eve attack on Stratfor in 2011, is being accused of having a conflict of interest in the case – as she is married to a victim of the Stratfor breach.

On Saturday, hundreds of Pakistani portals and Web sites for some major organizations were by all appearance compromised, and defaced. However, as it turns out, a group of hackers used DNS redirection in order to perform the stunt, which allowed the domains time to recover – but not before the damage was done.