Share

Related Links

Related Stories

  • US standards drive Canadian information security
    An absence of legislation and the presence of the laissez-faire attitude has resulted in Canada being rather lax when it comes to information security compliance. Robin Arnfield looks at how US standards are driving the Canadian information security marketplace
  • From the Eye of the Storm: 2011 Information Security Predictions
    Last January, Infosecurity magazine published prognostications by the (ISC)² Advisory Board of the Americas (ABA) regarding the information security field in 2010. Unlike many who have attempted to envision the future, the ABA has gone back and reviewed the accuracy of its predictions and provided a letter grade for each. The ABA will then offer new predictions for 2011.
  • The Good, the Bad, and the Ugly Insider Threats
    Whether intentional or unintentional, insider threats take many forms. The (ISC)² US Government Advisory Board Executive Writers Bureau examines this dichotomy and how it is being affected by both regulatory considerations, and the rapidly changing technology landscape
    Members' Content
  • Weekly Brief - July 6 2009
    Techniques, Tools, Concerns, Crimes, and Crashes
  • Year of the Hack
    Commonly referred to as the year of the hack, it is no secret what 2011 has become famous for in the information security industry. This year’s headlines, reports Fred Donovan, have been made up of data breaches, hacks, APT attacks and mergers and acquisitions

Top 5 Stories

News

Weekly Brief - June 8 2009

08 June 2009

Information security: Privacy, enforcement, attacks, and defenses

Privacy

The Electronic Frontier Foundation has launched TOSBack, a site designed to track terms of service conditions for major websites.

The Electronic Privacy Information Center has submitted comments to a Department of Homeland Security review on the US Government's use of social media.

Sears has settled charges that it sneaked software onto customers' machines from web research firm ComScore. The software would monitor their online activities and feed the information back to the retail giant.

Enforcement

The Federal Trade Commission (FTC) has shut down internet service provider Pricewert, which it says has been hosting botnets, phishing sites, and child porn, among other online nasties. Pricewert is gearing up for a fight.

Attacks

Penetration testing tool company Immunity has commercialized an attack that enables software in a virtual machine to punch out of the virtual sandbox and attack its host.

Investigators from Trustwave say that Eastern European gangs have been infecting ATM machines with malware that allowed them to steal cash. The breaches are probably inside jobs because physical access to the ATM is needed.

According to a report from Microsoft, the size of the underground economy that trades stolen personal information via IRC channels has been grossly over-estimated.

That wasn't the only report that Microsoft announced. It also reported a new vulnerability in its DirectX graphics system. Accessing specially crafted Quicktime files could allow arbitrary code to be executed on a victim's system, says the company.

Defenses

US firm Pramana is to launch a service that it says can tell when bots as opposed to humans are conducting online activities such as filling out web forms.

The Department of Homeland Security is to create an online review of homeland security in conjunction with security and policy experts across the US.

The Election Assistance Commission has issued a set of proposed draft revisions to US Voluntary Voting Guidelines, which are federal guidelines designed to test voting systems for security.

This article is featured in:
Internet and Network Security • Malware and Hardware Security • Public Sector  • Security Training and Education

 

Comment on this article

You must be registered and logged in to leave a comment about this article.