RSS Reader for Computer Security Articles
Credit to Author: BrianKrebs| Date: Mon, 04 Dec 2017 05:39:53 +0000
Leakbase, a Web site that indexed and sold access to billions of usernames and passwords stolen in some of the world largest data breaches, has closed up shop. A source close to the matter says the service was taken down in a law enforcement sting that may be tied to the Dutch police raid of the Hansa dark web market earlier this year.
Read MoreCredit to Author: BrianKrebs| Date: Sat, 02 Dec 2017 19:44:21 +0000
A former employee for the National Security Agency pleaded guilty on Friday to taking classified data to his home computer in Maryland. According to published reports, U.S. intelligence officials believe the data was then stolen from his computer by hackers working for the Russian government.
Read More
Credit to Author: Brian Barrett| Date: Sat, 02 Dec 2017 19:36:32 +0000
A bill to punish hack hiders, Apple bug fix bumbling, and more of the week’s top security stories.
Read More
Credit to Author: Chris Navarrete| Date: Sat, 02 Dec 2017 15:50:59 +0000
PowerDNS Recursor is a high-end, high-performance resolving name server that powers the DNS resolution of at least a hundred million subscribers. The “Recursor” is one of two name server products whose primary goal is to act as resolving DNS server. On Aug. 7, 2017, I reported an XSS (cross-site scripting) vulnerability to PowerDNS and its Security Team. They assigned it the identifier CVE-2017-15092. In this report I will explain how I was able to identify and trigger the vulnerability.
Read More
Credit to Author: Issie Lapowsky| Date: Sat, 02 Dec 2017 12:00:00 +0000
Trump’s retweets of a British anti-Muslim hate group sound alarms for those who study the propaganda behind some of history’s greatest tragedies.
Read More
Credit to Author: Mike Elgan| Date: Sat, 02 Dec 2017 02:00:00 -0800
The world of security is getting super weird. And the solutions may be even weirder than the threats.
I told you last week that some of the biggest companies in technology have been caught deliberately introducing potential vulnerabilities into mobile operating systems and making no effort to inform users.
One of those was introduced into Android by Google. In that case, Android had been caught transmitting location data that didn’t require the GPS system in a phone, or even an installed SIM card. Google claimed that it never stored or used the data, and it later ended the practice.
Credit to Author: BrianKrebs| Date: Sat, 02 Dec 2017 01:15:15 +0000
Roman Seleznev, a Russian man who is already serving a record 27-year sentence in the United States for cybercrime charges, was handed a 14-year sentence this week by a federal judge in Atlanta for his role in a credit card and identity theft conspiracy that prosecutors say netted more than $50 million. Separately, a Canadian national has pleaded guilty to charges of helping to steal more than a billion user account credentials from Yahoo.
Read More
Credit to Author: Lily Hay Newman| Date: Sat, 02 Dec 2017 00:56:04 +0000
The Justice Department has struck a plea deal with Nghia Hoang Pho, a programmer in the NSA’s elite operations unit, for taking his highly classified work home with him.
Read More