SANS NewsBites
Verisign Admits Breaches in SEC Filing (February 2, 2012)
In its 10-Q filing with the Securities and Exchange Commission (SEC), Verisign acknowledged having suffered several data security breaches in 2010, but notes that management did not learn about the incidents until September 2011, nearly a year after they occurred.......
Romanian Police Arrest Alleged NASA and Pentagon Hacker (January 31 & February 1, 2012)
Police in Romania have arrested a man who allegedly broke into US government websites, including those of NASA and the Pentagon.......
Google to Block Blogs on a Country-by-Country Basis (January 31 & February 3, 2012)
Google has deployed technology that will allow it to block blogs on its free Blogger platform in specific countries to comply with local rules.......
Kernell's Appeal to Overturn Obstruction of Justice Conviction Denied (January 30 & February 2, 2012)
David Kernell, the Tennessee college student who was found guilty on hacking into then-vice presidential candidate Sarah Palin's Yahoo email account has lost an appeal to have his conviction for obstruction of justice thrown out.......
Apple Issues Security Updates (February 2, 2012)
Apple released its first security update of 2012 for Mac OS X, patching more than 50 vulnerabilities.......
Kelihos Botnet Regaining Momentum (February 1 & 3, 2012)
The Kelihos botnet, which Microsoft was instrumental in helping take down last year, appears to be regaining its foothold.......
Spear Phishing Attack Plants Trojan on Targeted Computers (February 1, 2012)
A recently detected, sophisticated spear phishing attack disguises itself as conference invitations.......
Google Won't Remove Apps with Counterclank Adware From Android Market (January 31 & February 1, 2012)
Thirteen apps that have been identified as containing adware known as Counterclank will remain available in Google's Android Market.......
Mozilla Releases Firefox 10.0 (February 1, 2012)
Mozilla has released a new version of its flagship browser, Firefox 10.......
Symantec Issues Hotfixes for pcAnywhere (February 1 & 2, 2012)
Symantec has released hotfixes for its pcAnywhere software.......
FDIC Issues Warning About Risky Payment Processors (February 1, 2012)
The Federal Deposit Insurance Corporation (FDIC) has issued guidance for banks and other financial services institutions, warning that certain third-party payment processors could prove to be security liabilities.......
Pirate Bay Founders' Prison Sentences Stand (February 1, 2012)
Sweden's Supreme Court has refused to hear an appeal of the prison sentences for The Pirate Bay founders that were meted out by the Swedish Court of Appeals more than a year ago.......
White House Calls for Comprehensive Cyber Security Legislation (January 27, 2012)
White House Cybersecurity Coordinator Howard Schmidt is encouraging legislators to "quickly enact legislation to address the full range of cyber threats facing our nation.......
Group Pushes Anti-Phishing Specifications (January 30 & 31, 2012)
Several large technology companies have come together with financial services companies and email providers to encourage the use of a technical specification aimed at reducing phishing attacks.......
Whistleblowing FDA Employees File Suit Over Alleged Monitoring (January 30, 2012)
A group of former US Food and Drug Administration (FDA) employees have filed a lawsuit alleging that the FDA monitored their personal email through which they warned Congress that some devices approved by the agency posed risks to patients.......
Carrier IQ Controversy Prompts Phone Privacy Bill (January 30, 2012)
Congressman Edward Markey (D-Massachusetts) has introduced legislation that would require mobile phone carriers to tell customers when tracking software like Carrier IQ is on their devices.......
Man Accused of Running Botnet Maintains His Innocence (January 27 & 30, 2012)
The Russian man accused by Microsoft of being behind the Kelihos botnet is maintaining his innocence.......
FINRA Exhorts Brokerages to Deploy Stronger Authentication for Online Transactions (January 27, 2012)
US investment firms are being urged to improve security around fund transfers and withdrawals.......
Windows Media Player Flaw is Being Actively Exploited (January 27, 2012)
Researchers have detected an in-the-wild attack that exploits a known flaw in Windows Media Player (WMP).......


