Access Control

Attack on US veterans website may have been aimed at military members

FireEye has linked the latest attacks to two other malware campaigns, believed to come from China

Hackers circulate thousands of FTP credentials, New York Times among those hit

A list of compromised FTP credentials is circulating in underground forums

Dozens of rogue self-signed SSL certificates used to impersonate high-profile sites

The certificates could be used to launch man-in-the-middle attacks against desktop and mobile apps with poor certificate validation

Banks turn to smartphone tech to fight online fraud

HSBC Bank USA hands out free two-factor tokens; U.S. Bank piloting voice biometrics on smartphones

Companies looking to DevOps to automate and save time

Survey results confirm that time constraints force us to automate.

Microsoft offers multifactor authentication to Office 365 users

Since June last year, users with administrative roles had the facility

Ransomware like Cryptolocker uses Bitcoin, other virtual currencies for payment

Solving the Credit-Card Security Challenge

I don’t see why this is such a big problem. And I think there is a relatively easy solution.

Cybercriminals compromise home routers to attack online banking users

Attackers changed the DNS configuration of vulnerable home routers to mount man-in-the-middle attacks against users in Poland

Hackers try to hijack Facebook, other high profile domains through domain registrar

Some registration information for facebook.com was changed, but the domain was not redirected to an unauthorized server