Access Control

Hosting provider LeaseWeb falls victim to DNS hijacking

The company believes attackers obtained domain administrator credentials and used them to change the domain's DNS records at the registrar

Facebook networking chief: No more secret ASIC commands

Social networking giant uses software defined networking (SDN) to wrest more control of its network gear from vendors

Hackers steal information on 2.9 million Adobe customers

Source code for some Adobe products also was stolen

Mozilla unmasks security flaw in Persona, warns other OpenID implementers

OpenID-related vulnerability could have allowed attackers to impersonate users on websites using Mozilla Persona authentication

Yahoo abandons T-shirt rewards for vulnerability information

Starting Oct. 31, Yahoo will pay between US$150 to $15,000 for flaws, in line with bounties paid by Facebook and Google

Brute-force malware targets email and FTP servers

Researchers find Fort Disco malware variants launching brute force password guessing attacks against POP3 and FTP servers

IE zero-day vulnerability exploited more widely than previously thought

Security researchers identified attacks that exploited the vulnerability to target organizations in Taiwan since at least July

Google gets kudos for tossing older Chrome plug-in API

Google yanks sketchy iMessage clone for Android from app store

People who probed the app's innards suspected it was harvesting Apple ID credentials

iPhone TouchID fingerprint biometrics broken by German hacker club

Chaos Computer Club shows online video demonstrating use of a gummy finger hack of an Apple iPhone