Security

Lame U/P Combos Make WordPress Irresistible to Hackers
April 16, 2013

An attack of unprecedented proportions has been hitting sites using WordPress, a free and open source blogging tool and content management system that powers more than 60 million websites worldwide. It appears the hackers are trying to take over WordPress servers to give them added muscle for future attacks. Poor choice of passwords and inadequate server security are making their task easier.

Google, EU Reach Meeting of the Minds
April 15, 2013

In an effort to appease European regulators, Google for the first time has agreed to make legally binding changes to its search results. The changes stem from a two-year investigation into whether Google abused its online search dominance in Europe. The changes will not force Google to amend its algorithm, but instead will require it to clearly label search results from its own properties.

Report: Big Biz Shakes Off Hack Attacks
April 15, 2013

A lot of noise has been made about the consequences of data breaches for companies, but a recent survey of some of the largest U.S. businesses may have wrapped those noisemakers in a muffler. Of the 27 largest companies reporting cyberattacks in their most recent filings with the U.S. Securities and Exchange Commission, none said they sustained any major financial losses from those net assaults.

Bing Tops Google in Malware-Ridden Search Results
April 13, 2013

Bing may be engaged in a "Scroogled" marketing campaign, but an 18-month study by an antivirus security firm shows that Microsoft's search engine may need to play some defense, thanks to results showing more malware-infected links popping up in its search results than for Google.

Real-World Marauders Infest Online Games
April 12, 2013

A scenario involving cybercriminals using techniques developed by state-sponsored cyberespionage groups sounds like a plot point in a video game, but the Winnti crew aren't the villains in some new release. These Chinese hackers are very real, and online games are their target. The group has been conducting a long-running cybercrime campaign targeting online gaming companies worldwide, Kaspersky Lab reported this week.

Civilian Oversight Overlooked as CISPA Clears House Committee
April 12, 2013

A revived version of the Cyber Intelligence Sharing and Protection Act -- with provisions for civilian oversight absent -- passed by a vote of 18-2 Thursday in the U.S. House of Representatives Permanent Select Committee on Intelligence. The committee adopted six amendments, but removed others aimed at privacy protection. Three of those were proposed by Rep. Jan Schakowsky, D-Ill., with one offered by Rep. Adam Schiff, D-Calif.

Remote Airplane Hijack Threat Demoed: Simon Says 'Crash!'
April 11, 2013

Airplanes can be hijacked using an Android smartphone, security consultant and trained commercial pilot Hugo Teso told an audience at a conference in Germany on Wednesday. Teso, who works for N.runs, created an exploit framework he calls "SIMON," and crafted an Android app he named "PlaneSploit" that delivers attack messages to an aircraft's flight management system.

IRS May Be Sifting Through Email in Defiance of Court Order
April 11, 2013

The ACLU has raised a disturbing possibility after reading 247 pages of records it obtained from the Internal Revenue Service via a Freedom of Information Act request: The agency may be reading taxpayers' emails without a warrant. The IRS was told not to do this after a 2010 appellate court ruling in United States v. Warshak. However, the ACLU now seems to think the IRS has reverted to its previous behavior -- or perhaps never stopped.

Iran To Launch 'Islamic Google Earth'
April 11, 2013

Iran -- long irked by Google's mapping systems -- said that it will launch its own 3D mapping service, one liberated from the geographical inaccuracies and "Zionist" bent of Google Earth. The system will be an "Islamic Google Earth," according to Mohammad Hassan Nami, Iran's minister for information and communications technology.

Brainwaves Could Make Passwords Old School
April 10, 2013

Brainwave authentication can be used instead of passwords to protect computer logins, researchers at the University of California at Berkeley's School of Information said this week. The development opens up the potential for users thinking certain thoughts or picturing specific images to gain access to devices, thereby adding a layer of biometric security.

Real World Burglars Rain on Vudu's Cloud-Based Service
April 10, 2013

Streaming video service Vudu is the latest Web-based business to be the victim of data theft, although unlike some recent highly publicized data breaches, this one began with a physical break-in. Thieves broke into the Vudu offices on March 24 and stole hard drives that contained personal customer information including names, email addresses, phone numbers, addresses and dates of birth.

Competitors Ask EU to Rein In Google
April 10, 2013

Microsoft and Nokia are part of the coalition of companies that filed a complaint with EU antitrust regulators claiming that Google is using its Android mobile operating system to promote its own products and services. Made public Tuesday by lobbying group FairSearch, the action comes as European regulators are reportedly near a settlement with Google over concerns that it has abused its search dominance.

Shodan Sheds Harsh Spotlight on Internet of Things
April 10, 2013

Shodan has burst from the shadows into the spotlight, thanks to a recent article that describes it as "the scariest search engine on the Internet." Indeed, delving into what it can do is sure to generate some uncomfortable -- even fearful -- possibilities. Shodan searches for and indexes things that are connected to the Internet -- a category that can include anything from servers, webcams, printers and routers to refrigerators and much more.

LulzSec Hackers Plead Guilty in UK Court
April 10, 2013

Four members of the LulzSec hacker community have pleaded guilty in a British court to charges of hacking into the computer systems of various organizations, including Sony, PBS, the Arizona State Police, and HB Gary. Ryan Ackroyd, whose LulzSec handle was "Kayla," on Tuesday was the last to enter his guilty plea.

US Biz Groups Rail Against China-Focused 'Cybersecurity' Law
April 09, 2013

The head of the U.S.-China Business Council has criticized a new law aimed at stopping cyberattacks. John Frisbie, the group's president, objected to the law in a letter sent Monday to the leaders of the U.S. Senate and House of Representatives. The provision requires multiple government agencies to get approval from law enforcement officials before purchasing IT systems sourced from companies having connections with China.

Mali Kicks Off Internet Domain Giveaway
April 09, 2013

It was time to try something new. The western Africa nation of Mali, whose .ml domain current has fewer than 50 active websites, will let people around the world register .ml sites for free. Less than half of Mali has mobile phone coverage, and just 4 percent of the population is online. Nevertheless, it will give away its domain starting in July.

Trusteer Ventures Into the Chinese Hackers' Den
April 08, 2013

China has a reputation as a center for international hacking, so why would a U.S. security company want to set up shop there? Before hackers launch their international escapades, they typically cut their teeth in their local markets, explained Rakesh Loonkar, president of Trusteer, which announced last week that it was opening an office in China.

The Next Big Thing in Smartphones: Multiple Video Camera Support
April 08, 2013

I've been meeting with a number of companies that build video-editing software, and I've been becoming increasingly concerned that we aren't at all ready for a world in which nearly every car and every head has a streaming camera attached to it. Regardless of whether we are prepared or not, I think it likely that the next big smartphone feature will be the ability to stream multiple cameras at once.

Facebook Home: Brilliant Stroke or Desperate Measure?
April 08, 2013

Political and economic news from around the globe may bombard us with annoying regularity here in the tech community, and as most of us know, the news is almost always bad. That, of course, is why it's such a good thing we have Facebook to filter out what we don't want to hear. It's also why we all waited in rapt attention for the Facebook Home announcement.

Google Searches for a Fight on National Security Letters
April 05, 2013

Google is reportedly challenging a government request for private information on its users, just weeks after it became the first major tech company to release information about the security probes it receives from the FBI. The tech giant is mounting a court challenge against a National Security Letter (NSL), a highly secretive demand issued by the FBI that asks Google to provide private information on certain users.