Internet and Network SecurityPhish now tastes better than spam to hackers, says Symantec researcher A Symantec researcher is reporting that phishing is now a better choice for cybercriminals in terms of the returns it generates for their bottom line.... More Trend Micro expert calls new Facebook interface a 'stalker enabler' If you use Facebook, you'll undoubtedly have noticed a series of major changes to your web interface over the last few days. According to a Trend Micro solutions architect, users should not lose sight of the fact that the underlying data remains intact, and there are still security issues that need to be addressed.... More Go Daddy goes phishing The breach of websites hosted by Go Daddy was likely the result of a phishing attack, said Nicholas Percoco, head of Trustwave SpiderLabs.... More Dutch government revokes DigiNotar's CA root certificates The Dutch government is revoking the DigiNotar’s subordinate certificate authorities (CAs) under the Staat der Nederlanden root certificates.... More China unlikely behind hack of Japanese defense contractor, says Bitdefender China is unlikely to be the culprit behind the cyberattack against Mitsubishi Heavy Industries, a major Japanese defense contractor, despite the discovery of Chinese characters in the malware used in the attack, said Catalin Cosoi, head of Bitdefender Threat Labs.... More European survey shows internet shoppers still worried about online security Research just released claims to show that European internet users are still worried about security issues about shopping online, with around 20% avoiding e-shopping because of their concerns. ... More Canadians are 'offside' when it come to online protection, says report Canadian citizens are failing to take basic steps to protect themselves online, concludes a new report by the Conference Board of Canada.... More Microsoft warns on combination SSL/TLS security risk Microsoft’s Trustworthy Computing operation has warned on a potential security issue with Secure Sockets Layer (SSL 3.0) and Transport Layer Security (TLS 1.0) across all browser platforms. Under certain conditions, the software giant says, a Windows-based HTTPS-enabled session could be vulnerable to a man-in-the-middle data interception.... More I'll sue you for spamming me (but I'll also quietly infect your computer) scam revealed Security training firm KnowBe4 says it is has spotted a new social engineering scam appearing in internet users' mailboxes – the attack tries to scare recipients into opening the infected attachment by threatening to sue them for spamming.... More Cyberpirates harpoon big fish through whaling Cybercriminals are increasingly using “whaling” – a targeted spear phishing attack that goes after “big fish” in an organization – to gain access to critical proprietary data, according to IBM’s X-Force 2011 Mid-Year Trend and Risk Report.... More Is Secure Sockets Layer broken? As reported earlier this week, after two Far Eastern researchers revealed potentially severe security problems with SSL 3.0 and TLS 1.0 technology, Microsoft's Trustworthy Computing operation released an advisory to Windows users, warning them of the problem.... More Australia's NetRegistry suffers a major DDoS attack Reports are coming in that the NetRegistry, one of Australia's key internet registries, has suffered a major distributed denial of service (DDoS) attack this week.... More |