Pharming Attack Targeting Brazilian Home Router Users

[sans.org] Attackers are targeting Brazilian Internet users, spying on web traffic by exploiting vulnerabilities in home routers [infosec,forensic,sans]

Litecoin-mining code found in BitTorrent app, freeloaders hit the roof

[theregister.com] Maybe buying that Blu-Ray in the first place was the better option, huh? μTorrent users are furious after discovering their favorite file-sharing app is quietly bundled with a Litecoin mining program.… [infosec]

Data and Goliath's Big Idea

[schneier.com] Goliath is a book about surveillance, both government and corporate. It's an exploration in three parts: what's happening, why it matters, and what to do about it. This is a big and important issue, and one that I've been working on for decades now. We've been on a headlong path of more and more surveillance, fueled by fear­--of [infosec]

Fareit trojan pwns punters with devious DNS devilry

[theregister.com] These are NOT the Flash updates you are looking for DNS tricks used by the Fareit trojan mean users are tricked into downloading malware, seemingly from Google or Facebook… [infosec]

Is Babar a Bunny?

[f-secure.com] Lately there has been a lot of research and publicity around a strange case of Babar, a malware connected to suspected high-level espionage operation called SNOWGLOBE. SNOWGLOBE was first brought to media attention about a year ago by French newspaper Le Monde , when they wrote about top secret SCEC slides leaked by, who else than Edward Snowden himself. In the set of slides, there are numerous claims about French-originating malware which internally calls itself Babar. It …

Air traffic control vulnerability could allow criminals to hack the skies

[eset.com]

Lysa Myers: “There are still only a handful of women in the security field”

[eset.com] There

Fix for Xen Flaws May Require Reboot

[sans.org] Flaws in the open source Xen virtualization hypervisor could be exploited and cloud companies need to take action quickly to apply patches and reboot systems before the Xen Project releases details of the vulnerabilities on March 10 [infosec,forensic,sans]

CIA re-orgs to build cyber-snooping into all investigations

[theregister.com] Because the USA has such a shortage of digital surveillance The United States Central Intelligence Agency (CIA) has decided to re-invent itself for the digital age, promising to “place our activities and operations in the digital domain at the very center of all our mission endeavours.”… [infosec]

Bitdefender to Patch Certificate Flaw

[sans.org] says it will release fixes for several of its products to address a flaw that allows revoked certificates to be replaced with legitimate certificates [infosec,forensic,sans]

BILLION email address spam scam: Feds collar two blokes, hunt another

[theregister.com] Servers hijacked in 'largest ever' US hack, claim prosecutors The US Department of Justice (DoJ) has shed light on what it's calling the largest computer security breach in American history – after three men were charged with hacking email hosting firms, stealing email addresses, and then using the businesses' data centers to run a spam operation.… [infosec]

Mind-reading DNS security analysis offers early warning for APT attacks

[theregister.com] Precog security tech looks to predict online typo terror The application of predictive algorithms to DNS data may be able to spot malware sites before they serve up nasties.… [infosec]

Mozilla Updates Firefox to Remove Superfish Certificate

[sans.org] A Firefox update released on Friday, February 27, scrubs the Superfish self-signed certificate from the browser [infosec,forensic,sans]

Payment Cards for Sale on Underground Sites Suggests Natural Grocers' Breach

[sans.org] used at Natural Grocers' stores across the country have been found for sale on underground sites, suggesting that the company's system suffered a security breach [infosec,forensic,sans]

Securing the Nation's Ports Against Cyberterrorism

[google.com] 15, the USCG held a maritime cybersecurity standards public meeting to discuss cyber threats to our nation's ports.cyberterrorism cyber security ports [infosec,cyber,security]

SANS Special Webcast: Forensic Update: What�s New and What�s Next - Monday September 16, 2013 (10:00 AM EST)

[sans.org] Please visit http://bit.ly/16wMPuf for complete information and to access this event [infosec,forensic,webcast,sans]

Pentagon 'network intruder', dozens more cuffed in British cops' cyber 'strike week'

[theregister.com] 'Just the first step', chuckles fraudbust bigwig A "strike week" against suspected hackers by the UK's National Crime Agency has resulted in 57 arrests.… [infosec]

Pay Pal buys Israeli cyber security start-up

[google.com] The deal for the Beersheba-based CyActive was signed last week and is expected to close shortly, the Israeli business daily Globes reported [infosec,cyber,security]

Dutch Semi-Conductor Company Admits Breach

[sans.org] computer chip company ASML has acknowledged that its systems were breached [infosec,forensic,sans]

The Message: Consent Matters

[f-secure.com] Go read this: Privacy is non-negotiable: We have the right to cover our arse — or expose it A post by Laura — whom I'm very proud to have as a colleague. On 02/02/15 At 05:15 PM