KrebsonSecurity has a good rundown on what we know so far. Basically there has been a breach, some CC companies are noticing bad traffic, and the US secret service is in on the act. July 17th the first card companies were noticing suspicious traffic. There is no other information in the news reports Goodwill Industries … Read more
By Bradley Susser’s Blog bot24.blogspot.com Science papers direct link I like Back to Basics where the paper reviews our bad security model – which used to work as networks were small and fixed computers on the inside protected from systems on the Internet. Today our security model is where new devices get set up … Read more
CBS local in New York has an audio spot $14mil in 2 days in 17 countries on 15000 ATM devices. Apparently JPMorgan Chase processed debit card transactions for the American Red Cross. The hackers increased the withdrawal limits on the debit cards and then used the card information to withdraw money all over the … Read more
Arstechnica has an old story that I thought was interesting: From 2005 – 2012 there were multiple break -ins thus the hacker “owned” the various company sites. The overwhelming attack vector sued was SQL -injection. Her is an excerpt that I want to emphasize: “NASDAQ is owned,” Aleksandr Kalinin, a 26-year-old resident of St. Petersburg, Russia, … Read more
Malware campaign is using some old and new methods. One email claims to be from Maersk shipping line and the attachment (word doc) opens a backdoor connection to two hacker command and control servers The dropbox domain is also referenced, the links attempt to contact londonpaerl (. )co (. )uk and selombiznet(.)net (I added the … Read more