Microsoft CardSpace killed before it really began?   31 May 2008 13:31 GMT
According to Neowin, computing students at the University of Bochum, Germany, have worked out how to retrieve vital security tokens from Microsoft's CardSpace framework. CardSpace is highly tipped to be the successor to Windows Live ID Passport and making passwords a relic of the Cold War, using self-signed or certificate...
Source: ZDNet

Microsoft issues Safari-to-IE blended threat warning   31 May 2008 00:16 GMT
Microsoft has issued a formal security advisory with a confirmation of public warnings that the Safari "carpet bombing" vulnerability presents a remote code execution threat on all supported editions of Windows XP and Windows Vista. The pre-patch advisory from Redmond follows public pressure from the Google-backed StopBadware.org...
Source: ZDNet

Obama looking for help thwarting Web site hackers   30 May 2008 22:40 GMT
On the heels of last month's embarrassing site breach that allowed a hacker to redirect traffic from BarackObama.com to Hillary Clinton's Web site, the Obama campaign is looking to hire a network security expert to lock down its online operations. According to this job listing, the campaign...
Source: ZDNet

Chinese female hacking group spotted   30 May 2008 21:52 GMT
Chinese girls talking about using SQL injections to serve malware and ARP spoofing, in between sharing do-it-yourself tutorials on XSS worms? Sexy.  Scott Henderson at the Dark Visitor profiled a Chinese hacking group with female members only, discussing these very same topics : "In the male dominated world of...
Source: ZDNet

ActiveX vulnerability haunts Creative Labs AutoUpdate engine   30 May 2008 17:24 GMT
A high-severity security flaw in the Creative Software automatic update engine could put Windows computers at risk of remote code execution attacks, according to a warning from the US-CERT Computer Emergency Readiness Team. The vulnerability affects the software used to provide updates to Creative Labs' audio/video entertainment product line,...
Source: ZDNet

How was Comcast.net hijacked?   30 May 2008 16:43 GMT
It's official, even a pothead can social engineer Network Solutions. In an in-depth interview with the hijackers, featuring some screenshots showing they had access to the complete portfolio of over 200 domain names controlled by Comcast, the details of how they did it, and why they did it are now...
Source: ZDNet

Next-Gen Load Balancing: Delivering Advanced Web Apps   30 May 2008 13:00 GMT
(Source: Citrix) Free guide - "Next-Gen Load Balancing: Delivering Advanced Web Apps" helps ensure poorly-written apps no longer bring your network to a crawl. Learn how next-gen load balancers can optimize availability, performance and security, all in one integrated appliance. Get your copy today!

Source: Computerworld

RIM reportedly gets ultimatum over BlackBerry service in India   30 May 2008 13:00 GMT
Research In Motion has been issued an ultimatum by the Indian government to either provide a way for the government to monitor BlackBerry communications or face having its service in India shut down, an Indian newspaper reports.

Source: Computerworld

Bank loses tapes with data on 4.5M clients   30 May 2008 13:00 GMT
A New York bank confirmed that it lost a box of data storage tapes containing the unencrypted personal information of 4.5 million people during transit to an off-site facility.

Source: Computerworld

Researchers breach Microsoft's CardSpace ID technology   30 May 2008 13:00 GMT
A trio of computer security researchers has successfully compromised Microsoft's CardSpace identity management technology.

Source: Computerworld