McAfee anti-fraud researcher charged with fraud   20 May 2008 09:55 GMT
A former excutive at ScanAlert, the firm that offered the "Hacker Safe" certification before it was purchased by McAfee, has been charged with securities fraud in Indiana.

Source: Computerworld

New attack trend pushes POS encryption to the fore   20 May 2008 07:53 GMT
The recent rash of data thefts from retail point-of-sale systems is prompting security vendors and payment processing firms to offer tools for encrypting POS information.

Source: Computerworld

The Storm Worm Would Love to Infect You   19 May 2008 21:27 GMT
The Storm Storm malware is back in the game, with its most recent campaign currently active and trying to entice users into executing iloveyou.exe by spamming them with links to already infected hosts acting as web servers, next to SQL injecting malicious domains into legitimate sites for the campaign to...
Source: ZDNet

I'm stepping aside...   19 May 2008 17:38 GMT
I'm becoming a contributor on Zero Day to let the experts handle our security blog. As you may have noticed, Ryan Naraine has returned to Zero Day creating what I consider a security dream team. I did the programming note on Between the Lines. We're in the...
Source: ZDNet

Welcome (back) Ryan Naraine; Zero Day's line-up revamped   19 May 2008 17:22 GMT
You may have noticed a familiar byline over at our Zero Day security blog--Ryan Naraine. His addition completes a revamped line-up for our security blog. Ryan is now an evangelist for Kaspersky Lab, a security vendor. He joins Nate McFeters and Dancho Danchev, two real-world security researchers...
Source: ZDNet

Zoho Writer flaw highlights disclosure problem in Web 2.0 world   19 May 2008 17:03 GMT
CNET News.com's Martin LaMonica recently stumbled upon on an information disclosure vulnerability in Zoho Writer,  the browser-based word processing software popular among Web 2.0 early adopters. The raw details: On Sunday morning, I went up to my Zoho Writer page and searched on "soccer." The...
Source: ZDNet

Mass SQL injection attack hits Chinese Web sites   19 May 2008 13:00 GMT
Thousands of Web sites in China and Taiwan have been hit by a large-scale SQL injection attack that has placed malware on thousands of Web sites, according to a security company in Taiwan.

Source: Computerworld

38 in U.S., Romania charged in phishing schemes   19 May 2008 13:00 GMT
U.S. authorities charge 38 people in the U.S. and Romania in two related phishing schemes.

Source: Computerworld

Panda Security delivers cloud-based security management service for SMBs   19 May 2008 12:54 GMT
IT security provider Panda Security has unveiled its Managed Office Protection solution, a security-as-a-service offering aimed at small and medium businesses SMBs as well as large companies with a significant number of geographically dispersed offices. The service from the Panda keeps the total cost of ownership TCO...
Source: ZDNet

Fast-Fluxing SQL Injection Attacks Executed from the Asprox Botnet   19 May 2008 12:10 GMT
The botnet masters behind the Asprox botnet have recently started SQL injecting fast-fluxed malicious domains in order to enjoy a decent tactical advantage in an attempt to increase the survivability of the malicious campaign. I first assessed the Asprox botnet in January, and again in April when it started scaling...
Source: ZDNet