DBA who stole consumer data gets 57 months in prison, $4M bill   16 Jul 2008 13:00 GMT
A former database administrator at Certegy Check Services has been sentenced to 57 months in prison for stealing the records of about 8.5 million consumers and selling them to data brokers.

Source: Computerworld

Data can leak from partially encrypted disks   16 Jul 2008 13:00 GMT
Researchers warn that Word and Google Desktop, among other popular software programs, make encrypted information visible on partially encrypted hard drives.

Source: Computerworld

Intel faces new antitrust charges in Europe: report   16 Jul 2008 12:20 GMT
European regulators are preparing to file new antitrust charges against Intel, expanding a probe into the chipmaker's marketing and sales practices, according to a report. European regulators are preparing to file new antitrust charges against Intel, expanding a probe into the chipmaker's marketing and sales practices, The Wall Street...
Source: ZDNet

Ounce Labs finds 2 security vulnerabilities in Spring framework   16 Jul 2008 12:09 GMT
Code inspector Ounce Labs has identified two vulnerabilities in the open source Spring framework that makes it vulnerable to would-be hackers and hijackers. The two issues, ModelView Injection and Data Submission to Non-Editable Fields, affect only the MVC module of the Spring framework, which is used to...
Source: ZDNet

David Litchfield on details of one of the critical vulnerabilities from the latest Oracle patch   15 Jul 2008 22:01 GMT
More details coming out on the Oracle patches that were released last week, see Ryan Naraine's write up here.  David Litchfield, noted security researcher from NGSSoftware, released details of one of the vulnerabilities on the Full-Disclosure email list today, and the details are staggering.  The flaw allows potential unauthenticated remote...
Source: ZDNet

Finding the name behind the GMail address   15 Jul 2008 19:21 GMT
Ah, this is a fun little trick.  I'm not sure if it represents a vulnerability, but certainly I expect Google will try to get rid of this feature.  The SecuriTeam blog has reported that it is possible to expose the full name of the user who registered a GMail account.  ...
Source: ZDNet

London Underground's card system fails   15 Jul 2008 13:18 GMT
The RFID-based smartcard technology providing access control to London's public transportation system failed on Saturday, when the network stopped accepting cards. by Michael Krigsman
Source: ZDNet

Symantec says security software needs speed   15 Jul 2008 13:00 GMT
Pointing to significant improvements in performance, Symantec Corp. has posted preview versions of its flagship Windows security software.

Source: Computerworld

Opinion: Good virtual security requires better IT teamwork   15 Jul 2008 13:00 GMT
Today, many security folks know how to harden an OS and/or they know how to protect a network bridge or switch appliance. Few know how to do both simultaneously, or how to deal with the hypervisor as a complicating factor -- reasons why different people on the IT team need to play nicely, Edward Haletky says.

Source: Computerworld

Report: IT admin locks up San Francisco's network   15 Jul 2008 13:00 GMT
A network administrator has locked up a multimillion-dollar computer network for San Francisco that handles sensitive data and is refusing to give police the password, the San Francisco Chronicle reported.

Source: Computerworld