US - CERT warns users about encryption appliance
501384
The U.S. Computer Emergency Readiness Team released an alert yesterday saying that a flaw in the CryptoStor Tape 700 Series tape backup appliance could allow attackers to bypass one line of defense in a two-factor authentication system.
301690
"How can laptops holding details of customer accounts be used away from the office without strong encryption?" Richard Thomas scolds.
713369
GNUCitizen is describing an apparent vulnerability that could use VoIP to trick people into revealing personal data.
587711
Hackers could bypass security warnings and download malicious content.
737452
The unpatched security hole could be used by a remote attacker to compromise a vulnerable Mac, advisories say.
663940
Another user of the Doom9 Forum, whose members have been actively working to develop a system to subvert AACS copy protection, has apparently discovered in a memory dump a legitimate device key - the cryptographic element licensed to components in order to obtain the volume key automatically from high-definition HD DVD discs, according to a post yesterday.
175266
(InfoWorld) - The U.S. Computer Emergency Readiness Team (US-CERT) has warned U.S. banks and financial institutions of a threatened cyberattack by the al-Qaeda terrorist organization. The group called on allies to attack the Web sites of U.S. financial institutions in December in retaliation for the U.S. holding suspected terrorists at the Guantanamo Bay, Cuba, prison camp, according to a U.S. government source. US-CERT, part of the U.S. Department of Homeland Security (DHS), sent out the alert Thursday, but it has "no information to collaborate the threat," said Joanna Gonzalez, a DHS spokeswoman. The alert was "really sent out of an abundance of caution," she added. Such alerts are "not uncommon," Gonzalez said, although she declined to give details about how often US-CERT issues the alerts. Asked if al-Qaeda has the ability to carry out such a threat, Gonzalez said she didn't have that information.
42081
Blog: Popular add-ons could have their update process hijacked by man-in-the-middle attacks.
38008
Vulnerabilities could allow attackers to gain remote control of a system, security company says.
155972
A new user of the same online forum where one user last December reported having retrieved the title key for a specific HD DVD movie reports that he has been able to fish for the AACS device key- - the unique cryptographic element licensed to each player hardware or software component by AACS LA -- using a memory dump during the execution of the Windows-based player WinDVD 8.
17527
The US government&#39;s Computer Emergency Response Team (US-CERT) and software security companies have issued warnings about a number of security vulnerabilities in versions of Oracle Corp.
572496
Signature verification vuln A flaw in the way encryption programs present data to users makes it possible for a block of unsigned and unencrypted data to appear no different to users from encrypted data in a message.â¦
224951
Those who have not changed the default passwords on their home routers may be putting themselves at risk of attack, researchers at Indiana University and Symantec are warning.
520541
Exploit code targets a flaw that generated a government warning last week.
3066
Skype warns users password-stealing Trojan horse is making the rounds, disguised as a Skype security plug-in
212311
A US security company is warning that it has found ten &#39;serious&#39; vulnerabilities in Windows XP systems with SP2 installed.
316177
An attack combining malicious codes on Web sites and end-user laziness could compromise millions of routers still configured with their out-of-the-box defaults.