RSA crypto attack poses threat to DRM
70508
Side-channel code break Security researchers have developed a new approach to breaking the RSA algorithm that creates new problems for the development of effective rights management software.â¦
80556
GNUCitizen is describing an apparent vulnerability that could trick people into revealing personal data.
327190
Top executives will be the first to use Microsoft DRM technology when Mathias Thurman rolls it out. So what could go wrong? Best not to find out.
344908
The federal government is holding a competition for a new cryptographic hash function that will become the national standard. Really, this is exciting stuff. Commentary by Bruce Schneier.
657793
A leading internet credit card processor is under siege by a denial-of-service attack, slowing its servers and leaving many customers high and dry. By Noah Shachtman.
235413
Data Traveler Secure Privacy Edition U.S.B. port is not just password-protected but also scrambled using high-strength, 256-bit encryption.
524524
An attack utilizing a vulnerability in an ActiveX control for the popular RealPlayer media program may be spending in a more more dangerous fashion than anyone realized. Exploit code for the vuln has been found embedded in ads served up from a popular advertising site.
298773
Researcher finds two flaws that under unusual circumstances could let a malicious program read private data or render a phone unusable.
206312
(InfoWorld) - Software developers like to make installation of their programs simple and quick. So do hackers. Analysts at RSA Security early last month spotted a single piece of PHP code that installs a phishing site on a compromised server in about two seconds, the vendor noted in its monthly online fraud report for June, released on Tuesday. The code contains all of the HTML (Hypertext Markup Language) and graphics needed for the fraudulent Web site, which spoofed a financial institution that RSA did not name in the report. The ".exe" file automatically installs the code and graphics in the right directories, RSA said. It means the hacker did not have to repeatedly access the compromised server to upload graphics or other code for the site, potentially reducing the chance of the computer's security software or network software detecting something awry, RSA said. "By using such kits, fraudsters will be able to further automate the process of hijacking servers and creating new phishing sites," the report said. It doesn't bode well forÂ combatting the problem of phishing, where hackers try to elicit passwords or financial information via look-alike Web sites. Despite efforts to quickly shut sites down, phishing sites averaged a 3.8-day life span in May, according to the Anti-Phishing Working Group, which released its latest statistics on Sunday. Data from market analyst Gartner released last month showed that phishing attacks have doubled over the last two years. Gartner said 3.5 million adults remembered revealing sensitive personal or financial information to a phisher, while 2.3 million said that they had lost money because of phishing. The average loss is $1,250 per victim, Gartner said. Â
572496
Signature verification vuln A flaw in the way encryption programs present data to users makes it possible for a block of unsigned and unencrypted data to appear no different to users from encrypted data in a message.â¦
743833
Passwords as we know them could be yesterday&#39;s news if two-factor authentication solutions from VeriSign Inc. and RSA Security Inc.
72462
Security researchers are warning of a serious - and unfixed - security hole with the popular Winamp media player.
292162
Readying a white paper The Open Rights Group (ORG) is developing a new paper to inform the music industry about the technical suitability of Digital Rights Management (DRM) as an aid to enforcing copyright.â¦
318929
Company has made headway on protecting PCs, but more Net use means more challenges, Gates and Mundie tell RSA crowd.
687926
Retro attack gets new life, worries browser makers &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
294425
ZDNet UK: Encryption circles are buzzing with news that mathematical functions embedded in common security applications have previously unknown weaknesses.
133399
Weakness in open-source GnuPG cryptography technology could let miscreants tamper with digitally signed, "secure" messages.