Hackers steal U.S. DOT, corporate data, security firm says
604098
Hackers apparently used fake job listings to trick employees at the U.S. Department of Transportation and several U.S. firms into downloading malware that collected and stole sensitive information, according to British Internet security provider Prevx Ltd.
326721
Hackers access personal data on thousands of customers who used the carrier's online store.
176286
Servers that managed global internet traffic have been subjected to a concerted attack by hackers.
730005
Hackers stole information from the  Department of Transportation and several U.S. corporations by  seducing employees with fake job-listings on ads and e-mail, a  computer security firm said on Monday.
723078
Security company says it has seen an attack using a cross-site scripting flaw in 2Wire DNS routers.
554027
Personal data on thousands of mostly U.S. residents were found exposed, ripe for spam and hacking.
203668
A computer security firm said Monday that it found a way to hack into Apple&#39;s new iPhones, take command of the devices and steal stored information.
54979
About 146,000 people using a jobs Web  site sponsored by the U.S. government have had their personal  information stolen by hackers who broke into computers at  Monster Worldwide Inc, a government spokesman said on Thursday.
712724
Program developed by "ethical hacking" group takes advantage of cross-site scripting vulnerability to steal contacts, forward e-mail.
521544
A Web site commissioned by the U.S. Transportation Security Administration (TSA) to help travelers whose names were erroneously listed on airline watch lists originally had multiple security problems that could lead to identity theft, says a congressional report released Friday.In addition, the TSA awarded the $48,816 contract for the Traveler Redress Web site based on a request for quotes with requirements that only one Web design firm could meet, says the report, released by the House of Representatives Committee on Oversight and Government Reform. The TSA&#39;s technical lead and author of a request for comments for the project was a longtime friend of the owner of Desyne Web Services and had briefly worked for the Virginia firm, the report says.&quot;This redress Web site had multiple security vulnerabilities: It was not hosted on a government domain, its homepage was not encrypted, one of its data submission pages was not encrypted, and its encrypted pages were not properly certified,&quot; the report says. &quot;These deficiencies exposed thousands of American travelers to potential identity theft.&quot;The TSA press office did not immediately respond to a request for comments on the House report. A receptionist at Desyne said the appropriate person for commenting was not available.The redress Web site went live in October 2006, and blogger Christopher Soghoian, a graduate student in informatics at Indiana University, pointed out security problems there last February. The TSA took the Desyne Web site down that month and now hosts a traveler redress form on its own Web site.&quot;This begs the question: Who are these guys, why don&#39;t they know how to use SSL, and how were they awarded this sweet contract?&quot; Soghoian wrote in February 2006. &quot;Why can&#39;t TSA do a simple form submission themselves?&quot;One of the biggest concerns raised by Soghoian and the House report is that the Desyne Web site did not use SSL encryption on its home page or on its submissions page. Travelers were asked to submit personal information, such as their Social Security numbers and birth dates. The site was not hosted on a government domain, meaning visitors &quot;lost any assurance they were visiting a legitimate government Web site,&quot; the House report says.The House report was also critical of Desyne&#39;s &quot;no-bid&quot; contract to operate the redress Web site. Desyne had done work for TSA since 2004, and as of late 2007, it continued to host the TSA&#39;s Web site where travelers could file claims for damaged property. The TSA&#39;s April 2006 request for quotes for the redress site said the design had to be consistent with the claims management site, and it had to be hosted on the same server that hosted the claims management site, the House report says.As of September, Desyne continued to operate Web sites for TSA, and the company has received more than $500,000 in business from the agency since 2004, the report says. &quot;TSA did not take action ... to sanction Desyne for poor performance,&quot; the report says.
434714
Backdoored TD Ameritrade Holding, an online brokerage that manages more than 6.3 million accounts, said hackers broke into a database containing detailed information about clients. While the thieves had access to social security numbers, birth dates and account numbers, Ameritrade said it has no evidence such information was ever retrieved.â¦
184683
A effort by a Seattle company at Black Hat DC to demo a device that easily hacks data from a popular RFID-based ID card system has been met by a patent-infringement claim. Meanwhile, legislators attempt to wrap laws around the security issues.
274739
US telecoms giant AT&T says hackers have stolen the credit card details of almost 20,000 online customers.
560938
Hackers might have obtained the personal information of 6,000 people who worked for, applied to or attended the University of Texas at Dallas, school officials said Wednesday.
623300
About 140 foreign intelligence organizations are trying to hack into the computer networks of the U.S. government and U.S. companies, a top counterintelligence official said.
55275
Hackers broke into one of AT&T  Inc.'s  computer networks and stole credit card data and  other personal information from several thousand customers who  shopped at the telecommunication giant's online store.
431171
A distributed denial-of-service attack that disrupted Web-based systems at credit card payment processing firm Authorize.NetÂ earlier this week is indicative of a sharp increase in the number of cyberattacks being targeted at specific companies and driven by profit motives on the part of the hackers who launch them.