Cafe Latte attack steals credentials from Wi-Fi clients
89324
Would you like a corporate login with that espresso? Hackers have refined a new technique for breaking into Wi-Fi networks protected by the aging (and increasingly misnamed) Wireless Equivalent Protocol.â¦
130232
Mama weer all leeches now One in three mobile workers worldwide routinely hijack wireless connections, according to a survey commissioned by the US National Cyber Security Alliance (NCSA) and Cisco.â¦
565372
(InfoWorld) - The fast growth in wireless Internet use throughout Asia leaves users vulnerable to data theft over unsecured networks and lost or stolen mobile devices, a security expert warned Tuesday. Citrix Systems Inc. Chief Security Officer Kurt Roemer said during an interview that trends in Asia suggest increasing vulnerability as time goes on because wireless use is growing much faster than fixed-line use in many countries. Japan, for example, is a global leader in developing 3G (third-generation) mobile networks and applications, which is increasing demand for smarter phones that can handle more data and computing work -- the kind that increases the likelihood of stolen data. Taiwan is another example. At one point, there were more mobile phone accounts than people on the island, and the propensity to live wirelessly has prompted the government to implement a plan to ensure wireless Internet access via Wi-Fi and WiMax networks islandwide over the next few years. And in developing countries such as China and India, there are more wireless networks going up than fixed-line networks, a danger because fixed-line networks are easier to secure. As mobile applications increase, and people use mobile networks more and more often to log onto the Internet for work and play, Roemer sees the danger of users failing to protect themselves. He reckons the smartest solution for companies and Internet service providers is to take proactive steps to protect users, and keep user tasks simple. Wi-Fi helped popularize the idea of taking a laptop to the coffee shop, or using one in an airport on wireless networks that might not be secured, while WiMax, the wireless standard to follow Wi-Fi, will likely increase such activity. Mobile telecommunications network operators are also offering more high speed Internet connection options for Internet users, such as HSDPA (High-Speed Downlink Packet Access). Workers in the field trying to send data back or access sensitive company data need security they can handle without too many time consuming tasks and protocols. "The more you make your users have to think about it, the worse it gets," he said. Citrix, Fortinet, Foundry Networks, and other companies sell software that helps secure company networks no matter where a user logs on. And there are varying levels of security, depending on how much access different users need to company data, as well as for other considerations, such as complexity and cost. The dangers for IT managers are only going to grow, due to the quick expansion of wireless networks and devices worldwide, he said. Mobile devices themselves are also cause for security concern. Hard drive memory space is growing so fast that users can keep an awful lot of sensitive information on one device, he said. Losing such a machine, or having it stolen can really create problems. One way for companies to secure devices is by removing hard drives from the equation, he said. IT managers can buy thin client notebook PCs, for example, that store data on a server back at company headquarters instead of offering workers laptops with huge hard drives. Roemer suggested Neoware as one company with a strong line of thin client products.ADVERTISEMENTNEW IT SERVICES FROM IBM: EASIER TO BUY AND IMPLEMENTDiscover a simpler, more cost-effective way to get the solutions your company needs to grow more flexible and efficient.
723078
Security company says it has seen an attack using a cross-site scripting flaw in 2Wire DNS routers.
365302
People sniffing wireless network traffic have many tools at their disposal to intercept sensitive data from PCs.
114037
An old-style SQL injection hack is the suspected culprit in a malicious attack on the RIAA's Web site. During the weekend, its framework was still going, though its content had been erased.
599688
Letters And cheap tinsel worries wifi fans
176286
Servers that managed global internet traffic have been subjected to a concerted attack by hackers.
316177
An attack combining malicious codes on Web sites and end-user laziness could compromise millions of routers still configured with their out-of-the-box defaults.
649966
Wireless Forensics: Tapping the Air - Part Two &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
193519
Pulling the plug Cut-rate internet host UK2.net has become the subject of a hacking attack, leaving customers temporarily unable to access their email.â¦
118934
By Anonymous  WAN lessons learned  Plus: How to hide your online footprints.
482931
Asia's seen rapid growth in wireless Internet use recently, but unsecured Wi-Fi networks and lost or stolen mobile devices leave users vulnerable to a rising tide of data thefts and other attacks according to Citrix CSO Kurt Roemer.
366824
Preston Gralla provides step-by-step instructions to guard against bad guys trying to hack in to your home or office Wi-Fi network.
198606
A US credit card processing firm has been hit by intermittend and large-scale distributed denial-of-service attacks that have disrupted services.
758956
Hole could allow remote attackers to access your local search results.
153432
rPath linux has issued an update to their packages for PHP, PHP-MySQL and PHP-PGSql to correct issues that could make it possible for a remote user to gain unauthorized access.   his fixes some vulnerabilities, where some have unknown impacts and others can be exploited by malicious users to bypass certain security restrictions or by malicious people to potentially compromise a vulnerable system.   References and links to the update information can be found in their original advisory.