“Weaponized” exploit can steal sensitive user data on eBay, Tumblr, et al.

Tuesday, July 8th, 2014

A serious attack involving a widely used Web communication format is exposing millions of end users' authentication credentials on sites including eBay, Tumblr, and Instagram, a well-respected security researcher said Tuesday. The exploit—which stems from the ease of embedding malicious commands into Adobe Flash files before they're executed—has been largely mitigated ...

Windows XP users left high and dry as Oracle ends Java support

Friday, July 4th, 2014

Windows XP hold-outs pay attention. If you run the Java runtime on XP, it looks as if the current version is about as good as it gets. The next version, 7u65 and 8u11, due to ship in the middle of July, will not support or run on XP. Oracle hasn’t announced ...

Breaches exposed 1 in 7 US debit cards in 2013

Thursday, July 3rd, 2014

Data breaches at retailers and financial services companies exposed 14 percent of all U.S. debit cards in 2013, according to a nationwide survey by a major ATM network operator. The figure is three times that of 2012 and comes as consumers are using debit cards to make more purchases than ever ...

Serious Android crypto key theft vulnerability affects 86% of devices

Saturday, June 28th, 2014

Researchers have warned of a vulnerability present on an estimated 86 percent of Android phones that may allow attackers to obtain highly sensitive credentials, including cryptographic keys for some banking services and virtual private networks, and PINs or patterns used to unlock vulnerable devices. The vulnerability resides in the Android KeyStore, ...

US House passes an amendment which would remove funding from the NSA’s backdoor searches

Friday, June 20th, 2014

The United States House of Representatives voted in favor today of an amendment which would cut funding to the NSA's controversial "backdoor search" programs, which critics have long bemoaned as unconstitutional and even illegal. The amendment, co-sponsored by reps Zoe Lofgren and Thomas Massie, sought to change a provision in the 2015 Defense ...