Stories by Lucian Constantin

NSA reportedly compromised more than 50,000 networks worldwide

The U.S. National Security Agency reportedly hacked into over 50,000 computer networks around the world as part of its global intelligence gathering efforts, and also taps into large fiber optic cables that transport Internet traffic between continents at 20 different major points.

LG smart TVs share data about users' files and viewing habits with the company

Smart TVs manufactured by LG Electronics are sending information about users' viewing habits and files back to the company's servers. The company confirmed the behavior and said it plans to release firmware updates to correct it.

Cybercrime forum advertises financial malware that uses stealthy I2P communications

A new financial malware program that communicates with attackers over the I2P (Invisible Internet Project) anonymity network is for sale on a Russian cybercrime forum.

Trojan program steals log-in credentials, other sensitive data from SAP client applications

A recently discovered malicious program steals log-in passwords and other sensitive information from SAP client applications and allows cybercriminals to access SAP servers from infected workstations.

GitHub bans weak passwords after brute-force attack results in compromised accounts

Popular source code repository service GitHub has recently been hit by a brute-force password-guessing attack that successfully compromised some accounts.

Hackers reportedly stole 42 million customer records from online dating network Cupid Media

Hackers reportedly stole 42 million customer records including email addresses and clear-text passwords from Cupid Media, a network of dating websites.

Google strengthens its SSL configuration against possible attacks

Google replaced the SSL certificates for its online services with new ones that use stronger, 2048-bit RSA keys, making encrypted connections to its sites safer against so-called brute-force attacks.

Attackers used known exploit to steal customer log-in credentials, vBulletin maker says

The vBulletin.com forum was not compromised by exploiting a previously unknown vulnerability as a group of hackers claimed, according to vBulletin Solutions, the company that develops the popular Internet forum software.

Hackers actively exploiting JBoss vulnerability to compromise servers, researchers say

Attackers are actively exploiting a known vulnerability to compromise JBoss Java EE application servers that expose the HTTP Invoker service to the Internet in an insecure manner.

British spies reportedly monitor hotel bookings of diplomats around the world

The U.K.'s intelligence agency Government Communications Headquarters (GCHQ) has reportedly built an automated system to track the hotel bookings of foreign diplomats when travelling abroad for international summits or work meetings.

Hackers claim they used zero-day vulnerability to breach vBulletin support forum

A group of hackers claim to have exploited an undocumented vulnerability in the vBulletin Internet forum software in order to break into the MacRumors.com and vBulletin.com forums.

Google fixes Chrome vulnerabilities exploited at Pwn2Own contest

Google released emergency security updates for Chrome in order to patch critical vulnerabilities demonstrated Thursday by a security researcher at the Mobile Pwn2Own hacking competition.

Researchers hack Internet Explorer 11 and Chrome at Mobile Pwn2Own

Security researchers have compromised Microsoft Surface RT, Nexus 4 and Samsung Galaxy S4 devices by exploiting previously unknown vulnerabilities in Internet Explorer 11 running on Windows 8.1 and Google Chrome running on Android.

Cybercriminals target Silverlight users with new exploit kit

The creators of a Web-based attack tool called Angler Exploit Kit have added an exploit for a known vulnerability in Microsoft's Silverlight browser plug-in to the tool's arsenal.

Google says users deserve to know more about surge in gov't data requests

The number of government requests for user information received by Google has doubled since 2010, not including requests made under the U.S. Foreign Intelligence Surveillance Act, which the company is not allowed to disclose.

CIO
ARN
Techworld
CMO