A prominent information security expert said Tuesday that concerns about the recent Epsilon email hacking incident are misplaced. Bruce Schneier, author of the online Crypto-Gram newsletter, said there's little risk that the alleged theft of millions of email addresses will result in widespread fraud.. "It's why it seems implausible to me that this was an attack by actual criminals because it's not terribly useful stuff they stole, if indeed they stole anything," he said. Schneier said credit card users need to be on the alert for unusual activity or emails, regardless of whether there's a reported security breach. "If you know there's fraudulent transaction going on on your credit card, then you should definitely deal with it," he said. "Until then, it's all going to be panic and worry without cause." The link for this article located at MPR is no longer available. . Specialist indicates worries over the Sigma data breach are inflated, highlighting the minimal likelihood of financial deception.. Email Breach,Hacking Concerns,Fraud Alerts,Web Security Risks,Internet Security Advice. . LinuxSecurity.com Team
Criminals are reportedly using a new phishing technique that allows them to bypass the fraud warnings issued by modern browsers such as Firefox and Chrome. On its blog, security firm M86Security reports that the trick involves attaching an HTML document instead of sending a link. It remains unclear how many users have become victims so far.. Email recipients opening the HTML document in their browsers are, for example, presented with a bogus PayPal form with the usual request to enter their access data due to alleged security issues. As the form is being processed locally on the user's computer, the phishing filter doesn't issue a warning because it only filters external URLs. A click on the "Submit" button then transmits the entered data to a PHP script on a (hacked) server using a POST request. According to M86Security, the browser doesn't warn about this either. The link for this article located at H Security is no longer available. . Email recipients opening the HTML document in their browsers are, for example, presented with a bogu. criminals, reportedly, using, phishing, technique, allows, bypass, fraud, warning. . LinuxSecurity.com Team
Electronic voting machines will be vulnerable to fraud this election season unless countermeasures are taken, according to a report issued last week by the New York University School of Law. E-voting devices, such as touch-screen or optical scan systems, are becoming more prevalent nationwide, and most of them are vulnerable to external attack, according to the report compiled by the school's Brennan Center for Justice. . he report was prepared over an 18-month period by computer scientists and voting machine experts working on a task force set up by the Brennan Center to examine voting system security. Larry Norden, chairman of the task force and an attorney at the Brennan Center, said that over the past several years, half of all manual voting systems in the U.S. have been replaced with electronic devices. Elections officials cite the need to meet the requirements of various federal laws and the need for improved accuracy in installing the systems. However, Norden said, "we've not necessarily adapted our [security] procedures to that new technology." The report cites some 120 potential threats to e-voting systems and notes that most states have no system in place to detect malicious software attacks. The link for this article located at ComputerWorld is no longer available. . Digital ballot systems encounter risks of manipulation during this electoral period, necessitating immediate protective strategies and safeguards.. Electronic Voting,Election Security,Voting Systems,Fraud Risks,Security Measures. . Brittany Day
The UK government has come out with yet another questionable study to support its obsessive bent to impose ID cards on the British public. Once again, ID fraud figures as the reason why Brits need expensive biometric proofs of identity. . A Home Office study claims ID fraud costs Britain £1.7bn. But most of these losses have either been overstated or represent nothing to do with ID fraud, an investigation by Silicon.com has discovered. The link for this article located at TheRegister.co.uk is no longer available. . Recent analysis by the Home Office reveals that identity theft costs the UK £1.7 billion, though this figure seems inflated or connected to other issues, causing doubt. Biometric Identification,ID Fraud Study,UK Home Office,Biometric Proofs. . LinuxSecurity.com Team
The report, from the General Accounting Office, the non-partisan investigative arm of Congress, gave the federal government a grade of D- for the way it places "a broad array of federal operations and assets at risk of fraud, misuse and disruption." . . . . The report, from the General Accounting Office, the non-partisan investigative arm of Congress, gave the federal government a grade of D- for the way it places "a broad array of federal operations and assets at risk of fraud, misuse and disruption." Departments from Defense to Treasury have committed flagrant computer security violations, the report said. The link for this article located at Fox News is no longer available. . The audit revealed troubling deficiencies, leading to a poor grade for the national administration concerning measures against deception and abuse.. Federal Security Report, Government Cybersecurity, GAO Assessment. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.