Security Bytes:

May, 2011

1

May 31, 2011  3:24 PM

Sony breach timeline shows missteps, says security firm



Posted by: Robert Westervelt
Data Breaches and Identity Theft, data security, data security breach

Sony has spent $171 million cleaning up its massive data breach. One security firm outlines mistakes.

Bookmark and Share     0 Comments     RSS Feed     Email a friend

May 27, 2011  1:27 PM

Google Wallet gains interest from security researchers



Posted by: Robert Westervelt
mobile applications, mobile security, PCI compliance

Google’s NFC service will be thoroughly vetted for vulnerabilities, access for cybercriminals. Cloning may be possible.


May 20, 2011  1:14 PM

Symantec to acquire Clearwell for its eDiscovery processing platform



Posted by: Robert Westervelt
eDiscovery, security acquisitions, Security Vendor News, Symantec

Acquisition of Clearwell Systems Inc. bolsters Symantec's eDiscovery capabilities in a crowded market for software that helps contain civil litigation costs.

Symantec Corp. has agreed to acquire privately-held data achiving and...


May 17, 2011  1:43 PM

Facebook scam prompts call for more social networking safeguards



Posted by: ITKE

Scammers are spreading phishing attacks and other scams on Facebook and other social networks.

By Ryan Cloutier, Contributor

Facebook scammers began spreading a cross-site scripting attack last...


May 16, 2011  2:59 PM

Report: Sony breach started with attack from Amazon EC2



Posted by: Robert Westervelt
Data Breaches and Identity Theft, Sony PlayStation Network breach

An attacker rented space on Amazon’s EC2 service to wage cyber attacks on Sony Corp., according to a report.

Sony restarted its PlayStation Network and Qriocity services over the weekend and investigators have reportedly traced the attack to servers...


May 10, 2011  1:38 PM

VUPEN outs sandboxing weaknesses in Google Chrome attack



Posted by: Robert Westervelt
Application Security, browser vulnerabilities, security research

The French security firm exploited a Google Chrome vulnerability, bypassing its sandboxing security feature and ASLR and DEP capabilties. Google Chrome’s sandboxing security technology, designed to keep malicious code from infiltrating system processes has...


1