Comments for CyberInsecure.com http://cyberinsecure.com Daily cyber threats and internet security news: network security, online safety and latest security alerts Fri, 16 Mar 2012 11:51:26 +0000 hourly 1 http://wordpress.org/?v= Comment on Geek.com Compromised, Visitors Infected With Malware by N4G http://cyberinsecure.com/geekcom-compromised-visitors-infected-with-malware/#comment-6646 N4G Fri, 16 Mar 2012 11:51:26 +0000 http://cyberinsecure.com/?p=2272#comment-6646 A new version of a well-known family of Mac malware exploits vulnerabilities in Java to steal usernames and passwords for online payment, banking, and credit card websites. A new version of a well-known family of Mac malware exploits vulnerabilities in Java to steal usernames and passwords for online payment, banking, and credit card websites.

]]> Comment on Adobe’s Reader And Flash Installing Software Can Install Malware by CyberInsecure http://cyberinsecure.com/adobes-reader-and-flash-installing-software-can-install-malware/#comment-6611 CyberInsecure Wed, 07 Mar 2012 13:49:46 +0000 http://cyberinsecure.com/?p=1847#comment-6611 Yeah, two things: 1. Do not use Adobe Reader, use Foxit Reader instead (http://www.foxitsoftware.com/Secure_PDF_Reader/). 2. Install Flash updates manually, only by visiting http://get.adobe.com/flashplayer. No automatic pop-ups when Windows starts, no clicking links in emails. Yeah, two things:

1. Do not use Adobe Reader, use Foxit Reader instead (http://www.foxitsoftware.com/Secure_PDF_Reader/).

2. Install Flash updates manually, only by visiting http://get.adobe.com/flashplayer. No automatic pop-ups when Windows starts, no clicking links in emails.

]]> Comment on Sensitive Information Stolen From Arizona Department Of Public Safety, 450 Megabytes Posted Online by Cue http://cyberinsecure.com/sensitive-information-stolen-from-arizona-department-of-public-safety-450-megabytes-posted-online/#comment-6605 Cue Mon, 05 Mar 2012 17:37:11 +0000 http://cyberinsecure.com/?p=2325#comment-6605 This is scary! Great article though! This is scary! Great article though!

]]> Comment on Adobe’s Reader And Flash Installing Software Can Install Malware by james http://cyberinsecure.com/adobes-reader-and-flash-installing-software-can-install-malware/#comment-6541 james Tue, 21 Feb 2012 20:36:39 +0000 http://cyberinsecure.com/?p=1847#comment-6541 I had a machine at work that was struck with a vicious redirect virus. I kept trying to restore back to before the virus, and the only change was that I had an adobe update asking to be installed. I suspected the update was installing the redirect virus. This was in 2011/December. This week, I noticed I was getting a redirect virus on a home computer. This also started happening after an adobe update request appeared. Again, I suspect that the adobe update installed a redirect. This is 2012/February. Of course, I can prove neither, only suspsect. I had a machine at work that was struck with a vicious redirect virus. I kept trying to restore back to before the virus, and the only change was that I had an adobe update asking to be installed. I suspected the update was installing the redirect virus. This was in 2011/December.

This week, I noticed I was getting a redirect virus on a home computer. This also started happening after an adobe update request appeared. Again, I suspect that the adobe update installed a redirect. This is 2012/February.

Of course, I can prove neither, only suspsect.

]]> Comment on Critical Security Vulnerability Patched In Adobe AIR 1.5 by Adlabs http://cyberinsecure.com/critical-security-vulnerability-patched-in-adobe-air-15/#comment-6522 Adlabs Wed, 15 Feb 2012 18:30:38 +0000 http://cyberinsecure.com/?p=690#comment-6522 still exploitable :) still exploitable :)

]]> Comment on Hackers Selling Stolen Credit Cards Lead To Montgomery Ward Parent Company Breach Exposure by Myriam Rodriguez http://cyberinsecure.com/hackers-selling-stolen-credit-cards-lead-to-montgomery-ward-parent-company-breach-exposure/#comment-6349 Myriam Rodriguez Wed, 21 Dec 2011 13:36:06 +0000 http://cyberinsecure.com/hackers-selling-stolen-credit-cards-lead-to-montgomery-ward-parent-company-breach-exposure/#comment-6349 I think I have been part of a lot of people that have been robbed. On october I received an application of a Flexcard Program to fix credit. They offered. Credit Card with $1500 cash, $10,000 unsecured credit and even car loan. You can imagine. There was a security deposit that had to be made with a credit card payable to a Ward Card Co. I am from Puerto Rico but I was willing to fin my credit which I'm doing with Lexinton Law. The Flexcard was suppose to arrive in 15 days (I'm still waiting), the office supposely in Florida, and the phone number: (561)921-2600. Everything is closed and no credit card, no e-mail address, no one answering the phone, the office is currently closed. And no security deposit. It's a shame that at my 63 years old I go thru this situation. That shows that gold can be offerred to me and I don't want it. You can publish this letter so anyone else fall's into the Flexcard Program Fraud. Thank you. I think I have been part of a lot of people that have been robbed. On october I received an application of a Flexcard Program to fix credit. They offered. Credit Card with $1500 cash, $10,000 unsecured credit and even car loan. You can imagine. There was a security deposit that had to be made with a credit card payable to a Ward Card Co. I am from Puerto Rico but I was willing to fin my credit which I’m doing with Lexinton Law. The Flexcard was suppose to arrive in 15 days (I’m still waiting), the office supposely in Florida, and the phone number: (561)921-2600. Everything is closed and no credit card, no e-mail address, no one answering the phone, the office is currently closed. And no security deposit. It’s a shame that at my 63 years old I go thru this situation. That shows that gold can be offerred to me and I don’t want it. You can publish this letter so anyone else fall’s into the Flexcard Program Fraud. Thank you.

]]> Comment on Remote Access Trojan Distributed Through Microsoft Update Catalog by Martin Kicks http://cyberinsecure.com/remote-access-trojan-distributed-through-microsoft-update-catalog/#comment-6310 Martin Kicks Fri, 16 Dec 2011 02:02:18 +0000 http://cyberinsecure.com/?p=2207#comment-6310 I just hope that you simply don`t lose your style because you`re undoubtedly one of the coolest bloggers available. Please maintain it up because the internet wants a person like you spreading the word. I just hope that you simply don`t lose your style because you`re undoubtedly one of the coolest bloggers available. Please maintain it up because the internet wants a person like you spreading the word.

]]> Comment on Critical Security Holes In OpenCart, Multiple osCommerce Websites Infected With Malicious Code by Magen http://cyberinsecure.com/critical-security-holes-in-opencart-multiple-oscommerce-websites-infected-with-malicious-code/#comment-5803 Magen Tue, 25 Oct 2011 12:13:36 +0000 http://cyberinsecure.com/?p=2025#comment-5803 I found this article is really useful for me in my job. Thanks for sharing this useful information. I found this article is really useful for me in my job. Thanks for sharing this useful information.

]]> Comment on Pakistani National Response Center For Cyber Crimes Website Defaced, Hackers Mocked And Accessed Private Data by Pakis http://cyberinsecure.com/pakistani-national-response-center-for-cyber-crimes-website-defaced-hackers-mocked-and-accessed-private-data/#comment-5783 Pakis Sun, 16 Oct 2011 13:17:52 +0000 http://cyberinsecure.com/?p=1752#comment-5783 It has all imperative news so when I interpret this site that I have been very constructive and I think it very obligatory all community. It has all imperative news so when I interpret this site that I have been very constructive and I think it very obligatory all community.

]]> Comment on Twitter DNS Hackers Hit Chinese Search Engine Baidu.com by Nevah http://cyberinsecure.com/twitter-dns-hackers-hit-chinese-search-engine-baiducom/#comment-5755 Nevah Sun, 02 Oct 2011 18:06:59 +0000 http://cyberinsecure.com/?p=1763#comment-5755 You really saved my skin with this information. Thanks! You really saved my skin with this information. Thanks!

]]> Comment on US Government Agencies Travel Reservations Website GovTrip.com Compromised By Hackers by Boxyroom http://cyberinsecure.com/us-government-agencies-travel-reservations-website-govtripcom-compromised-by-hackers/#comment-5723 Boxyroom Fri, 09 Sep 2011 20:18:10 +0000 http://cyberinsecure.com/?p=976#comment-5723 Customers should be extra cautious in making their bookings. Make sure that the online company is legit and safe. Hackers are everywhere so you need to deal with only seasoned and reliable reservation agencies. Customers should be extra cautious in making their bookings. Make sure that the online company is legit and safe. Hackers are everywhere so you need to deal with only seasoned and reliable reservation agencies.

]]> Comment on Hackers Jailbreak T-Mobile’s And Google’s Android Phone by hunter http://cyberinsecure.com/hackers-jailbreak-t-mobiles-and-googles-android-phone/#comment-5715 hunter Fri, 02 Sep 2011 05:04:51 +0000 http://cyberinsecure.com/?p=646#comment-5715 how do you unlock t mobile my touch 4g htc & g3 how do you unlock t mobile my touch 4g htc & g3

]]> Comment on Honda Suffers Data Breach, Personal Information Of 283,000 Customers Exposed by mm http://cyberinsecure.com/honda-suffers-data-breach-personal-information-of-283000-customers-exposed/#comment-5573 mm Tue, 31 May 2011 21:42:35 +0000 http://cyberinsecure.com/?p=2276#comment-5573 As someone who's info was breached...I have NO faith in Honda or in the claim they make in how much and which type of data was taken....especially as this happened in February, discovered in March with notification going out some 10+ weeks later? (letter dated May 13th - received May 25th) Contrary to Honda's very late notifications and press release...ALL info pertaining to my vehicle or myself can be used for fraud purposes and or identity theft. If anyone is aware of a class-action or would like to start one with me...please contact me at: honda.2009.security.breach@gmail.com Thank you As someone who’s info was breached…I have NO faith in Honda or in the claim they make in how much and which type of data was taken….especially as this happened in February, discovered in March with notification going out some 10+ weeks later? (letter dated May 13th – received May 25th)

Contrary to Honda’s very late notifications and press release…ALL info pertaining to my vehicle or myself can be used for fraud purposes and or identity theft.

If anyone is aware of a class-action or would like to start one with me…please contact me at:

honda.2009.security.breach@gmail.com

Thank you

]]> Comment on Sony PlayStation Network Breached, 77 Million Users Private Data Stolen by Stephen Kraushaar http://cyberinsecure.com/sony-playstation-network-breached-77-million-users-private-data-stolen/#comment-5511 Stephen Kraushaar Wed, 27 Apr 2011 20:36:58 +0000 http://cyberinsecure.com/?p=2260#comment-5511 "Less than 1% of the users even care about installing Linux on their PS3." This doesn't matter. They sold the product with the ability and removed it later. That's theft, by any definition you want to come by. I won't make excuses for the CC thieves here, it isn't right. But the fact that Sony hasn't been meeting PCI compliance is a big issue. As a developer, I have to deal with PCI compliance daily. It's costly, but it also makes developers conform to a very good set of security best practices. Sony was cutting corners here, and when GeoHot released what he did, they knew what would happen. It's my professional opinion that they were either storing this data unencrypted, or using the key stored on each PS3 as the encryption key. Handing out copies of your encryption key is in no way PCI compliant. They should have shut service down when they knew there was a problem rather than waiting until it happened. “Less than 1% of the users even care about installing Linux on their PS3.”

This doesn’t matter. They sold the product with the ability and removed it later. That’s theft, by any definition you want to come by. I won’t make excuses for the CC thieves here, it isn’t right. But the fact that Sony hasn’t been meeting PCI compliance is a big issue. As a developer, I have to deal with PCI compliance daily. It’s costly, but it also makes developers conform to a very good set of security best practices. Sony was cutting corners here, and when GeoHot released what he did, they knew what would happen. It’s my professional opinion that they were either storing this data unencrypted, or using the key stored on each PS3 as the encryption key. Handing out copies of your encryption key is in no way PCI compliant. They should have shut service down when they knew there was a problem rather than waiting until it happened.

]]> Comment on Sony PlayStation Network Breached, 77 Million Users Private Data Stolen by LOL @ Yeah whatever http://cyberinsecure.com/sony-playstation-network-breached-77-million-users-private-data-stolen/#comment-5510 LOL @ Yeah whatever Wed, 27 Apr 2011 20:26:10 +0000 http://cyberinsecure.com/?p=2260#comment-5510 Where did you get your 1% figure from? I bet a lot more that 1% want to be able to do more to their system than just installing Linux. We paid for the hardware, why can't we use it the way we want? Come back when you have a decent argument. Where did you get your 1% figure from? I bet a lot more that 1% want to be able to do more to their system than just installing Linux. We paid for the hardware, why can’t we use it the way we want? Come back when you have a decent argument.

]]> Comment on Sony PlayStation Network Breached, 77 Million Users Private Data Stolen by Roberto http://cyberinsecure.com/sony-playstation-network-breached-77-million-users-private-data-stolen/#comment-5509 Roberto Wed, 27 Apr 2011 20:22:34 +0000 http://cyberinsecure.com/?p=2260#comment-5509 \"Less than 1% of the users even care about installing Linux on their PS3.\" -citation needed If my personal information is now compromised due to inadequate handling of my private information by Sony, i would like to get a life-time identity theft protection or a signature awarding me 2 million USD if my identity is stolen during my life time. I will be waiting on my 13,000 USD check (14 USD/month * 12 month/year * 80 years/life). \”Less than 1% of the users even care about installing Linux on their PS3.\” -citation needed

If my personal information is now compromised due to inadequate handling of my private information by Sony, i would like to get a life-time identity theft protection or a signature awarding me 2 million USD if my identity is stolen during my life time.

I will be waiting on my 13,000 USD check (14 USD/month * 12 month/year * 80 years/life).

]]> Comment on Sony PlayStation Network Breached, 77 Million Users Private Data Stolen by Yeah whatever http://cyberinsecure.com/sony-playstation-network-breached-77-million-users-private-data-stolen/#comment-5507 Yeah whatever Wed, 27 Apr 2011 19:30:15 +0000 http://cyberinsecure.com/?p=2260#comment-5507 "and gives no regard to what their users want" Less than 1% of the users even care about installing Linux on their PS3. “and gives no regard to what their users want”

Less than 1% of the users even care about installing Linux on their PS3.

]]> Comment on Sony PlayStation Network Breached, 77 Million Users Private Data Stolen by Ann http://cyberinsecure.com/sony-playstation-network-breached-77-million-users-private-data-stolen/#comment-5504 Ann Wed, 27 Apr 2011 18:45:05 +0000 http://cyberinsecure.com/?p=2260#comment-5504 Does anyone know anything about sending info regarding scams to Sony? A California number has called numerous times today. I don't know anyone in California. After doing a reverse look-up of the number and finding a street address, it's a dumpy looking apartment, so I'm betting it's a scam. I'd love to be able to report the number and street address. Then a number of 229 area codes have also been calling and I can't find anything on them either. Does anyone know anything about sending info regarding scams to Sony? A California number has called numerous times today. I don’t know anyone in California. After doing a reverse look-up of the number and finding a street address, it’s a dumpy looking apartment, so I’m betting it’s a scam. I’d love to be able to report the number and street address. Then a number of 229 area codes have also been calling and I can’t find anything on them either.

]]> Comment on Sony PlayStation Network Breached, 77 Million Users Private Data Stolen by Joe Hula http://cyberinsecure.com/sony-playstation-network-breached-77-million-users-private-data-stolen/#comment-5502 Joe Hula Wed, 27 Apr 2011 17:14:43 +0000 http://cyberinsecure.com/?p=2260#comment-5502 Fantastic. This is great. I like watching Sony get what they deserve. I hope this is costing them millions, if were lucky they'll go bankrupt. Thats what you get when your a mean bully that sues its users and gives no regard to what their users want. Awesome, keep up the good work. Fantastic. This is great. I like watching Sony get what they deserve. I hope this is costing them millions, if were lucky they’ll go bankrupt. Thats what you get when your a mean bully that sues its users and gives no regard to what their users want. Awesome, keep up the good work.

]]> Comment on Sony PlayStation Network Breached, 77 Million Users Private Data Stolen by Frank Earl http://cyberinsecure.com/sony-playstation-network-breached-77-million-users-private-data-stolen/#comment-5501 Frank Earl Wed, 27 Apr 2011 17:11:09 +0000 http://cyberinsecure.com/?p=2260#comment-5501 Well...isn't this just PEACHY. With the other stuff they've pulled within the last 5 or so years, that the CC data isn't in compliance with PCI security standards. I'm wondering just how much damage they're guilty of for this carelessness... Well…isn’t this just PEACHY. With the other stuff they’ve pulled within the last 5 or so years, that the CC data isn’t in compliance with PCI security standards. I’m wondering just how much damage they’re guilty of for this carelessness…

]]>