Home / Blog / Archives for Android Forensics
 January 19th, 2012 by lhaas
We’ve been preaching for years that organizations needs to take a more proactive approach to their security. Services, such as our liveForensics, add additional layers of security to protect against such breaches.
Unfortunately, the Postbank’s fraud detection system hasn’t performed as it should, and the crime was discovered only after everyone returned to [...]
 November 14th, 2011 by lhaas
Closing out a two-year investigation, U.S. law enforcement has reportedly shut down a huge Internet fraud scheme centered in Estonia that it says “injected malware in more than four million computers in over 100 countries while generating $14 million in illegitimate income.” Infected computers include over 500,000 U.S. computers, including some belonging to [...]
 September 28th, 2011 by lhaas
Andrew Hoog says old first aid answers to cyber warfare need to be replaced with agressive, pro-active forensics.
In this brief article, Andrew stresses the need for proactive security, something that viaForensics has been working on for several years. We have taken our expertise in computer forensics and applied that to security. Our [...]
 September 26th, 2011 by lhaas
Three new bills strengthening data breach security notification regulations bring us a step closer to Federal standards. The bills (1) require businesses to develop data privacy and security plans; (2) set a federal standard for notifying individuals of breaches of sensitive personally identifiable information; and (3) focus the Computer Fraud and Abuse Act statute more narrowly on [...]
 September 12th, 2011 by lhaas
A medical privacy breach led to the public posting on a commercial Web site of data for 20,000 emergency room patients at Stanford Hospital in Palo Alto, Calif., including names and diagnosis codes, the hospital has confirmed. The information stayed online for nearly a year.
via Patient Data Posted Online in Major Breach of [...]
 September 1st, 2011 by lhaas
On July 19th 2011, DigiNotar detected an intrusion into its Certificate Authority (CA) infrastructure, which resulted in the fraudulent issuance of public key certificate requests for a number of domains, including Google.com.
Once it detected the intrusion, DigiNotar has acted in accordance with all relevant rules and procedures. At that time, an external [...]
 August 4th, 2011 by lhaas
Charlie Miller of Accuvant Labs responds to a question on the Defenders Dilemma:
I have to say, things are a bit bleak when you put it that way. There will always be vulnerabilities and there will always be criminals, so it’s hard to figure the way out. Especially as end users there is [...]
 June 30th, 2011 by lhaas
Consumers and security experts worried hackers motivated by either criminal or political-activist intentions will breach their security and steal databases of customer-account information needn’t worry, following an incident at Groupon’s Indian subsidiary.
The customer database of Groupon subsidiary SoSasta was published unsecured and unencrypted on the company’s site for long enough to be [...]
 June 27th, 2011 by lhaas
1 comment', '  % comments', ''.7 million">
Citigroup suffered about US$2.7 million in losses after hackers found a way to steal credit card numbers from its website and post fraudulent charges.
Citi acknowledged the breach earlier this month, saying hackers had accessed more than 360,000 Citi credit card accounts of U.S. customers. The hackers didn’t get into Citi’s main credit [...]
 June 22nd, 2011 by lhaas
Secrets of the sophisticated cyber criminals behind the Citigroup hack revealed:
They simply logged on to the part of the group’s site reserved for credit card customers – and substituted their account numbers which appeared in the browser’s address bar with other numbers.
It allowed them to leapfrog into the accounts of [...]
|
|