Citigroup hack exploited easy-to-detect web flaw…apparently

Hackers who stole bank account details for 200,000 Citigroup customers infiltrated the company’s system by exploiting a garden-variety security hole in the company’s website for credit card users, according to a report citing an unnamed security investigator. The New York Times reported that the technique allowed the hackers to leapfrog from account to account on […]

European Council: Creating hacking tools should be criminal across the EU

The making of hacking tools and computer viruses should be a criminal act across Europe, EU ministers have said. The EU’s Council of Ministers has backed the extension of criminal sanctions to tool—makers in response to European Commission plans to update EU laws tackling attacks against computer systems. Responding to European Commission plans to create […]

Video vigilantes in trouble again

Video vigilante service Internet Eyes is in trouble with data protection regulators again. Internet Eyes streams CCTV footage from shops to its network of users who watch the live feeds from their home computer. Keen-eyed ‘noseyparkers’ can then hit an alert button if they spot a shoplifter. This information is then texted back to the […]

House of Commons hit by common theft

The House of Commons’ perennial theft problem has become increasingly high tech, with sporadic thefts of computers in recent years turning into a veritable run on laptops, according to the latest figures. In a Commons answer last week, John Thurso detailed cases of theft on the Commons Estate over the last five years, for the […]

Anonymous serves notice on the Federal Reserve

Infamous hacktivist collective Anonymous has served notice that it intends to attack the websites of the Federal Reserve. The campaign – likely to take the form of denial of service attacks and possibly sit-ins – is in protest at the Federal Reserve’s role in the global financial crisis, misuse of US taxpayer funds and supposed […]

LulzSec targets US Senate

Hacker tricksters LulzSec is baiting US lawmakers with its latest attack on the US Senate. The hacking group posted what security experts Sophos characterised as “basic information on the filesystems, user logins and the Apache web server config files” of the Senate website on Wednesday morning. The group also posted a directory listing in a […]

Metro Bank – School boy error for new kid on the block

Metro Bank, the newly established UK retail bank, has irked its customers with a schoolboy email error. The latest marketing missive from the bank was sent using all the email addresses in to To: field instead of using the bcc (blind carbon copy) field. In the process, the bank disclosed the email addresses of around […]

LulzSec targets CIA.gov

LulzSec, the hacking and prankster collective that has attacked the US Senate, Sony, and the Fox and PBS television networks, has struck again, claiming it was behind an assault that took down the website for the Central Intelligence Agency. Attempts to access cia.gov on Wednesday afternoon were met with only limited success. LulzSec claimed responsibility […]