MasterCard, VISA Warn of Processor Breach – 10,000,000 credit cards potentially compromised

VISA and MasterCard are alerting banks across the country about a recent major breach at a U.S.-based credit card processor. Sources in the financial sector are calling the breach “massive,” and say it may involve more than 10 million compromised card numbers. Update, 4:32 p.m. ET: Atlanta-based processor Global Payments just confirmed that they discovered a breach in early March 2012. […]

2012 Data Breach Investigation’s Report Released

It’s hard to believe, but it’s time again for another installment of Verizon’s annual Data Breach Investigations Report. This year’s report represents our largest dataset ever, with 855 confirmed security breaches accounting for a combined 174 million compromised records. As always, we analyze the data and attempt to explain what happened, who did it and […]

Cyber Security Challenge UK announces first finalists

  Sophos HQ in Abingdon on Saturday 14th January was the scene for the first face-to-face encounter in this year’s Cyber Security Challenge UK. Thirty talented candidates from across the UK battled in a malware hunt which exposed them to some of the criminal world’s nastiest pieces of malicious code, housed within the Sophos vaults.

I don’t know where it’s from or who’s behind it…

I don’t know where it’s from or who’s behind it…CanYouCrackIt.co.uk?     Following our earlier article on ForHacSec.com about the online game CanYouCrackIt.co.uk a video has been uplaoded to YouTube about the challenge. “This code – I don’t know where it’s from or who’s behind it – I don’t know much to be honest I […]

Open Tabs – Intro

I have been having less and less time lately to post things on ForHacSec.com which led me to write the recent post ‘Not enough hours in the day’ and has been causing me to feel a little guilty. So I have decided to borrow an idea from Martin McKeay of at McKeay.net. As I’m on […]

UK banking goes tits-up this week…coincidence?

There has been an unusual amount of banking downtime this week in the UK. Firstly with HSBC ATM and point of sale terminals being affected. preventing their customers with-drawing cash from ATM’s and making debit card transactions at the till and online. Followed swiftly by Natwest and Royal Bank of Scotland (RBS) following apparent ‘planned […]

Pen-Test Game

The ForHacSec.com team have recently come across the Can You Crack It? game for those interested in the security arena particularly around Hacking, Pen-Testing and Coding. So we thought we’d share it with you and see what results you get. It’s an interesting game and is designed to test the skills of a would be […]

Multi-Function Devices – Will they comply…?

Okay, so you did a Penetration Test and all you found was an insecure printer right? The fun things that you can find on Multi-function Printing devices and how it might affect compliance… Printers, scanners, copiers, and fax machines have become more and more complex over the years. I find that this is largely due to a […]

Book Review – BackTrack 5 Wireless Penetration Testing Beginner’s Guide

If you want an easy to follow, step by step guide to analyzing and testing Wi-Fi security, look no further than Vivek Ramachandran’s “BackTrack 5 Wireless Penetration Testing Beginner’s Guide“. The author guides you on a path from the basic principles of Wi-Fi to advanced monitoring and attacks. Vivek starts you out by preparing your […]

Security Assessments You’ve Never Had – But Should…

You are probably familiar with the classic security assessments:  internal and external penetration testing, security risk assessments, and PCI gap assessments.  You may not be as familiar with, or even aware of, other assessments that may be just as valuable for strengthening your security program.  Some of these less familiar assessments are new, the result […]