Latest news

It followed up with a statement saying that at this time there is no evidence indicating that an FBI laptop was compromised or that the FBI either sought or obtained this data.
The hackers published a redacted list of one million UDIDs, Apple Push Notification Service DevTokens, device names and device types in order to prove that the list exists, and according to some security experts such as e-crime specialist with CSIS Security Group Peter Kruse, who went through the trouble of verifying if their devices are on the list, it contains accurate information.
With that question seemingly answered, more important ones arise. Have the hackers really found it on an FBI computer? There is no concrete evidence that proves they did.
An agent named Christopher K. Stangl does work for the Regional Cyber Action Team and the New York FBI office’s Evidence Response Team, but that information could have been easily discovered by the hackers in some other way that doesn't include hacking his computer.
And the name of the downloaded document - NCFTA_iOS_devices_intel.csv - could point to the National Cyber Forensics and Training Alliance, a non-profit corporation backed by the FBI (among others), but that also doesn't prove anything.
As many Internet users have already pointed out, it was to be expected that the FBI would deny having anything to do with this list, and it will be hard to prove otherwise.
Still, the hackers have accomplished their goal by making users wonder about it all - and getting Gawker's Adrian Chen in a ballet tutu.


Spotlight

The security of WordPress plugins
Posted on 18 June 2013. | Checkmarx’s research lab identified that more than 20% of the 50 most popular WordPress plugins are vulnerable to common Web attacks, such as SQL Injection.

Information security executives need to be strategic thinkers
Posted on 17 June 2013. | George Baker, the Director of Information Security at Exostar, talks about the challenges in working in a dynamic threat landscape, offers tips for aspiring infosec leaders, and more.

Large orgs in denial about own security breaches?
Posted on 14 June 2013. | Over two thirds (66%) of large organizations said they either had not experienced a security incident in the last 12-18 months or were unsure if they had.

Vulnerability scanning with PureCloud
Posted on 12 June 2013. | nCircle PureCloud is a cloud-based network security scanning product built upon the companies' vulnerability and risk management system IP360.

Reactions from the security community to the NSA spying scandal
Posted on 11 June 2013. | Read on for comments on this scandal that Help Net Security received from a variety of security professionals and analysts.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.







