hacker

Yahoo gives all clear after hack attack

This doesn't rate up there with "Resumegate," but when it comes to Yahoo, the fun never ends. The company finally gave the all clear this morning in the aftermath of a massive password leak that exposed more than 450,000 Yahoo log-in credentials.

The company says it has since deployed "additional security measures" and "enhanced our underlying security controls" as it goes about notifying affected users.

From Yahoo's latest missive:

Yahoo recently confirmed that an older file containing approximately 450,000 e-mail addresses and passwords was compromised. The compromised information was provided … Read more

Hackers post 450K credentials pilfered from Yahoo

Yahoo has been the victim of a security breach that yielded hundreds of thousands of login credentials stored in plain text.

The hacked data, posted to the hacker site D33D Company, contained more than 453,000 login credentials and appears to have originated from the Web pioneer's network. The hackers, who said they used a union-based SQL injection technique to penetrate the Yahoo subdomain, intended the data dump to be a "wake-up call."

"We hope that the parties responsible for managing the security of this subdomain will take this as a wake-up call, and not as … Read more

Defense expert to U.S.: Hire hackers and wage cyberwar

A top defense and cybersecurity expert says the U.S. should stop trying to take aim at expert hackers and start doing a better job of recruiting them.

"Let's just say that in some places you find guys with body piercings and nonregulation haircuts," U.S. Naval Postgraduate School professor John Arquilla said in an interview with The Guardian published today. "But most of these sorts of guys can't be vetted in the traditional way. We need a new institutional culture that allows us to reach out to them."

Arquilla argues that there are … Read more

FBI kills DNSChanger network, but how many will be affected?

The FBI today made good on its promise to take down its DNSChanger network. But people who ignored warnings may find themselves unable to get online.

At 12:01 a.m. EDT today, the FBI shut down the DNS servers that had kept computers infected by the DNSChanger malware still able to connect to the Internet, according to the Washington Post.

About five years, a group of hackers who deployed the DNSChanger malware, which modified the DNS settings of infected computers to point to rogue servers. After catching the criminal gang and taking controls of the servers, the FBI converted … Read more

The dark side of QR codes

There's a pretty good chance you've scanned a QR code with your smartphone. QR is short for "quick response." Hidden in those lines are embedded code only your smartphone can read that points it to a new location on the Web. Online marketing gurus are singing the digital praises for the inexpensive cost with maximum return on investment.

The real estate industry is one example. Agents are able to market their hottest properties and themselves by embedding QR codes into their signs and brochures. QR design companies say they're seeing exponential growth in their business … Read more

Hacking settlement to cost Stratfor $1.75 million

Stratfor has agreed to settle a class-action lawsuit filed against the global intelligence firm after hackers affiliated with Anonymous stole subscriber data from its computers last year, Reuters reported today.

The settlement -- which calls for Stratfor to offer subscribers one month of free access to its service, a digital version of a book, and credit-monitoring service, in addition to paying attorney fees -- is expected to cost the company about $1.75 million, according to the settlement given preliminary approval by Judge Denis Hurley in U.S. federal court in New York.

Stratfor does not admit any "wrongdoing, … Read more

Latest hacker dump looks like Comcast, AT&T data

A group of hackers has posted to the Web today data that appears to include Comcast employee names, ages and salaries, as well as e-mails and passwords associated with AT&T VoIP service accounts.

Proclaiming the kickoff of "#WikiBoatWednesday...when all the members from @TheWikiBoat fight corruption, leak data, and bring down websites," the hackers released the data in two different posts to the Pastebin Web site. Several of the Twitter handles used by the group, including @AnonymousWiki, referenced the Anonymous online activist group, but the connection to the larger, decentralized collective is unclear.

"The first … Read more

Two hackers plead guilty to LulzSec attacks on Web sites

Two British men pleaded guilty today to conspiracy charges related to a spree of attacks on U.S. and U.K. government and corporate Web sites by the LulzSec hacking group last year.

Ryan Cleary, 20, and Jake Davis, a 19-year-old who used the hacker handle "Topiary," admitted to launching distributed denial-of-service (DDoS) attacks on Web sites including Sony, Nintendo, News International, Arizona State Police, HBGary Federal and PBS, according to The Telegraph.

Cleary pleaded guilty to four additional charges, including hacking into U.S. Air Force computers at the Pentagon. He was indicted by a U.S. federal grand juryRead more

Hackers grab customer data, demand cash from payday lender

Hackers have released consumer data stolen from an online loan provider, after the company refused to pay an extortion fee.

"On June 12, AmeriCash Advance received a fax, telling us that part of our Web site had been hacked. The letter went on to demand initial payment of $15,000 from us," AmeriCash Advance, an online payday cash advance provider, said in a statement provided to CNET. "We immediately notified the appropriate authorities and promptly took steps to ensure that no other data could be accessed. We will not cave in to blackmail, and are cooperating fully … Read more

Hacker claims breach of 79 banks, releases customer data

A hacker claiming to have broken into networks of dozens of banks and stolen customer data, has released as proof a file that contains names, addresses, e-mail addresses, and phone numbers in plain text, but no credit card numbers.

"I penetrated over 79 large banks, I've been targetting these banks since 3 months," read a tweet from the Twitter account of Reckz0r. "Actually, I didn't hacked VISA & Mastercard, I hacked the banks, #Chase..etc."

A Pastebin post from today has a link to a downloadable file on the AnonFiles.com site that appears … Read more