Security

Two sentenced in Italy for massive phishing operation

One man gets five and a half years in prison, another receives six years

Wabisabilabi sells SAP remote exploit

Attacker could access entire contents of database by taking advantage of vulnerability that affects SAP's MaxDB

DNS attack could signal Phishing 2.0

Only recently have hackers lined up the technology and technique to reap open-recursive DNS servers' weaknesses

Group wants WTO suit against China

California First Amendment Coalition calls on organization to push China to stop Internet censorship

Cenzic virtualizes Web apps testing

Companies wary of the impact of vulnerability scanning on their programs may find relief in Cenzic's virtual scanning, which scans exact replicas of apps

CIA no role model for CIOs

Federal Rules of Civil Procedure don't apply to the CIA, but agency's decision to destroy videotapes may show private companies how not to handle evidence

Facebook partners quiet on Beacon fallout

While some partners have turned off Beacon until Facebook makes more changes, others are reticent to speak on the subject

Intel adds encryption to vPro

Embedded security features, code-named Danbury, make application encryption easier, add new layer of hard drive protection

Amazed at innovation of the bad guys

First Passport, now fraud: ex-MS employee charged

Former Microsoft worker whose error resulted in massive 1999 Hotmail outage also found guilty of billing company for more than $1 million in false expense reports