Feeds

Tyneside police website defaced, used to serve phish

Tunisian conflict spills over into Newcastle

Combat fraud and increase customer satisfaction

Northumbria Police Authority woke up to a host of security problems after the August bank holiday weekend.

Not only was the UK police regulation authority defaced by a foul-mouthed Tunisian hacker, who made reference to the Anonymous hacking collective, but the law-enforcement authority was placed in the more serious position of playing host to a PayPal phishing page.

The defacement stated: "The Northumbria Police Authority website was hacked by lamine Foued ( Dr.F0u3D). F*ck You admin. Freedom For T.H.T Anonymous Tunisia :D."

As GFI Software notes, even after the defacement had been cleaned up, Northumbria Police Authority's server was still being used to host a PayPal phishing page. Low-level crooks behind this type of scam often use resources on legitimate servers. The incident is nonetheless more than a little embarrassing for the police authority, a civilian body that oversees the activities of local police in the area around Newcastle upon Tyne.

Chris Boyd of GFI Software has reported the PayPal phish to police-service web admins, who would be well advised to give the site a once-over for any further (as yet unidentified) problems. The incident illustrates that as well as opening the door to digital graffiti artists, website vulnerabilities also create a means for miscreants to mount more troublesome attacks. ®

SANS - Survey on application security programs

Whitepapers

Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.