Top 10 Stories

  Reuters: Internet service providers must turn over customer emails and other digital content sought by U.S. government search warrants even when the information is stored overseas, a federal judge ruled on Friday. In what appears to be the first court decision addressing the issue, U.S. Magistrate Judge James Francis in New York said Internet service providers such as Microsoft Corp orGoogle Inc cannot refuse to turn over customer information and emails stored in other countries when issued...

Register: Tech's biggest names have vowed to pour cash into crucial open-source projects that glue the web together – and hopefully kill off any dire bugs that could wreck the net. The Linux Foundation announced on Thursday that it had formed "The Core Infrastructure Initiative" to fund open projects that are critical to the functioning of the internet.  

  Linux Foundation: The Linux Foundation today announced it has formed a new project to fund and support critical elements of the global information infrastructure. The Core Infrastructure Initiative enables technology companies to collaboratively identify and fund open source projects that are in need of assistance, while allowing the developers to continue their work under the community norms that have made open source so successful. Founding backers of the Initiative include Amazon Web Services, Cisco,...

Dark Reading: Many employees still don't take BYOD security seriously, a new survey shows: Nearly 45% have accessed sensitive corporate data on their personal devices via unsecured networks, such as those at airports or coffee shops. This is happening at a time when the bring-your-own device (BYOD) explosion is well under way. Some 45% of employees on average have more than six third-party apps installed on their personal mobile devices, and 15% admit to having...

Reuters: The FBI has warned healthcare providers their cybersecurity systems are lax compared to other sectors, making them vulnerable to attacks by hackers searching for Americans' personal medical records and health insurance data. Health data is far more valuable to hackers on the black market than credit card numbers because it tends to contain details that can be used to access bank accounts or obtain prescriptions for controlled substances.  

  Tripwire: Anonymous hacktivist Hector Xavier Monsegur, more commonly known by his handle Sabu, is thought to have directed multiple attacks against foreign targets while acting as an informant for the Federal Bureau of Investigation, according to reports based on redacted federal court testimony. Monsegur, who was arrested in 2011 for his malicious hacking activities but not yet convicted, has been a confidential informant for the FBI for several years, and is believed to have...

  Symantec: Symantec has recently detected phishing emails related to the Heartbleed Bug. The phisher attempts to gather information by posing as a US military insurance service with a message about the Heartbleed bug. The Heartbleed bug is a recently discovered security vulnerability affecting OpenSSL versions 1.0.1 to 1.0.1f. This vulnerability was fixed in OpenSSL 1.0.1g. Symantec’s security advisory gives more details on the bug and offers remediation steps.  

BBC: The leader of an internet gang which stole £1.25m from banks has been jailed for five-and-a-half years. Tony Colston-Hayter, 48, led the gang which used a "Trojan horse" device to hijack computers at branches of Barclays and Santander.  

Arstechnica: The important role OpenSSL plays in securing the Internet has never been matched by the financial resources devoted to maintaining it. The open source cryptographic software library secures hundreds of thousands of Web servers and many products sold by multi-billion-dollar companies, but it operates on a shoestring budget. OpenSSL Software Foundation President Steve Marquess wrote in a blog post last week that OpenSSL typically receives about $2,000 in donations a year and has just one employee who works full...

SC Magazine: A fairly well-known hacktivist allegedly went public with information on how Facebook is vulnerable to DNS attacks, but the social media company said the report is bogus. Cyberwarzone.com claimed it received instructions from Mauritania Attacker – the alleged leader of hacktivist collective AnonGhost – on how DNS attacks against Facebook are possible.