Top 10 Stories

IT Security Guru: Online casino operators are fuelling the increase in cyber crime by making it easy to “cash in”, according to McAfee. In a new report about money laundering through online gambling, McAfee allege that the websites have become hotbeds of criminal activity, which not only fuel money laundering, but allow criminals to hide their illicit gains from the police.  

Dark Reading: Warning to Android users: No patches are available for 150 million downloaded Android apps that remain vulnerable to the OpenSSL vulnerability known as Heartbleed. That finding comes from the security firm FireEye, which scanned more than 54,000 apps available via Google Play that have been downloaded at least 100,000 times. The good news, however, is that since the Heartbleed vulnerability came to light on April 7, developers have released patches covering about 70 million previously...

MIT Review: Recent discoveries, along with the recent drama over the Heartbleed bug, make me believe that in next few months we could see the largest leak of private patient information ever reported. Attacks against health IT systems are particularly concerning because so much personal data lives in an electronic health record. If hackers compromised such a system, they’d get contact and financial information, as well as lots of even more personal health data.  Heartbleed,...

Register: Popular Whatsapp-like messaging service Viber is exposing users to man-in-the-middle and other attacks because it isn’t encrypting various data at rest and in transit, security researchers have warned. The mobile app allows users to send each other messages, videos, images and “doodles”, share GPS location details and make voice calls.  

American Banker: Do credit bureaus need to be held to higher levels of accountability for the massive amounts of consumer data they hold? Security expert and formerWashington Post reporter Brian Krebs says that the answer is yes, and backs up this assertion withfresh new details of fraud related to the previously reported theft of personal data from the credit bureau Experian.  

Silicon Republic: While a quarter of Irish businesses admitted suffering economic crime in the last two years, 40pc of these say the financial impact has been any amount up to €750,000. Also, cybercrime has doubled in the last two years to encompass 45pc of fraud cases. The PwC Irish Economic Crime Survey published today found one in five companies had experienced more than 100 incidents of crime, up from 14pc in 2011, and double the...

Guardian: OpenSSL, the security software which led to the Heartbleed flaw, has been forked – its code re-used to make a new piece of software – by developers angry at the lack of care given to the project. Theo de Raadt, the founder of open-source operating system OpenBSD, has taken the code of OpenSSL and used it to create a new version of the security software called LibreSSL.  

Press Citizen: Servers containing the social security numbers of almost 30,000 Iowa State University students were compromised in a security breach, university officials announced Tuesday. Information technology staff discovered a breach of five departmental servers that contained social security and university ID numbers for students who took classes in computer science, world languages and cultures and materials science and engineering.  

The Register: In the wake of the Heartbleed bug fiasco, members of the OpenBSD project have forked the popular OpenSSL library with the aim of creating a new version that they say will be more trustworthy. Even though OpenSSL is open source software, for a full two years its entire development community managed to overlook the crucial bug that eventually triggered a web-wide panic.  

SC Magazine: Microsoft has quietly slashed the cost of continuing to support Windows XP - including critical security patches - from £3 million to just £150,000 for major enterprises. As a result, the key question that C-level executives will be asking themselves is 'is this price plan suitable?' The figures certainly make for interesting reading. According to CBR, the Metropolitan Police in London has opted for a Microsoft Custom Support Agreement (CSA), since the vast majority (34,210)...