This past week hasn’t been a good one for helping us feel more secure.
1. Sony:
Everyone knows about the 1$ Billion Class Action suit planned based on what is probably an case of felonious laziness. Turns out Sony was warned about the fact it’s servers weren’t secure or updated, by security experts – free of charge! Now I learn of a third wave attack (2):
“A group of hackers says it is planning another wave of cyberattacks against Sony in retaliation for its handling of the PlayStation Network breach.
An observer of the Internet Relay Chat channel used by the hackers told CNET today that a third major attack is planned this weekend against Sony's Web site. The people involved plan to publicize all or some of the information they are able to copy from Sony's servers, which could include customer names, credit card numbers, and addresses, according to the source. The hackers claim they currently have access to some of Sony's servers.” – Erica Ogg at Cnet (1)
2. Red Robin – Not so “Yum” (3):
In a security effort worthy of Moe, Larry and Curley, Red Robin is forcing your phone number as a password to your account “So you can access it from anywhere”. They should have added “So anyone and you…”. How stupid is this?
3. Microsoft Security Essentials ranked #20 out of the field (4):
Because so many of us rely on MSE and it’s prior high scores, this news is particularly distressing. Bitdefender took top marks, with Kaspersky and F-Secure taking second. MSE provided no protection for email – which is the most common way malware is distributed. Guess MSE users will be looking for better protection…
Sorry about all the fun news, folks. Nothing bringing much joy in the security arena this week.
Sources:
(1) - http://news.cnet.com/8301-31021_3-20060227-260.html
(2) - http://www.neowin.net/news/third-attack-against-sony-planned
(3) - http://www.neowin.net/news/red-robin-forces-phone-number-as-password-says-not-to-share
(4) - http://www.infopackets.com/news/business/microsoft/2011/20110506_antivirus_suites_compared_microsoft_free_a_v_inadequate.htm