Lorenzo's Security Blog

Bank Sends Sensitive E-mail to Wrong Gmail Address, Sues Google | Threat Level | Wired.com A Wyoming bank sent an e-mail containing sensitive customer data to the wrong Gmail account, and now wants Google to reveal the identity of the account holder who received the data. According to a court document in the case, in [...]

Image via Wikipedia The University has fixed a security breach in its DuckWeb system after a student used it to look at three other students’ degree audits. The hole in DuckWeb’s security allowed Web users to view certain other students’ degree audits by changing digits in the URL for a printer-friendly version of their own [...]

Malware, especially from compromised web sites, was a huge issue in 2008. Many legitimate sites such as MSNBC.com, History.com, ZDNet.com and many others suffered compromises, in some cases for days. Unlike the past, the sites looked normal, but unsuspecting web surfers with vulnerable systems were exploited when they visited these sites. Search engines were used, [...]