“Another QuickTime flaw was submitted by Nils, a researcher who works for a U.K.-based security consulting firm, MWR InfoSecurity. Nils, who uses only his last name when he reports vulnerabilities, is best known for his work at Pwn2Own, an annual hacking contest held in Vancouver, British Columbia, Canada.”
“After it warned of flaws in the Palm Pre and Google Android platform, MWR InfoSecurity has now discovered that a HTC phone can also be compromised and used as a remote bugging device.”
MWR Consultant John Fitzpatrick speaks to Channel 5 news following reports of a data breach at TKMaxx potentially affecting 45 million customers world wide.
MWR InfoSecurity has uncovered a flaw in the Palm Pre which allows for the bugging of conversations “anywhere in the world” while a general flaw in Android allows for the theft of user passwords through the internet connection.
Major vulnerabilities in the Palm Pre and Android smartphones have been detected that could allow data to be stolen. Research by MWR Labs has revealed a major flaw in the Palm Pre that would allow conversations to be intercepted, while a flaw in the Android operating system from 2.0 onwards exists in the browser and allows login credentials and cookies to be harvested.
MWR were asked to comment on how Government cutbacks are affecting UK’s IT security after it is discovered that the Ministry of Defence had lost 340 laptops, 593 CD’s and 215 memory sticks, worth some £600,000.
Jonathan Care, Head of Fraud and Compliance at MWR InfoSecurity was asked to comment; “I suspect a lot of organisations disposing of equipment will be shocked how easily their customers’ data can be lost…”
MWR’s trials at various locations in the City revealed that using only a basic laptop it was possible to break into the computer networks of at least a third of the businesses in the immediate vicinity because they had no protection stopping external access to their wireless networks, or had barriers in place that were simple to overcome…
Also winning $10,000 was Nils who targeted Firefox on 64-bit Windows 7. As a computer science student at the University of Oldenburg in Germany last year he won $15,000 for exploits he demonstrated in IE 8, Safari, and Firefox. …
CanSecWest It was another grim day for internet security at the annual Pwn2Own hacker contest Wednesday, with Microsoft’s Internet Explorer, Mozilla’s Firefox and Apple’s Safari and iPhone succumbing to exploits that allowed them to be remotely commandeered…
Jonathan Care, of MWR InfoSecurity, said that once it was granted new powers next month, the ICO was likely to become much more aggressive in targeting organisations failing to ensure all personal data is properly looked after…