53cur!ty 6109

"According to a report in Spiegel Online, "remote monitoring software" developed in Germany is designed to exploit a vulnerability in iTunes in order to infect target computers. In an advertising video, German company Gamma International GmbH is reported to have shown its FinFisher spyware application specifically using a vulnerability in the iTunes update system to install itself on target systems. Read more from [h-online]"

"Gamma International UK Ltd. touts its ability to send a “fake iTunes update” that can infect computers with surveillance software, according to one of the company’s marketing videos. Read more from [The Wall Street Journal].

"The feature, a type of key-establishment protocol known as forward secrecy, ensures that each online session is encrypted with a different public key and that corresponding private keys are never kept in long-term storage. That, in essence, means there's no master key that unlocks multiple sessions that may span months or years. Attackers who recover a key will be able to decrypt communications exchanged only during a single session. Read more from [theregister]"

"As Kathy Ishizuka described in this School Library Journal article, this year's Defcon hacker's convention included for the first time a kids’ section, where budding computer nerds as young as eight learned how to pick locks (the physical kind) and hack Google. They also met with agents from the Department of Homeland Security and the National Security Agency to learn about “intelligence gathering, cyber weapons, war strategy, and more. Read more from [PC World] ”