PoS Cyber Attacks Up In 2013

A third of data intrusion investigated by security firm Trustwave last year involved compromises of point-of-sale (POS) systems and over half of all intrusions targeted payment card data.

Even though POS systems remained a significant target for attackers, as suggested by several high-profile data breaches disclosed by large retailers over the past six months, the largest number of data theft incidents last year actually involved e-commerce sites, Trustwave said Wednesday in a report that compiled data from 691 data breach investigations conducted by the company around the world.

E-commerce intrusions accounted for 54 percent of investigated data breaches and POS system intrusions accounted for 33 percent, Trustwave said. A separate report published by Verizon in April also pointed to Web application and PoS attacks as leading causes of security incidents with confirmed data disclosure last year.

According to Trustwave, over half of intrusions targeted payment-card data, with such data being stolen from e-commerce transactions in 36 percent of incidents and from POS transactions in 19 percent of attacks.

In Western Europe in particular, where countries have rolled out EMV — chip-and-PIN payment card transactions — cybercriminals shifted their focus from POS devices to e-commerce platforms, said John Yeo, EMEA Director at Trustwave. “EMV has changed the pattern of compromises when it comes to payment-card-specific data.”

However, a significant increase in the theft of sensitive, non-payment-card data, was also observed last year. This data includes financial credentials, personally identifiable information, merchant ID numbers and internal company communications, and was stolen in 45 percent of incidents, Trustwave said in the report.

Customer records containing personally identifiable information can possibly be used to perpetrate identity fraud and are sought after on the black market, so that’s why there’s been an uptick in attacks focusing on such data, Yeo said.

Only about a third of victim companies were able to self-detect data breaches, Trustwave found. In 58 percent of cases, breaches were identified by regulatory bodies, the credit card companies or merchant banks.

Source

New Exploit Exposed In Microsoft Windows

The exploit deals with the Windows protocol handler in Windows for MHTML.  Be advised the exploit can only be done if the user is running Internet Explorer. Apparently, hackers are using cross-site scripting attacks are intercepting and collecting peoples information, spoofing the content that is displayed to the browser, or interfering with the user’s browsing activities.  Read More….

YouTube Explodes

According to a study of over 16,000 mobile YouTube users conducted by Google, 75% of respondents said that mobile is their primary way of accessing YouTube. At first glance, that figure may come as no surprise – after all, how shocking is at that a survey of mobile users finds that they watch a lot of YouTube Mobile? However, it’s actually a rather telling number.

For some of us, watching YouTube on a mobile device is an additional way to watch video, not the primary way. But for a large majority of mobile video users, it’s completely the opposite.

The survey found that 70% of the respondents reported visiting YouTube Mobile at least once per day and, while there, 58% spent more than 20 minutes per visit. 38% even when as far as to report that they feel like YouTube Mobile is replacing their desktop video usage entirely.

As noted by the Google Mobile Ads blog post reporting this data, these figures aren’t really a surprise. It referenced a recent Nielsen survey that found that YouTube Mobile is the number one mobile video viewing site in the U.S., with more than 7.1 million uniques.

Of course, Google is revealing this news to pique the interests of mobile advertisers – the post mentions that advertisers can now buy a “daily roadblock” which allows them to own all available ad impressions for 24 hours. Those ads would run on the Search, Browse and Home pages of the mobile website.  Read More……