Online and Digital Identification, Securing Web 2.0, PKI and Digital Certificates
CBORD: Securing buildings, transactions, and the bottom line. www.cbord.com

Phishing scheme opens data breach potential on San Francisco campus

Thursday, December 17, 2009

Campus administrators and faculty are not immune to the email plague of phishing. That became evident at the University of California at San Francisco School of Medicine (UCSF) this week when a physician was fooled into revealing a username and password to hackers. An official looking email made to look like it was sent by university computer security staff asked the doc to provide the information. It is unclear whether any sensitive information was accessed but the employee’s email account did include information about patients, including demographic and clinical data as well as Social Security numbers of four patients. Though commonly thought of in financial circles, it is clear that campus employees and faculty need to be educated about such threats and remain vigilant. [end] 

The OneCard from Bowdoin College in Brunswick, Maine, can now be used at three off-campus restaurants with more merchants set to join.

“It’s a project we’ve been working on for some time now and its finally coming to fruition,” said OneCard Coordinator Chris Bird.

read more »

A new report created by the Chief Justice Earl Warren Institute on Law & Social Policy at UC Berkeley School of Law predicts a price tag of at least $40 billion for a mandatory biometric employment verification card for all U.S. workers that would utilize either fingerprint or fingervein scans.

read more »

Entrust Inc. has made enhancements to its Entrust Discovery digital certificate product by expanding search capabilities for digital certificates residing within Microsoft’s Cryptographic APIs and adding more than 25 basic or custom policy field alerts to ease certificate management.

read more »

A variant of malware called Sykipot is circulating that purportedly enables it to hijack U.S. Defense Department Common Access Cards and Windows smart cards, according to Alien Vault Labs. This variant, which appears to have been put together in March 2011, has been seen in dozens of attack samples from the past year.

read more »

Atlanta-based Echoworx, a credential management and managed encryption service provider, has opened up its Security Cloud to the industry at large, including MDMs, MEAPs, cloud services and other organization. By plugging into the cloud, they can enable PKI integration across multiple platforms and devices.

read more »

University of California Riverside (UCR) is in the process of investigating an incident which may have lead to hackers gaining access to more than 5,000 individual credit/debit card numbers.

read more »