Language Selection

English French German Italian Portuguese Spanish

Security fix installed after breach

Filed under
Security

The operations center for a credit card processing firm whose security was breached by a hacker, exposing 40 million accounts to possible fraud, has put new security software in place.

Marc Maiffret, a computer security specialist and co-founder of eEye Digital Security of Aliso Viejo, Calif., said his firm installed the security upgrade for Atlanta-based CardSystems Solutions' operations center here on June 10.

On Friday, MasterCard International Inc. disclosed that 40 million credit card accounts belonging to it and other companies were exposed to possible fraud by a security breach at CardSystems Solutions' operations center here, the latest in a string of recent breaches at financial institutions.

Maiffret told the Arizona Daily Star that the upgrade his firm sold CardSystems Solutions was in place three days later. CardSystems may have initiated other measures as well in response to the breach, he added.

Calls to Maiffret and spokesmen for eEye Digital and CardSystems Solutions were not returned immediately Thursday.

CardSystems Solutions is among a large number of companies processing financial transactions for credit card issuers that largely use custom-made software applications not initially designed with security components as their foremost need, Maiffret said.

In addition, such third-party companies frequently must contend with budget constraints causing them to be stingy on computer security, Maiffret said.

Those settings make for favorable conditions for a skilled hacker to manipulate his way through a computer program seeking vulnerabilities, he added.

"There is really no standard for how all this financial information gets pushed around, and all these companies push it around a little differently," Maiffret told the Star.

"That means you also have all these little quirks and opportunities for a hacker who has the time to find weaknesses."

Associated Press

More in Tux Machines

NVIDIA Linux Performance-Per-Dollar: What The RX 480 Will Have To Compete Against

There's a lot of benchmarking going on this weekend at Phoronix in preparation for next week's Radeon RX 480 Linux review. Here are some fresh results on the NVIDIA side showing the current performance-per-dollar data for the NVIDIA Maxwell and Pascal graphics cards for seeing what the RX 480 "Polaris 10" card will be competing against under Linux. Read more

RaspAnd Project Brings Android 6.0 Marshmallow to Raspberry Pi 3, Now with GAAPS

Android-x86 and GNU/Linux developer Arne Exton has informed Softpedia today, June 25, 2016, about the immediate availability of a new build of his RaspAnd distribution for Raspberry Pi single-board computers. RaspAnd Build 160625 is the first to move the Android-x86-based distro to the latest Android 6.0.1 Marshmallow mobile operating system created by Google. And in the good tradition of the RaspAnd project, both Raspberry Pi 3 Model B and Raspberry Pi 2 Model B are supported. Read more

BSD Leftovers

  • FreeBSD 11.0 Alpha 5 Released, Schedule So Far Going On Track
    The fifth alpha release of the huge FreeBSD 11.0 operating system update is now available for testing. FreeBSD 11.0 is bringing updated KMS drivers, Linux binary compatibility layer improvements, UEFI improvements, Bhyve virtualization improvements, and a wide range of other enhancements outlined via the in-progress release notes.
  • DragonFly's HAMMER2 File-System Sees Some Improvements
    The HAMMER2 file-system is going on four years in development by the DragonFlyBSD crew, namely by its founder Matthew Dillon. It's still maturing and taking longer than anticipated, but this is yet another open-source file-system.

Debian GNU/Linux 9 "Stretch" to Ship with GCC 6 by Default, Binutils 2.27

Debian developer Matthias Klose has announced that the new GCC 6 compiler, which will be made the default GCC compiler for the upcoming Debian GNU/Linux 9 "Stretch" operating system, is now available in the Debian Testing repos. Debian users who are currently using Debian Testing can make GCC 6 the default compiler by installing the gcc/g++ packages from experimental. If installing it, they are also urged to help fix reported built failures in Debian Testing and Debian Unstable. Read more