A Cross Platform Malware Development Framework

This is the Malware industry maturing up.

Anonymous' Logo

This is plain silly.
A French company tried to trademark the logo of Anonymous. Of course the hacking community was not amused  and published their personal information on pastebin, with a threat to kill their internet sales.
The company has since then shut down their business.

Is Microsoft Listening on Skype Calls?

Is this rumor is true, then it will mean some serious impact to the privacy of the users (even if some bloggers feel otherwise)

Microsoft Attack Surface Analyzer

Microsoft has released Attack Surface Analyzer, a free tool that can help us understand how newly installed applications can affect the security of a Windows OS.

Full Story

Undetectable hardware backdoor - Rakshasa

What's really scary is that Rakshasa doesn't reside in the disk and therefore leaves zero evidence in the filesystem. It leaves zero network evidence on the LAN. It can "remotely boot from an alternate payload or even OS" like fake Truecrypt/Bitlocker. Rakshasa can even show a fake BIOS menu if necessary

This is scary. More details here.

Dropbox Hacked Again!

This time it looks like the bad guys are using accounts credentials hacked from our sources. More details and previous incident.

SSL/TLS Broken - Beware of BEAST & Lucky 13

The way things are going, we may need to start thinking about replacing SSL

Update 27-Sep-11:
An interesting post to understand the scope of this new security hole

Update 04-Oct-11:
An article from Infosecurity-Magazine confirming my suspicion

Update 14-Oct-11:
Learn about the BEAST from the horse's mouth:  The author's own blog

Update 31-Jan-12:
Another good article that summarizes how SSL is now broken, and what is the future of web authentication

Update 01-Aug-12:
Certificate pinning might be one solution to the problems. However, this sounds like a difficult solution to deploy, where all clients would have to cache the certs of all the trusted websites/servers.

Update 12-Feb-13:
A new attack, called Lucky Thirteen. Original white paper here.

Update 18-May-13:
Some issues/concerns with IPv6 integration.