SSL Certificates Stolen From DigiNotar

Approximately 531 certificates were stolen, possibly by the Iranian Government.

Technet has a very good article around why such an attack is brutal and how to protect against it

Microsoft feels this could even lead to attackers pushing malware via Windows automatic update

Impact of this hack:

        Microsoft flips 'kill switch' on all DigiNotar certificates

        Mozilla asks all users to delete DigiNotar certificate, and has released a Firefox update

        Hackers spied on 300,000 Iranians using fake Google certificate

        Google's Chrome was able to provide some protection to its users

Update 07-Sep-11:

        Not surprisingly, the same hacker which attacked Comodo, has taken the responsibility of this hack

        To make matters worse, he claims to have compromised four other Certificate Authorities (CA)..!!

        GlobalSign CA is one of the mentioned four, and is investigating this claim

Update 09-Sep-11:

        Fox-IT has published a very good report on the incident

        Apple finally blocks the stolen certs

        ComodoHacker claims he can now exploit Windows Update as well

Update 12-Sep-11:

        GlobalSign set to reopen Tuesday (13-Sep) despite web server hack

Update 27-Sep-11:

        DigiNotar has filled for bankruptcy, plus the Dutch government has revoked their root cert

Update 28-Jun-12:

        Dutch govt tells us how difficult & time consuming it is to replace all digital certs in an organization.

Update 01-Nov-12:
Fox IT now details the attack

99% of attacks could be stopped by patching

Microsoft’s chief UK security advisor Stuart Aston has pointed out that less than 1% of attacks are based on zero-day exploits

Full Story

Backtrack on Android!!

Not surprisingly, this is pretty easy.

The 10 most demanding jobs in IT

IT Security is in the top 10 most demanding IT jobs list...!

The Art Of Phishing

A funny, but informative video...!

Forensics on Android

A very good case study on how to go about conducting forensics on Android.

CloudFlare Hacked - Google's 2FA is Flawed

This just goes on to show how sophisticated attacks are becoming.

While an authentication flaw, social engineering, and questionable account recovery methods all played a part in the attack, CloudFlare admits, in Prince’s own words, that they “did some dumb things” 

Full Story

Update: 06-Jun-2012:
Google now starts informing users in case they think they have been victims of state sponsored attack. No details are however being disclosed.

Update: 15-Jun-2012:
Details around what 0-day vulnerability is being used

Update: 20-Jun-2012:
European aeronautical supplier's website infected, with this same exploit.