Mac OS X, Windows Backdoors Used in New APT Attacks
A new Mac OS X backdoor variant has begun making the rounds online, targeting a Turkic ethnic group in central Asia, according to a post on Securelist’s blog earlier today.
Chris Brook
About
"Distrust and caution are the parents of security" - Benjamin Franklin
Report: Websites Getting Safer, Yet XSS Bugs Persist
The number of vulnerabilities in the average Web site is actually decreasing, one of the more surprising findings in an annual study done by WhiteHat Security.
New Crimeware Bot Zemra behind DDoS Attacks
Zemra, a new crimeware bot that shares traits with the banking Trojans Zeus and SpyEye has been making the rounds lately, according to a recent post on Symantec’s Security Response blog.
It’s become more important than ever to protect your privacy online. Dennis Fisher and his guest, Andrew Lewman, The Tor Project, Executive Director discuss what end-users need to know and do to keep online anonymity, reduce their risk factor and ultimately put the control back in the users hands.
A recent fraud ring through which attackers raided high-value bank accounts, nicknamed Operation High Roller (.PDF), employed attacks that were quick, required no human interaction and have already affected several tiers of credit unions, regional banks and large global banks, over the last several months.
The U.S. Commodity Futures Trading Commission (CFTC), an independent federal agency that helps regulate futures and option markets, was hit with a data breach last month according to an e-mail statement from the Commission that circulated online late last week.
Iran’s intelligence minister Heydar Moslehi claims the country has uncovered a “massive cyber attack” it believes was jointly launched by the United States, England and Israel, according to reports from PressTV, Iran’s state-owned English language news network, yesterday.
Cisco warned customers Wednesday of several vulnerabilities in its AnyConnect Secure Mobility virtual private network (VPN) client, claiming that if not patched, the VPN software could be exploited by a remote attacker.
One day after a hacker using the handle “Reckz0r” claims to have infiltrated 79 different banks and leaked information allegedly belonging to Visa and MasterCard customers, there are questions about whether a hack actually occurred.
A flaw exists in the way that a specific instruction is handled on some types of Intel 64-bit chips that could open up some operating systems and types of virtualization software to attacks, according to an alert issued last week but revised today by the United States Computer Emergency Readiness Team (US-CERT).
