Some WordPress Themes, Thousands of Sites Open to XSS Vulnerability
A number of Wordpress themes being distributed by the developer Parallelus are vulnerable to cross-site scripting (XSS) attacks, reports said.
Chris Brook
About
"Distrust and caution are the parents of security" - Benjamin Franklin
Anonymous Brings Government Sites Offline in Philippines to Petition Cybercrime Law
The National Telecommunications Commission (NTC) of the Philipines has asked for assistance from law enforcement after a handful of government sites in the country, including the NTC’s site, were brought offline this morning in a hack allegedly carried out by PrivateX, an offshoot of the hacktivist group Anonymous.
Samsung Fixes Remote Wipe Flaw in Galaxy S III Smartphones
Smartphone developer Samsung has reportedly fixed a flaw in one of its newest phones, the Galaxy S III, that allows attackers to remotely wipe the phone’s contents.
Massachusetts Eye and Ear Infirmary, a Boston-based hospital, agreed to pay $1.5 million to the U.S. Department of Health and Human Services (HSS) earlier this week, settling a HIPAA violation stemming from a 2010 incident.
Two Romanian men pled guilty this week to charges they hacked into the point of sale systems of more than 200 restaurants, compromising the payment cards of 146,000 customers and amassing more than $10 million over the last few years.
Google Chrome is indeed getting a Do Not Track (DNT) feature according to source code published in the developer’s release of the browser at the end of last week. The feature should clear Google’s dev and beta channels before making its way into the next stable build of the browser before the end of this year.
With the latest iteration of the Blackhole Exploit Kit hitting the web this week, attackers are going to great lengths to spread around links to get unsuspecting victims to click through to the first version of the kit.
The University of Miami Hospital (UMH) has begun to notify patients for the second time this year that some of their personal information may be at risk after the health care institution was hit with a data breach in July. According to a letter being sent to patients this month, two employees at the hospital were found “inappropriately accessing” patients’ “face sheets,” documents that give doctors a quick glance at patients’ information.
Despite seemingly endless pontification, it’s still too early to definitively say whether there’s a connection between the Shamoon malware and recent attacks on Middle Eastern oil firms, yet some of the attackers’ intentions may be getting clearer.
Websites that use the Internet domain registrar and web hosting company Go Daddy were knocked offline earlier this afternoon in what appears to have been a distributed denial of service (DDoS) attack executed by a member of the hacktivist group Anonymous.
