Adobe Patches Critical Bugs in Flash, Reader, Acrobat
Adobe has released a number of patches for critical vulnerabilities in several of its more popular applications, including Flash, Reader and Acrobat.
Dennis Fisher
About
Dennis Fisher is a journalist with more than 13 years of experience covering information security.
Metasploit Launches Reward Program For Exploits
The team behind the Metasploit Project is launching its own version of a bug bounty program: cash payouts for working exploits. The group is hoping to get explit code for as many of its top 30 vulnerabilities as possible before the program expires later this summer.
High-Profile Attacks Drive Renewed Push For Breach Notification Law
With each new day bringing news of another intrusion at a high-profile company or government agency, lawmakers are considering a number of legislative responses to the problem, including a potential bill that would require companies to report breaches within 48 hours and establish penalties for companies that fail to do so.
Howard Schmidt has been the White House cybersecurity coordinator for nearly 18 months now, and in that time has helped develop and shape the Obama administration’s policies and thinking on cybercrime, online privacy and cybersecurity. In the second part of a recent interview with Threatpost editor Dennis Fisher, Schmidt discusses the national data breach bill, using offensive weapons online and the prospects of the National Strategy for Trusted Identities in Cyberspace.
This is the first part of a two-part Threatpost interview with Howard Schmidt, White House cybersecurity coordinator, about the challenges of
international cooperation, the proliferation of cybercrime and what can
be done to address those issues. Look for part two tomorrow.
In June’s Patch Tuesday release, Microsoft plans to fix 16 separate vulnerabilities affecting a variety of software, including Windows, Office, SQL Server, Forefront Threat Management Gateway and Internet Explorer.
Today’s modern security problems hadn’t yet emerged when pioneers Richard Feynman, Grace Hopper and Albert Einstein were in their primes, but that doesn’t mean that they don’t have strong opinions on the topics of hacking, cloud security and network security. In this video from the AT&T Cybersecurity Conference, AT&T CSO Ed Amoroso “interviews” Feynman, Hopper and Einstein on these topics and others.
Citigroup
is warning its credit card users that attackers have stolen account information
belonging to 200,000 customers. The breach apparently was discovered last
month.
Google has fixed more than a dozen security bugs in its Chrome browser, including five high-severity vulnerabilities and one that qualified for the company’s highest bug bounty, a $3133.7 reward.
In the wake of a string of attacks against high-profile users of RSA Security’s SecurID tokens including Lockheed Martin, the company has posted an open letter to its customers, trying to reassure them that the tokens are secure and that the attacks don’t represent a new threat to these businesses. However, the company is now offering to replace SecurID tokens for its corporate customers, a user base of tens of millions of people.
