About
Dennis Fisher is a journalist with more than 13 years of experience covering information security.
There are two new versions of the Zeus malware making the rounds right now, both of which target popular mobile phone platforms. One of the variants targets Windows Mobile devices, while the other is going after the Symbian platform, and both are intent on silently stealing data from infected devices.
Researchers have identified a new remotely exploitable vulnerability in all current versions of Windows that could be used by attackers to run arbitrary code on vulnerable machines. There is already a proof-of-concept exploit in circulation for the bug.
SAN FRANCISCO–Many carriers and mobile providers are touting
smartphones as the future of secure mobile payment systems, enabling
users to pay for purchases with an app on their phones, and this already
reality in many parts of Asia and Europe. However, researchers have
discovered that some of the more popular smartphone platforms leak
sensitive data during these transactions that could allow criminals to
spoof a victim’s phone and make purchases with the victim’s account.
SAN FRANCISCO–The Obama administration’s top information security officials hit the stage at the RSA Conference Tuesday, looking to drum up support for several of the president’s key security and privacy initiatives, including a still-nebulous plan for protecting users’ freedom and privacy on the Web.
SAN FRANCISCO–The vulnerability disclosure and patching arms race that has developed in the last decade or so in the security industry has made life extremely difficult not just for the developers writing code, but also for the folks who are interested in helping to fix broken applications. A new model and mindset is needed to help solve the problem.
There’s a vulnerability in the Kerberos implementation in several versions of Ubuntu, which could allow an attacker to cause a denial-of-service on vulnerable servers. The bug is in Ubuntu 8.04, Ubuntu 9.10, Ubuntu 10.04 and Ubuntu 10.10.
SAN FRANCISCO–Security is hard and getting it right all the time is nearly impossible. But many of the mistakes that people make are simple, avoidable ones that can lead to serious intrusions and major network compromises.
The new release candidate of Internet Explorer 9, which Microsoft released earlier this week, includes the company’s implementation of a new privacy technology called Tracking Protection that makes it easier for users to prevent sites from tracking their movements online.
Google has introduced a new two-step authentication feature for Gmail users that it says will significantly increase the security of the free mail service. The system enables users to set up a method for obtaining a secret code that will be required, along with a password, to access a Gmail account.
Smartphone security has jumped to the top of the list of concerns for many IT security staffs and one of the main reasons for that is the epidemic of lost and stolen smartphones. Many of those devices have only minimal password protection, and now researchers in Germany have devised a new technique that can recover stored iPhone passwords in little more than five minutes, further heightening concerns.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
