Privacy shortcomings in Chatroulette expose users to risks in phishing, man-in-the-middle attacks and location-based threats,
according to a study by security researchers. Read the full article. [The Register]
Developers could build a framework that could maintain transactional records among web services in order to recreate the scene of the crime in the aftermath of a cyber attack, scientists from the National Institute of Standards and Technology suggest in a new study. Read the full article. [Information Week]
Mozilla on Tuesday warned users that a password-stealing add-on slipped
into Firefox’s extension gallery more than a month ago had been
downloaded nearly 2,000 times before it was detected. Read the full article. [Computerworld]
Cisco Industrial Ethernet 3000 (IE 3000) Series switches contain well-known,
hard-coded read and write SNMP community strings. An remote attacker
could take full control of a vulnerable device. Read the full statement. [US-CERT]
Thirty-eight defendants from across the United
States have been charged with participating in a multimillion-dollar
black market travel agent ring that used the stolen identities of
thousands of victims to purchase airline tickets for customers. Read the full article. [Dark Reading]
Oracle will release on Tuesday 59 patches to fix security weaknesses
affecting hundreds of products, according to a notice on its website. Read the full article. [Info World]
Unless thousands of companies still using Windows XP SP2 computers
suddenly stop procrastinating, hackers are going to be in seventh heaven come July 13. Read the full article. [The Last Watchdog]
The number of vulnerabilities in the first half of 2010 was close to the
number recorded in the whole of 2009. Read the full article. [The Register]
FBI agents have raided the homes of three alleged members of a hacker
gang that harassed a security expert who helped put the group’s leader
in jail, according to a recently unsealed search warrant affidavit. Read the full article. [Wired]
Someone hacked the list of attendees for the recent Cisco Live 2010 users’ conference, a security breach that led Cisco to
notify the customers as well as a broader group who have dealings
with the company. Read the full article. [Network World]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
