Regional Bank Trojans Slip Under the Radar
Cybercrooks have developed regionally-targeted banking Trojans that are
more likely to slip under the radar of security defenses. Read the full article. [The Register]
Donald Sears
Researchers Still Able to Exploit Adobe PDF
A security researcher has found a way to circumvent Adobe Systems’ effort to address the /launch action issue that made headlines a few months ago. Read the full article. [eWEEK]
Top 3rd Party Apps Ignoring Windows Security: Report
Many of the most widely used third-party software applications for Microsoft Windows do not take advantage of two major lines of defense built into the operating system that can help block attacks from hackers and viruses, according to research released today. Read the full article. [KrebsonSecurity]
Scareware purveyors’ top target for today: Twilight fans using Google to
search for show times, sound tracks and all things related to latest
movie about young vampire lovers. Read the full article. [The Last Watchdog]
In a move hailed by privacy advocates, Facebook deployed a
feature that allows its users to better control what personal
information can be accessed by third-party applications and websites. Read the full article. [The Register]
Guests who recently stayed at Destination Hotels & Resorts may have been
victimized by compromised
point-of-sale systems. The company refused to release many details of
the incident citing an ongoing investigation by the FBI. In a note posted to its Web site said that it had “uncovered a malicious
software program inserted into its credit card processing system from a
remote source.” Read the full article. [Computerworld]
A developer figured out that Foursquare had a privacy leak because of how it published user check-ins on web pages for each location. He logged 875,000 in San Francisco. Foursquare is aware of the bug. Read the full article. [Wired]
Google security engineers announced that Chrome would refuse to run
plug-ins if they were found to be out of date, and thus, potentially
vulnerable to exploitation of known bugs. Read the full article. [Computerworld]
Since April, a son-of-Kraken botnet has infected an estimated 318,058
machines – about half as big as the original Kraken was at its height
in the middle of 2008, according to Paul Royal, a research scientist at
the Georgia Tech Information Security Center. Read the full article. [The Register]
Updates 1.2.44 and 1.4.3 for the official open source reference library libpng have been released to close security holes. Read the full article. [The H Security]
