Researchers looking into the security of GSM phone networks are
suggesting that the recent breach, which saw tens of thousands of e-mail
addresses and ICC-IDs inadvertantly disclosed AT&T, could have far more significant implications
than a bit of extra spam: attackers can use the information to learn
the names and phone numbers of the leaked users, and can even track
their position. Read the full article. [Ars Technica]
Keystroke-logging computer viruses let crooks steal your passwords, and
sometimes even read your e-mails and online chats. Recently, however,
anonymous criminals have added insult to injury, releasing a keylogger
that publishes stolen information for all the world to see at online
notepad sharing sites such as pastebin.com. Read the full article. [KrebsonSecurity]
A hacker tried to frame his neighbor by tapping into his Wi-Fi and
sending threatening emails to US vice president Joe Biden, according to
search warrant affidavits unsealed recently. Read the full article. [The Register]
The developers of the open source IRC server UnrealIRCd have had to report that the file servers of the project were compromised several months ago and the IRC servers code, Unreal3.2.8.1.tar.gz was replaced by a version with a backdoor. The backdoor allows anyone to execute commands on the server running UnrealIRCd. Read the full article. [The H Security]
The U.S. Federal Bureau of Investigation has opened an investigation
into the leak
of an estimated 114,000 Apple iPad user e-mail addresses including those of Chief of Staff Rahm Emanuel, ABC ABC News anchor Diane Sawyer and NY Mayor Michael Bloomberg. Read the full article. [IDG News Service]
French researchers have developed an automated
social engineering tool that uses a man-in-the middle attack and strikes
up online conversations with potential victims. Read the full article. [Dark Reading]
Webmasters running unfinished modules for Drupal do so at their own risk
after the open-source CMS updated its guidelines on fixing security
vulnerabilities. Read the full article. [The Register]
However well we protect our data, sooner or later we run the risk of
information we want to keep private ending up in the public domain.
Researcher Harold van Heerde of the Centre for Telematics and
Information Technology (CTIT) at the University of Twente therefore
wants information to fade away over time: just let the details gradually
disappear from view. This would drastically reduce privacy-related
problems while ensuring that the information still retains its
usefulness to some extent. Read the full article. [ScienceDaily]
A researcher has discovered a flaw residing in the Windows Help and Support Center, a feature that
provides users with online technical support. Malicious hackers can
exploit the weakness of Windows by embedding commands in web addresses
that activate the feature’s remote assistance tool, which allows
administrators to execute commands over the internet. Read the full article. [The Register] Read the advisory. [Seclists.org]
Microsoft has issued updates for its Office 2004 and 2008 suites for Mac
that patch several security vulnerabilities. According to Microsoft,
the updates address a number of security issues, many of them rated
Important. Three of the vulnerabilities are Excel related and could allow attackers to inject
arbitrary malicious code, for instance when opening specially crafted
files. Read the full article. [The H Security]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
