Donald Sears

Samba Update Fixes DoS Holes

Version 3.4.8 of the free Samba file and print server fixes various holes
including two denial of service (DoS) vulnerabilities which allow
attackers to remotely crash the Smbd service. Read the full article. [The H Security]

Feasting on Twitter User Desire for Followers

The cybercriminals behind the intensifying phishing scam that has
been plaguing Twitter since late last week are proving how easy it is to
pervert the trust social networks like Twitter and Facebook along with
search giant Google have made a cornerstone of their respective business
models. The idea is to get Web users accustomed to using their Twitter, or
Gmail or Facebook credentials as  a “single sign-on” to access the Web’s
coolest apps. Read the full article. [The Last Watchdog]


Data secretly collected from an international phishing
operation over  18 months suggests that criminals who pursue a career
in phishing can reap millions of dollars a year, even if they only
manage to snag just a few victims per scam. Read the full article. [KrebsonSecurity]

PostgreSQL 7 and 8 users are advised to update their installations as the development team has released new versions which fix a vulnerability classed as moderately severe in PL/perl and PL/tcl. CVE-2010-1169, CVE-2010-1447 and CVE-2010-1170 reports detail the vulnerabilities involved. Read the full article. [The H Security]

A former security guard has pleaded guilty to charges that he broke into his employer’s computers while working the night shift at a Dallas hospital. Jesse William McGraw pleaded guilty to two counts of transmitting malicious code, said the U.S. Department of Justice (DoJ). Read the full article. [IDG News Service]

Sergey Storchak was detained after he landed in
New Delhi on a domestic flight from the southwestern holiday state of
Goa, a police spokesman said. He is one of 11 people wanted by
the U.S. Justice Department in “the largest hacking and identity theft
case ever prosecuted,” which was filed in August 2008. Read the full article. [Dark Reading]