Yesterday (Wednesday) the last of the 13 authoritative root servers for the domain name system switched over to
the DNS Security Extensions (DNSSEC) security protocol. DNSSEC is
intended to prevent DNS exploits such as cache poisoning. All 13 root
servers are now serving a signed version of the root zone. However, it
is not possible to validate these signatures at present as the public
key remains undisclosed. Read the full article. [The H Security]
Flaws in the configuration and security of the
U.S. Coast Guard IT system caused a material weakness in the Department
of Homeland Security financial system, according to a recent audit. Read the full article. [Dark Reading]
A recent security patch from Microsoft silently fixed two severe bugs
that were never disclosed even though they posed a risk to many of its
customers, a security researcher said. Read the full article. [The Register]
A who’s who confab of government, corporate and civic leaders from the
around the world has convened in Dallas this week at the East West Institute’s Worldwide Cybersecurity Summit to discuss the need
for wider public-private partnerships to make the Internet safer. Read the full article. [The Last Watchdog]
A long-awaited draft of a Congressional bill would extend privacy
protections both on the Internet and off line, but privacy advocates
said the bill did not go far enough in protecting consumers. Read the full article [New York Times].
A North Carolina grocery worker is being held without bail in Houston
on attempted computer hacking charges after inadvertently partnering
with an undercover FBI agent in an alleged citywide ATM-reprogramming
caper. Thor Alexander Morris, 19, was arrested at a Houston flea market last
month after trying a default administrative passcode on a Tranax
Mini-Bank ATM there, according to the FBI. Read the full article. [Wired]
The LoveBug worm, a simple email that spread a virus to millions of computers a decade ago, paved the way for many of today’s social engineering and targeted cyber attacks. Read the full article. [CSO]
A smiley-faced instant message with a photo link
posing as if it’s from someone on your buddy list is actually spreading
misery worldwide in the form of a worm on Yahoo Instant Messenger: The
IM ultimately delivers a worm that allows an attacker to take over the
victim’s machine, not to mention spread itself among the victim’s
contact list. Read the full article. [Dark Reading]
Websites operated by the US Treasury Department are redirecting visitors
to websites that attempt to install malware on their PCs, a security
researcher warned. Read the full article. [The Register]
Two of the accused Mariposa botnet operators in Spain requested jobs at Panda Security in March some 2 months after their arrest, according to a Panda Security official. Read the full article. [KrebsonSecurity]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
