Cisco Issues 7 Security Advisories for IOS
Networking giant Cisco has published a total of 7 security advisories that address 11 individual vulnerabilities for its Internetwork Operating System (IOS) software. Read the full article. [The H Security]
Donald Sears
Majority of US, European Users Click on Spam
Latest spam report from Messaging Anti-Abuse Working Group (MAAWG) now includes data from European users. More than half (57%) of survey adults
have responded to spam in such a way that it supports the perpetrators
of the spam. This includes opening attachments to an email, forwarding
an email or clicking on links. Read the full article. [The H Security]
Lights, Lasers Can Keep Hackers Out: Research
A new invention developed by Dr. Jacob Scheuer of Tel Aviv University’s
School of Electrical Engineering promises an information security
system that can beat today’s hackers — and the hackers of the future —
with existing fiber optic and computer technology. Transmitting binary
lock-and-key information in the form of light pulses, his device ensures
that a shared key code can be unlocked by the sender and receiver, and
absolutely nobody else. Read the full article. [ScienceDaily]
On Thursday, investigators in France arrested an unemployed 25-year old man who appears to have been responsible for the spectacular attacks on Twitter accounts that included those of US President Barack Obama and pop singer Britney Spears. Read the full article. [The H Security]
A computer security professional who sold Internet Explorer exploit
code to credit card hacker Albert Gonzalez was sentenced Tuesday to three years probation and a $10,000 fine. Jeremy Jethro, 29, was paid $60,000 by Gonzalez for a zero-day
exploit against Microsoft’s browser, “the purpose and function of which
was to … enable the conspirators to unlawfully gain access to, and
redirect, individual’s computers,” according to court records. Read the full article, [Wired]
Malware that exploits holes in popular applications is being delivered
by big ad delivery platforms including those run by Yahoo, Fox, and
Google, according to researchers. Read the full article. [CNet]
Researchers from Indiana University and Microsoft were able to
infer sensitive data by analyzing the distinct size and other
attributes of each exchange between a user and a website interaction. Using man-in-the-middle attacks, they could glean the
information even when transactions were encrypted using the Secure
Sockets Layer, or SSL, protocol or the WPA, or Wi-fi Protected Access
protocol. Read the full article. [The Register]
Criminal hacker organizations are operating with increasing corporate-life efficiency, specialization and expertise, said the FBI at FOSE conference. Here are the top ten operational positions in a cybercrime group. Read the full article. [Computerworld]
An Arkansas public water utility and a New Jersey town are the latest
victims of an organized cyber crime gang that is stealing tens of
millions of dollars from small to mid-sized organizations via online
bank theft. Read the full article. [KrebsonSecurity]
Days before the start of Pwn2Own, Mozilla has patched its flagship Firefox browser. The Firefox 3.6.2 update fixes a critical bug in a font decompression routine that could be exploited to “crash a victim’s browser and execute arbitrary code on his/her system,” Mozilla said in a security advisory. Read the full article. [Computerworld]
