MIT researchers funded by DARPA (U.S. Defense Department’s Defense Advanced Research Projects Agency) have developed a system to keep web servers — or, for
that matter, any Internet-connected computers — running even when
they’re under attack. Read the full article. [MIT News]
Hackers have flooded the Internet with virus-tainted spam that targets Facebook’s estimated 400 million users in an effort to steal banking passwords and gather other sensitive information. The emails tell recipients that the passwords on their Facebook accounts have been reset, urging them to click on an attachment to obtain new login credentials, according to researchers.
The Drupal team has just released a whole heap of security advisories. Drupal’s Email Input Filter, Keys and Tag Order modules all contain security vulnerabilities. Updated versions, in which the problems are fixed, are now available. Read the full article. [The H Security]
Whatever the Chaos Computer Club’s name suggests, Europe’s largest hacker group is not intent on bedlam. Read the full article. [BBC News]
Over the past week, security researchers and vendors have been playing a cat-and-mouse game with a cybercrime-friendly ISP known as TROYAK-AS. The results so far? A series of attempts by the cybercriminals to restore access to their botnet, and an invaluable learning experience for the community, with the gang exposing node after node of malicious activity. Read the full article. [ZDNet]
According to a report issued today, eight networks connect
directly to the botnet-hosting ISP Troyak and four other upstream providers that “surround the
malicious core,” and help to “mask the true malware-hosting armada and
provide solid uptime to the malware servers” for ZeuS botnets, Gozi, and RockPhish among others. Read the full article. [KrebsonSecurity]
Pasquale Manfredi, 33, who reportedly calls himself Scarface and
allegedly runs the ‘Ndrangheta mafia, was captured in Calabria using
intelligence gleaned from the social networking site. Manfredi, who
used the alias Georgie on Facebook, is suspected of using social
networking to exchange coded instructions and stay in contact with
other mobsters. Read the full article. [The Register]
Those charged with the care and feeding of
database information stores, beware: A new statistic tucked into a
comprehensive study of financial services firms’ data protection
policies shows that even at the most security-aware organizations,
application developers still use live data in their development and
test environments including many in financial firms. Read the full article. [Dark Reading]
Internet service providers have the ability to wipe nearly all malicious activity in their network without stepping on individual privacy and civil liberties, said Adam Rice, chief security officer at Mumbai-based Tata Communications. Read the full article. [TechTarget]
Computer scientists and policy experts say that such seemingly
innocuous bits of self-revelation on social networking sites like Facebook, Twitter, Flickr, etc. can increasingly be collected and
reassembled by computers to help create a picture of a person’s
identity, sometimes down to the Social Security number. Read the full article. [NY Times]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
