Donald Sears

Google Buzz XSS Flaw Fixed

Google has fixed a Web flaw that gave hackers a way to take control of Google Buzz accounts. Read the full article. [Computerworld]

Top 25 Dangerous Programming Errors Updated

The 2010 CWE/SANS Top 25 Most Dangerous Programming Errors is a list
of widespread and critical programming errors that can lead
to serious software vulnerabilities. Read the full article. [Common Weakness Enumeration/Mitre]


While many outside of the security industry
still perceive “hackers” as teenagers or isolated geeks who work alone, a recent research report encourages the general
public to see malware as a cooperative industry that supports
specialists, economies, and supply chains. Read the full article. [Dark Reading]

Cybercriminals have been capitalizing on the world’s interest in the Winter Olympics in Vancouver to spread malware, experts warned. Attackers have been using Twitter and black hat search engine (SEO) optimization tactics to promote fake Olympics videos that are spreading malware. Read the full article. [Secure Computing]

An Israel-resident British IT worker has reacted with horror to news
that a suspected member of an alleged hit squad used a passport with
his details to enter Dubai, before allegedly participating in the
assassination of a prominent Hamas official. He’s not alone. Read the full article. [The Register]

A common Web programming error could give hackers a way to take over Google Buzz accounts with cross site scripting, a security expert said. Read the full article. [Computerworld]