Security industry analysts and lawmakers will get an unprecedented
chance next week to evaluate how the government might respond to a
cyber-attack on critical infrastructure targets. Read the full article. [Computerworld]
A non-trivial number of XP users are reporting that their systems suffer from the dreaded Blue Screen of Death (BSoD) and fall into an interminable reboot loop after installing the latest batch of patches from Redmond. Read the full article. [KrebsonSecurity]
Mozilla acknowledged that it had falsely accused a developer of infecting a Firefox add-on with attack code.
The admission came a week after Mozilla announced that a pair of add-ons, Sothink Web Video Downloader 4.0 and Master Filer, had slipped through its security check-in. Read the full article. [Computerworld]
iPhone users beware – an ongoing phishing campaign impersonating Apple.com, attempts to trick users into submitting sensitive device information, with the scammers in a perfect position to use the data in a countless number of fraudulent variations. Read the full article. [ZDNet]
Peiter Zatko — a respected hacker known as “Mudge” — has been tapped to
be a program manager at DARPA, where he will be in charge of funding
research designed to help give the U.S. government tools needed to
protect against cyberattacks. Read the full article. [cnet]
Federal authorities are charging a Las Vegas man with marketing a
so-called “cookie-stuffing” operation, enriching himself and others
while defrauding eBay along the way. Read the full article. [Wired]
With millions of personal records and payment card information stolen
on a regular basis, several recently released reports independently
confirm some of the main sources of breaches. Not surprisingly, that’s
not zero day flaws, not even insiders, but good old fashioned SQL injections next to malware infections. Read the full article. [ZDNet]
Some of the bugs Microsoft patched today will be exploited by hackers almost immediately, security researchers predicted. Microsoft’s massive update — a record-tying 13 separate security bulletins that patched 26 vulnerabilities — gives attackers all kinds of ways to compromise machines and hijack PCs. Read the full article. [Computerworld]
Purveyors of a new botnet toolkit are touting a feature aimed at
aspiring cybercriminals: the opportunity to commandeer computers
already compromised by an established crimeware package known as Zeus. Read the full article. [The Register]
A metals supply company in Michigan is suing its bank for poor security
practices after a successful phishing attack against an employee
allowed thieves to steal more than half a million dollars last year. Read the full article. [KrebsonSecurity]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
