In a current advisory, Cisco describes an SQL injection hole which
can be exploited to manipulate or spy out database contents and other vulnerabilities it fixed in versions, 5, 6 and 7 of Unified MeetingPlace. Read the full article. [The H Security]
A study — which was created using the unlikely combination of identity fraud incidence statistics with basic
consumer demographics — indicates that identity thieves are
successfully targeting the wealthy and affluent, regardless of the
systems and software they use. Read the full article. [Dark Reading]
More than half (55.59 per cent) of all malware sent on email is an attempted phishing attack, according to analysis of malware by researchers. Read the full article. [Help Net Security]
A number of Congressional websites were defaced with abuse aimed at
President Obama following Wednesday’s State of the Union address. Read the full article. [The Register]
A significant discovery in the recent Aurora attack that affected Google, Adobe, Yahoo and others is that the attackers had selected
employees at the companies with access to proprietary data, then learnt
who their friends were. The hackers compromised the social network
accounts of those friends, hoping to enhance the probability that their
final targets would click on the links they sent. Read the full article. [The Financial Times]
Scareware scammers are taking advantage of rumors about an “unnamed
app” that supposedly poses a security risk to Facebook users in order
to trick users into sites slinging rogue security software packages. Read the full article. [The Register]
The last quarter of 2009 saw an average of 13,400 attempts to hack
healthcare organizations, compared to an average of 6,500 in the first
nine months, say researchers. Read the full article. [Infosecurity]
A Nebraska man agreed today to plead guilty to participating in an
attack on Church of Scientology websites in January 2008 that shut down
the group’s websites. Read the full article. [Help Net Security]
Harvard professor and noted Google critic Ben Edelmen provided video evidence of the Google toolbar transmitting data back to the Mountain View Chocolate Factory after he chose to disable the application in the browser window he was currently using. Google has updated the toolbar. Read the full article. [The Register]
Researchers at the University of Cambridge Computer Laboratory, say the
3D Secure (3DS) authentications system branded as the “Verified by
Visa” and “MasterCard SecureCode” schemes are “a text book example of
how not to design an authentication protocol.” Read the full article. [The H Security]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
