According to a statement by D-Link, firmware updates for its DIR-635
(HW-Revision B), DIR-655 (HW-Revision A1-A4) and DIR-855 (HW-Revision
A2) router models are now available to download at to close the
recently discovered hole in the Home Network Administration Protocol
(HNAP) of these devices. Read the full article. [The H Security]
Four people from North Texas indicted last week by a federal grand jury in Dallas were arrested Friday morning in Cancun, Mexico, according to the FBI. Michael Faulkner, 36, and his wife, Chastity Faulkner, 34, both of Southlake, were central figures in the 19-person indictment brought by U.S. Attorney James Jacks. Read the full article. [Dallas Morning News]
A Georgia mother and her two daughters logged onto Facebook from mobile
phones last weekend and wound up in a startling place: strangers’
accounts with full access to troves of private information. Read the full article. [Associated Press]
The developers behind the OAuth protocol have developed a new variant called OAuth WRAP that is simpler and easier to implement. It’s a stop-gap solution that will enable broader OAuth adoption while
OAuth 2.0, the next generation of the specification, is devised by a
working group that is collaborating through the Internet Engineering
Task Force (IETF). Read the full article. [Ars Technica]
A patch for the MIT’s Kerberos 5 implementation is to fix integer underflows in the functions for decrypting AES and RC4 ciphertexts. Read the full article. [The H Security]
Booby-trapped PDF files, posing as messages from the US Department
of Defense, were emailed to US defence contractors last week. The
document refers to a real conference due to be held in Las Vegas in
March. Read the full article. [The Register]
It’s tax season, and that means IRS-related phishing scams are ramping up. One such fake e-mail hitting in-boxes this past week asks
“U.S.-based employers” to complete an “updated” version of the
government’s W-2 form because of “important changes” within the forms. Read the full article. [Pittsburgh Post-Gazette]
Security reporter Brian Krebs goes visual with ATM skimmers, asking readers to look at images and see if they would be able to tell the difference between a real ATM card reader and actual skimming devices. Read the full article. [KrebsonSecurity.com]
According to a posting on the CPAN Testers’ blog, the CPAN Testers’ server has been being aggressively scanned by “20-30 bots every few seconds” in what they call “a dedicated denial of service attack”; these bots “completely ignore the rules specified in robots.txt”. Read the full article. [The H Security]
Security measures such as the use of one-time passwords and phone-based user authentication — considered among the most robust forms of IT defenses — are no longer enough to protect online banking systems against fraud, a Gartner report warns. Read the full article. [Computerworld]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
