New Technique Beats Google’s reCAPTCHA
Even the latest images in Google’s reCAPTCHA can be cracked with sufficient reliability to allow protective services to be exploited. Read the full article. [The H Security]
Donald Sears
OpenX Ad Serving SW Attacked
Hackers have exploited flaws in a popular
open-source advertising software to place malicious code on
advertisements on several popular Web sites over the past week. Read the full article. [Computerworld]
Windows Live Spaces A Fake Pharma Target
Cybercrime affiliates of unlicensed pharmaceutical websites have begun
moving on from attacks purely designed to poison Google search engine
results, and are now targeting Microsoft’s web properties. Read the full article. [The Register]
Computerworld polled a panel of patch and vulnerability
experts to find the five security fixes everyone should deploy from the
last 12 months. If you roll out any updates from 2009, these are the ones. Read the full article. [Computerworld]
Stephen Watt, a 25-year-old former Morgan Stanley software engineer,
pleaded guilty last December to creating a custom sniffing program
dubbed “blabla” that Albert Gonzalez and other hackers used to siphon millions
of credit and debit card numbers from TJX’s network; Watt received a 2 year Federal prison sentence. Read the full article. [Wired]
A former Massachusetts prison inmate has been given an 18-month prison
sentence for hacking prison computers while he was incarcerated. Read the full article. [Computerworld]
A new clickjacking attack has targeted Facebook users with photos and images posted in the comments section. Read the full article. [Help Net Security]
Cybercriminals have already begun shifting their focus from websites to
file-sharing networks when it comes to dispensing malware, and will
continue with this trend throughout 2010 with more mobile malware to come. Read the full article. [Ars Technica]
The Federal Bureau of Investigation is probing a computer-security
breach targeting Citigroup Inc. that resulted in a theft of tens of
millions of dollars by computer hackers who appear linked to a Russian
cyber gang, according to government officials. Read the full article. [Wall Street Journal]
Intel has released a patch for its series of silicon-based security
protections after researchers from Poland identified flaws that allowed
them to completely bypass the extensions. Read the full article. [The Register]
