DNS Changes in China Could Thwart Malware
Security researchers believe changes being made by the Chinese government to the DNS process could help limit the number of malicious sites using the .cn top-level domain. Read the full article. [eWEEK]
Donald Sears
Botnets Targeting Full Spectrum of Servers
Web servers, FTP servers, and even SSL servers
are becoming prime targets for botnet operators, not as command and
control servers or as pure zombies, but more as a place to host their
malicious code and files, or in some cases to execute high-powered spam
runs. Read the full article. [Dark Reading]
Shadowserver Data Reveals Top Conficker Victims
ISPs in Russia and Ukraine are home to some of the highest concentrations of customers whose machines are infected with the Conficker worm, shows data from the Shadowserver Foundation. Read the full article. [Washington Post]
Mark Weatherford, CISO for California, and Dan Kaminsky, finder of last year’s DNS flaw, offer five security predictions for 2010. Read the full article. [CSO]
On Tuesday, clicking on the illustration on Google’s front page commemorating the 150th anniversary of the birth of Esperanto’s creator L. L. Zamenhof, generated an awful lot of malicious search results — taking visitors to dodgy advertisements or pages that tried to trick visitors into thinking their computers were infected and paying for fake antivirus software. Read the full article. [Computerworld]
The Mozilla developers have released version 3.5.6 of their open source Firefox web browser to address a total of seven vulnerabilities, three of them critical. Read the full article. [The H Security]
Stats from the one billion spam messages blocked by Project Honey Pot over the last five years provide an insight into junk mail trends and spamming practices. Read the full article. [The Register]
The PostgreSQL Project developers have announced the release of security updates for their popular open source object-relational database. Read the full article. [The H Security]
A SQL injection flaw has been discovered in Rockyou.com – a social networking application development website used by app developers for Bebo, Facebook and Myspace; The flaw could have allowed hackers access to the 32 million usernames and passwords. Read the full article. [eWEEK Europe]
There are several ongoing investigations attempting to find the authors of the Conficker botnet, one of the fastest spreading worms in history, but those responsible for the worm have proven elusive. Read the full article. [TechTarget]
