A city of San Francisco network administrator who refused to hand over
administrative passwords to the city’s network was sentenced to four
years in state prison Friday. Read the full article. [IDG News Service]
The U.S. Computer Emergency Readiness Team has issued two warnings on flaws in the embedded systems’ OS technology VxWorks as discovered by researcher HD Moore. One flaw deals with weakness in the hashing algorithm of the API authentication; The second regards debug settings being enabled by default and affects nearly 60 vendors’ products. Read the algorithm warning here. Read the debug warning here. [US CERT]
Features in the four major browsers designed to cloak users’ browser
history often don’t work as billed, according to a research paper that
warns that users may get a false sense of security when using the
built-in privacy settings. Read the full article. [The Register]
Researchers at Def Con created a handful of virtual server instances on
Amazon’s EC2 and used a homemade program to attack the network of a
client — a small business that wanted its connectivity tested. They took the company off the
Internet. The price? Six dollars. Read the full article. [Dark Reading]
Cisco is warning of multiple vulnerabilities in its Firewall Services Module (FWSM) for the Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers. Read the full article. [The H Security]
A security researcher has uncovered yet another vulnerability in Adobe
Reader that allows hackers to execute malicious code on computers by
tricking their users into opening booby-trapped files. Read the full article. [The Register]
Six people have been arrested on suspicion of stealing credit cards,
personal information and banking details as part of a suspected online
banking fraud. Read the full article. [Help Net Security]
Another month, another zero day flaw has been reported, with malicious
attackers logically taking advantage of the window of opportunity, by
launching malware serving attacks using it. Read the full article. [ZDNet]
Security researchers have uncovered the command and control network of a
Zeus 2 botnet sub-system targeted at UK surfers that controlled an
estimated 100,000 computers. Read the full article. [The Register]
A secretive volunteer group that tries to track terrorists and criminals on the Internet went to the Defcon hacker conference this past week in hopes of recruiting information security experts, but it will first have to overcome some skepticism. Read the full article. [IDG News Service]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
