Adobe Patches Flash Vulnerability Exploited by Rosetta Flash Tool
Adobe patched Flash Player today, adding validation checks to the software so that it rejects malicious content from vulnerable JSONP callback APIs.
Michael Mimoso
China Hackers Compromise Iraq Experts at National Security Think Tanks
A China-linked hacker group known as Deep Panda has compromised a number of national security think tanks seeking information on U.S. policy in Iraq.
Motives Behind Havex ICS Malware Campaign Remain a Mystery
Experts question whether the Havex malware campaign targeting three European industrial control system software vendors is merely a dry run for something bigger.
Microsoft will release two critical bulletins tomorrow as part of its July 2014 Patch Tuesday security updates.
A fraud ring targeting Brazil’s Boleto payment method has pulled off hundreds of thousands of bogus transactions valued at $3.75 billion.
The EFF filed a FOIA lawsuit against the NSA and ODNI looking for more information on the government’s use and disclosure of zero-day vulnerabilities.
Microsoft announced TLS support on Outlook.com and that OneDrive cloud storage now supports Perfect Forward Secrecy.
A variant of the Cridex malware, called Geodo, steals data from compromised machines and comes with a self-replicating feature built from a list of 50,000 stolen SMTP credentials.
Cisco’s String of Paerls attack involves targeted phishing emails spiked with old-school Microsoft Word Macro malware that connects to more trouble at a Dropbox link.
The Havex RAT has infected the software update installers of three known industrial control system vendors, according to an advisory for ICS-CERT.
