Model Predicts Optimal Timing for Targeted Attacks
A mathematical model developed by University of Michigan researchers helps attackers and defenders understand optimal conditions when a targeted malware attack should be launched.
Michael Mimoso
Oracle Patch Update Takes on 36 Java Vulnerabilities
Among the 144 patches released as part of Oracle’s quarterly Critical Patch Update were 36 patches for Java, a prominent reminder the Java security house is still not in order.
Microsoft Patch Tuesday Security Updates Address Windows XP Zero Day
Microsoft released four security bulletins today as part of its January 2014 Patch Tuesday updates. All of the bulletins are rated important, including a patch for a zero day in Windows XP.
US-CERT issued an alert warning of the recent rash of network time protocol (NTP) amplification attacks. NTP attacks have been blamed for recent DDoS attacks against popular online gaming sites.
The Icefog cyberespionage campaign also included a Java component that targeted three U.S.-based oil and gas companies.
Target reported attackers not only stole credit and debit card information, but also names, mailing addresses, phone numbers and email addresses impacting another 70 million individuals.
The attackers behind the Target data breach likely had broad network access, and used memory scraping malware such as RAM scrapers to steal payment card data.
iOS mobile banking applications are vulnerable to a number of vulnerabilities that put banking and financial transactions at risk.
CREDO Mobile, the company thought to be at the center of a suit challenging the legality of National Security Letters, published the mobile industry’s first transparency report.
Yahoo has turned on HTTPS by default for its web-based email service, but the deployment is inconsistent across the board and experts are critical of its use of weak standards and the lack of Perfect Forward Secrecy and HSTS.
