NASDAQ Fixes XSS 2 Weeks After Bug Reported
NASDAQ took two weeks to patch a cross-site scripting vulnerability on its website discovered by a Swiss pen-testing outfit.
Michael Mimoso
Revoyem Ransomware Sinks to New Low
A strain of the Revoyem ransomware redirects victims to child pornography before locking the computer and displaying a law enforcement warning demanding a fine for viewing the illegal content.
Not So Fast on BEAST Attack Mitigations
The BEAST attacks, once thought mitigated, may again be viable because of weaknesses in RC4 rendering server-side mitigation moot, and Apple’s reluctance to enable a 1/1-n split client-side mitigation by default.
A contractor working for Vodafone Germany made off with 2 million customer records. The telecommunications company warns customers of the possibility of phishing attacks stemming from the breach.
The massive MEvade botnet, currently using Tor as a communications protocol, ultimately made a bad move shifting to the anonymity network.
Kaspersky Lab has discovered an espionage campaign called Kimsuky originating in North Korea targeting government think tanks in South Korea.
An analysis of data collected during the Internet Census 2012, or Carna botnet, reveals that millions of embedded devices are vulnerable by default from the manufacturer.
BlackBerry issued four security advisories, patching vulnerabilities in the Z10 and Q10 smartphones and the PlayBook tablet.
Critical SharePoint patches must be prioritized according to experts commenting on Microsoft’s September 2013 Patch Tuesday security bulletins.
Google, Facebook, Yahoo ask for more transparency on National Security Letters, and call for an open, public debate on the issue with the FISA Court.
