Security experts are lukewarm on Oracle’s security plans for the Java browser plug-in, largely because they don’t address code innate to the platform’s security sandbox which has been bypassed in a number of attacks.
Researchers say the prevalence of peer-to-peer botnets has grown fivefold during the past 12 months with virulent malware such as ZeroAccess leading the way.
Kaspersky Lab researchers discover a new espionage malware campaign called NetTraveler, which is likely written by the same group in China responsible for Gh0st RAT and Titan Rain.
LinkedIn is the latest Internet services company to move to two-factor authentication. Experts applaud the movement but caution there are challenges and situations where two-factor is not the best option.
Oracle announced enhancements to Java security around signed applets and certificate validation, but experts such as HD Moore want to see more work done to beef up the Java sandbox.
A team of researchers examined the resiliency of peer-to-peer botnets and mitigation tactics that could help with takedowns.
The industry reacts to Google’s decision to give vendors seven days to respond to vulnerabilities being actively exploited.
An analysis of the data rendered by the Carna botnet reveals a shocking number of vulnerable devices reachable online with default credentials.
A widespread Ruby on Rails exploit has surfaced that builds a botnets of compromised servers via IRC. Developers are urged to apply a five-month-old patch for the bug.
Facebook has patched a privacy vulnerability in Facebook Pages Manager for Android.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
