CanSecWest: Two security researchers at search engine giant Google have discovered
20 kernel bugs, about half remaining unpatched, affecting Windows,
Linux and the popular VMware virtualization software over the last
several years. Read the full article. [TechTarget]
Security expert Andreas Bogk warns that, despite recent PHP
improvements, the session IDs of users who are logged into PHP
applications remain guessable. Upon close examination, the alleged
improvements display frightening weaknesses. Read the full article. [The H Security]
Retailer JC Penney fought to keep its name secret during court
proceedings related to the largest breach of credit card data on
record, according to documents recently unsealed. Read the full article. [Computerworld]
Organized computer criminals yanked more than $200,000 out of the
online bank accounts of a Missouri dental practice this month, in yet
another attack that exposes the financial risks that small- to
mid-sized organizations face when banking online. Read the full article. [KrebsonSecurity]
A buffer overflow vulnerability exists in the Broadcom NetXtreme
management firmware. This vulnerability may allow a remote attacker to
execute arbitrary code on an affected device. Read the full advisory. [US-CERT]
Security researchers at CanSecWest unveiled an open-source device that
captures the traffic of a wide variety of wireless devices, including
Microsoft wireless keyboards, medical devices, and remote controls. Read the full article. [The Register]
Data on 3.3 million borrowers was stolen from a nonprofit company that helps with student loan financing. The
theft occurred on March 20 or 21 from the headquarters of Educational
Credit Management Corp. (ECMC), which services loans when student
borrowers enter bankruptcy. Read the full article. [Computerworld]
Networking giant Cisco has published a total of 7 security advisories that address 11 individual vulnerabilities for its Internetwork Operating System (IOS) software. Read the full article. [The H Security]
Hacker mastermind Albert Gonzalez was sentenced Thursday in U.S.
District Court to two concurrent 20-year stints in prison for his role
in what prosecutors called the “unparalleled” theft of millions of credit card numbers from major U.S. retailers.//
U.S. District Court Judge Patti B. Saris announced the concurrent
sentences in two 2008 cases against Gonzalez, 28, a Cuban-American, who
was born in Miami, where he lived when the crimes were committed. Read the full story [IDG News Service]
A new invention developed by Dr. Jacob Scheuer of Tel Aviv University’s
School of Electrical Engineering promises an information security
system that can beat today’s hackers — and the hackers of the future —
with existing fiber optic and computer technology. Transmitting binary
lock-and-key information in the form of light pulses, his device ensures
that a shared key code can be unlocked by the sender and receiver, and
absolutely nobody else. Read the full article. [ScienceDaily]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
