There are a number of other file types that can be used in the same kind of attacks that have been used in the DLL-hijacking exploit in recent weeks. Experts say that executable files, Windows INI files and some other file types can be used in these same attacks.
HEI Hospitality, owner and operator of upscale hotels operating under
the Marriott, Sheraton, Westin and other monikers, has sent letters
informing some 3,400 customers that their credit card data may have been
compromised. Read the full article. [IDG News Service]
There appears to be an actual email worm in circulation right now, using the tried-and-true infection method of sending malicious emails to all of the names in a user’s email address book.
Microsoft’s September batch of security patches will include fixes for 13 documented vulnerabilities affecting Windows, Internet Information Services (IIS), and Microsoft Office.
Attackers are using a previously unknown exploitation technique that bypasses both ASLR and DEP to exploit the unpatched Adobe Reader bug that Adobe warned users about on Wednesday. The exploit works on machines running either Windows Vista or Windows 7 and is also dropping a file on compromised machines that is signed using a stolen, valid digital certificate.
A federal magistrate judge has recommended that Microsoft be given
ownership of 276 internet addresses used to control “Waledac,” a massive
botnet that the software company has been working to bring down. Read the full article. [The Register]
Adobe today sounded an alarm for a new zero-day flaw in its PDF Reader/Acrobat software, warning that hackers are actively exploiting the vulnerability in-the-wild.
Mobile attacks may have reached a tipping point, as researchers observe search engine optimization used to spread a malicious program for mobile devices running the Android operating system.
If you’ve fallen victim to a driveby download, phishing attack or virus laden PDF attachment, don’t despair: you’re in good company, according to a study sponsored by anti malware firm Symantec Corp. The anti virus software found that a whopping 73 percent of Internet users in the U.S. they surveyed identified themselves as victims of cybercrime…and feel really bad about it.
Apple has shipped Safari 5.0.2 and Safari 4.1.2 with patches for three gaping holes that expose Web surfers to drive-by download attacks.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
