Google Joins List of Companies with Most Software Holes
With Web based software vulnerabilities on the rise, Google displaces HP on the list of vendors with the most reported software holes in the first half of 2010.software vulnerabilities.
Malware
Exploit Code, List of Apps Vulnerable to DLL Hijacking Hit the Web
The list of applications known to be vulnerable to the Windows DLL-hijacking bug is growing by the hour, with some sites listing more than 30 vulnerable applications right now. A large portion of the known vulnerable apps belong to Microsoft, including PowerPoint 2010 and Microsoft Live Email.
Adobe Patches 20 Security Holes in Shockwave Player
Adobe has shipped a Shockwave Player update to fix 20 security holes, some serious enough to lead to system takeover attacks.
The vulnerabilities, rated “critical,” affect Shockwave Player 11.5.7.609 and earlier versions for Windows and Macintosh.
The UK operation of Zurich Insurance has been fined £2.27m by the Financial Services Authority (FSA) for losing personal details of 46,000 customers. It is the highest fine levied on a single firm for data security failings. Read the full article. [BBC News]
Malware may be difficult to define but, as former U.S. Supreme Court Justice Potter Stewart famously quipped about pornography “you know it when you see it.” At least that’s the position being taken by Google and anti malware firms about two applications designed for mobile phones running Google’s Android operating system. Now the developer is crying foul.
An in-depth survey carried out amongst 100 of those attending this year’s DEFCON conference revealed that an overwhelming 96 percent of the respondents said they believed the cloud would open up more hacking opportunities for them. Read the full article. [Help Net Security]
Two ATM manufacturers have released software updates to address the remotely exploitable vulnerabilities in their machines’ firmware that IOActive researcher Barnaby Jack demonstrated line on stage at the Black Hat conference last month.
A virus-carrying USB thumb drive has been implicated in the 2008 crash
of a Spanish jetliner, the deadliest air disaster in Spanish history. Read the full article. [El Pais]
In the long-awaited return of the News Wrap podcast, Threatpost’s newest editor, Paul Roberts, makes his debut as he and Dennis Fisher discuss the Network Solutions parked domains hack, the troubling attacks emerging on smartphone platforms and the odd story of a Trojan-infected PC being linked to a 2008 airplane crash.
Virus authors have developed a strain of malware that attempts to con users into uninstalling legitimate security packages. Read the full article. [The Register]
