A flaw in the module pam_motd (message of the day), which
displays the daily motto and other information after login (to the
shell), can be exploited under Ubuntu to expand access rights. Read the full article. [The H Security]
An anonymous group of security researchers last
week published information about an unpatched Windows bug, saying that
they were disclosing the vulnerability because of the way Microsoft
treated a colleague. The flaw in Windows Vista and Server 2008
could be used by attackers to gain unauthorized access to a PC or cause
it to crash. Read the full article. [Computerworld]
There’s a new attack technique in use right now that enables attackers to inject Trojan code onto victims’ machines by disguising it as a Windows input method editor (IME).
Cybercrooks have developed regionally-targeted banking Trojans that are
more likely to slip under the radar of security defenses. Read the full article. [The Register]
A security researcher has found a way to circumvent Adobe Systems’ effort to address the /launch action issue that made headlines a few months ago. Read the full article. [eWEEK]
The infection routines being used by some scareware and rogue AV gangs are much more comprehensive and far-reaching than many current analyses have shown, experts say, including some attacks that not only place a malicious script on a compromised server, but infect every single legitimate script on the server, as well.
Scareware purveyors’ top target for today: Twilight fans using Google to
search for show times, sound tracks and all things related to latest
movie about young vampire lovers. Read the full article. [The Last Watchdog]
Attackers are ramping up their attempts to exploit the recently disclosed vulnerability in the Windows Help and Support Center in Windows XP. There have been targeted attacks against the flaw for two weeks now, but experts have noticed a major increase in the volume and spread of them in recent days.
Guests who recently stayed at Destination Hotels & Resorts may have been
victimized by compromised
point-of-sale systems. The company refused to release many details of
the incident citing an ongoing investigation by the FBI. In a note posted to its Web site said that it had “uncovered a malicious
software program inserted into its credit card processing system from a
remote source.” Read the full article. [Computerworld]
A developer figured out that Foursquare had a privacy leak because of how it published user check-ins on web pages for each location. He logged 875,000 in San Francisco. Foursquare is aware of the bug. Read the full article. [Wired]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
