The remote-wipe capability that Google recently invoked to remove a harmless application from some Android phones isn’t the only remote control feature that the company built into its mobile OS. It turns out that Android also includes a feature that enables Google to remotely install apps on users’ phones as well.
An important milestone that should compel all social networks to be
much more diligent about preserving privacy and providing robust
security was established by federal regulators with Twitter. Read the full article. [The Last Watchdog]
This week was one of the ones that my colleague Ryan Naraine often refers to as a Patchapalooza, with each day bringing a new set of fixes for Firefox, Opera, the iPhone or some other device or application. And it didn’t even include Microsoft or Adobe. Go figure. The week also included the revelation of a major flaw in Firefox and the approval of a new cybersecurity bill in Washington. Read on for the full week in review.
An analysis of more than one million malware infections in the United
States shows Atlanta, Georgia and Birmingham, Alabama have the highest
malware infection rates in the United States. Read the full article. [Help Net Security]
A Twitter user has demonstrated a cross-site scripting (XSS) vulnerability on
the microblogging platform that could allow an attacker to take over
users’ accounts or spread malware. Read the full article. [Secure Computing]
As the events of recent weeks have shown, there is no better way to start a dumpster fire of an argument among a group of security people than to bring up the hideous, threadbare topic of full disclosure. No one is ambivalent about it; everyone has an opinion, and usually a strong one. But what’s become increasingly clear of late is that, in the era of sophisticated, highly targeted attacks, it just doesn’t matter.
Two teenagers have been arrested for their alleged involvement in the
world’s largest English-language cybercrime forum. Read the full article. [The Register]
An inside look at a California-based engineering company defrauded by an online banking Trojan, automated clearing house transfers, East-coast based money mules, yet the company was holding a cybersecurity insurance policy and looks to recover all of its stolen funds. Read the full article. [KrebsonSecurity]
Following delays, Mozilla has released version 3.6.4 of the Firefox web browser. Firefox 3.6.4 closes more than 225 bugs found in the previous update, addresses a number of critical security vulnerabilities and includes new crash protection technology from the Mozilla Lorentz Project. Read the full article. [The H Security]
A researcher at Black Hat USA next month plans
to give away a homemade tool that helps organizations glean intelligence about the attacker behind the malware that includes information about native tongue, geographic location, and
ties to other attacks. Read the full article. [Dark Reading]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
