Attackers Exploiting Windows Help Center Flaw
Researchers have found evidence that attackers are exploiting the vulnerability in the Windows Help and Support Center that was at the center of so much controversy last week.
Malware
Stolen Keylogged Info Being Openly Shared
Keystroke-logging computer viruses let crooks steal your passwords, and
sometimes even read your e-mails and online chats. Recently, however,
anonymous criminals have added insult to injury, releasing a keylogger
that publishes stolen information for all the world to see at online
notepad sharing sites such as pastebin.com. Read the full article. [KrebsonSecurity]
SQL Injection Attacks Aimed at Stealing Gaming Credentials, Experts Say
The mass SQL injection attack that has been ongoing for a week or so now is designed mainly to steal credentials for online games and is quite well planned and organized, experts say.
A hacker tried to frame his neighbor by tapping into his Wi-Fi and
sending threatening emails to US vice president Joe Biden, according to
search warrant affidavits unsealed recently. Read the full article. [The Register]
The developers of the open source IRC server UnrealIRCd have had to report that the file servers of the project were compromised several months ago and the IRC servers code, Unreal3.2.8.1.tar.gz was replaced by a version with a backdoor. The backdoor allows anyone to execute commands on the server running UnrealIRCd. Read the full article. [The H Security]
The U.S. Federal Bureau of Investigation has opened an investigation
into the leak
of an estimated 114,000 Apple iPad user e-mail addresses including those of Chief of Staff Rahm Emanuel, ABC ABC News anchor Diane Sawyer and NY Mayor Michael Bloomberg. Read the full article. [IDG News Service]
Had you gone to sleep in 2004 and woken up three days ago, you’d be forgiven for thinking you’d only slept a few hours instead of a few years. This week saw the inglorious return of not just the full disclosure debate, but also of the heated rhetoric that usually accompanies it. Had you awoken to a mix of Maroon 5 and Hoobastank on your iPod, the illusion would’ve been complete. Read on for the full week in review.
French researchers have developed an automated
social engineering tool that uses a man-in-the middle attack and strikes
up online conversations with potential victims. Read the full article. [Dark Reading]
Adobe has shipped a “critical” Flash Player update to fix a total of 32 documented vulnerabilities in the ubiquitous software product.
Webmasters running unfinished modules for Drupal do so at their own risk
after the open-source CMS updated its guidelines on fixing security
vulnerabilities. Read the full article. [The Register]
