Between January and March 2010, Facebook was the first social networking
site to have made it into the list of top targets for phishing attacks.
With 5.7% of all phishing attacks, Facebook took fourth place behind
the traditional phishing targets PayPal, eBay and international bank
HSBC, said researchers. Read the full article. [The H Security]
For the past 20 months, Carnegie Mellon University’s Human Computer Interaction Institute has been measuring referrals from phishing sites to an education page set up by the Anti-Phishing Working Group (APWG). Hong said the site now receives close to 25,000 referrals per month from phishing sites that brand owners have modified. Read the full article. [KrebsonSecurity]
Scientists have devised a chip design to ensure microprocessors haven’t
been surreptitiously equipped with malicious backdoors that could be
used to siphon sensitive information or receive instructions from
adversaries. Read the full article. [The Register]
Computer scientists at the University of Hertfordshire have found a way
to share information online securely for a fraction of the cost of
existing systems. Researchers working in collaboration with the
University of Aston, have been awarded a UK patent for a fibre optics
system which uses a ‘beacon’ to enable cryptic communication between two
users online. Read the full article. [Science Daily]
IT professionals are fearful that sensitive data will fall into the
wrong hands if cloud-based services are used by their organizations, but
many acknowledge that the risks are being ignored by some employees who
may already be using cloud computing, according to a new survey. Read the full article. [TechTarget]
Internet Explorer 9 and Firefox 4 will support
it, and Microsoft recently touted its advantages. But the upcoming
version of HTML, which builds rich Internet application features into
the Web programming language and shifts more Web functions to the client
machine, also could open up new Web attack vectors. Read the full article. [Dark Reading]
The FBI’s top anti-cyber crime official today said the
agency is planning a law enforcement action against so-called “money
mules,” individuals willingly or unwittingly roped into helping
organized computer crooks launder money stolen through online banking
fraud. Read the full article. [KrebsonSecurity]
The U.S. Senate has approved Lt. Gen. Keith Alexander, director of the
National Security Agency, to also head the military’s recently created
U.S. Cyber Command. Read the full article. [Computerworld]
Adobe joined the Patch Tuesday train today with the release of patches for at least 21 documented security vulnerabilities in the Shockwave and ColdFusion product lines.
A now-closed Facebook exploit took advantage of cross site scripting to inject malicious code into Yelp. Normally such an attack wouldn’t have particularly broad implications for Facebook users, but Yelp is one of the three sites that have been deemed fit for Facebook’s highly controversial Instant Personalization feature. Read the full article. [TechCrunch]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
