VMware Closes 10 Holes with Update
Virtualisation specialist VMware has released security updates for a number of its products, closing a total of ten security vulnerabilities. Read the full article. [The H Security]
Malware
WordPress Users Notice Malware Redirect Hacks
A large number of bloggers using Wordpress are
reporting that their sites recently were hacked and are redirecting
visitors to a page that tries to install malicious software. Read the full article. [KrebsonSecurity]
Black Hat Barcelona: Facebook Set to Keynote
The Black Hat security conference will kick off next week in Barcelona, with training sessions and briefings from some of the most talented security researchers in the industry. Facebook’s chief security officer, Max Kelly, is scheduled for a keynote presentation on Wednesday morning following two days of training sessions. Read the full article. [Computerworld]
A group of sophisticated identity thieves managed to steal more than $4
million by filing bogus tax returns using the names and Social Security
numbers of other people, many of them deceased, according to a 74-count
indictment unsealed in Arizona. Read the full article. [Wired]
Oracle has moved
Solaris onto its quarterly security patch schedule, meaning users of
the Sun Microsystems operating system will now know months in advance
when they will be getting security updates. The next Critical Patch Update is due on Tuesday. The update
will include 16 security fixes for Sun products, including Solaris, Sun
Cluster, Sun Convergence and the Sun Ray server software. Read the full article. [IDG News Service]
A proposal to let Internet service providers conceal the contact
information for their business customers is drawing fire from a number
of experts in the security community, who say the change will make it
harder to mitigate the threat from spam and malicious software. Read the full article. [KrebsonSecurity]
Customers of Countrywide Financial have filed a
class-action lawsuit over the 2008 data breach that enabled company
insiders to steal and sell their personal information. Read the full article. [Dark Reading]
The attackers behind the raft of banker Trojans emanating from Brazil these days are continuing to refine their craft and learn new tricks. Their latest efforts have seen them going to greater lengths than ever to obfuscate their creations and hide their true functionality in order to evade detection and analysis by security software.
Former State of Pennsylvania CISO Robert Maley has been watching all the news about his firing for talking about a security incident without permission at last month’s RSA conference. He began a talk on application security at CSO Perspectives 2010 by going off topic and addressing the controversy head on. Read the full article. [CSO]
A new type of cross-site scripting (XSS) attack that exploits commonly used network administration tools could be putting users’ data at risk, a researcher says. Read the full article. [Dark Reading]
