Researchers recently came face to face with a Trojan with an aggressive
modus operandi – it continually forces you to update your banking
credentials with irritating pop up windows. Read the full article. [Help Net Security]
When security professionals flock to San Francisco for next week’s RSA 2010 security conference, they will have access to a set of presentations and events not found on the official RSA agenda. It’s billed as an anti-conference of sorts; a place where practitioners can go for an alternate, stripped-down view of the industry. Welcome to Security B-Sides. Read the full article. [CSO]
An update which fixes around 40 bugs is available for the PHP 5.2
development branch. Version 5.2.13 comes highly recommended for all PHP
5.2.x users, as it includes a number of security-related fixes. Read the full article. [The H Security]
The RSA security conference is known for being a vendor-heavy, corporate-speak shindig that lacks quality content. I disagree. I spent some time perusing the conference agenda this year and found 15 must-attend sessions:
To improve the chances of installing their malware on random computers,
scareware peddlers have decided to set up more that 60 websites that
contain hundreds of possible search matches for hot, trending topics. Read the full article. [Help Net Security]
Guest editorial by Roel SchouwenbergOver the last few months, there’s been quite a lot of news chatter around Banker Trojans emptying out online bank accounts of small businesses in the U.S. Today, I was reading one of such stories on Brian Krebs’ site. After reading that story I came across another news item that described booting from an alternative media to experience safe internet banking.
The Koobface botnet is the tip of the iceberg for the
malicious operations of the online crime ring. Here are the top 10 things you
didn’t know about the Koobface gang. Read the full article. [ZDNet]
Supposed footage of Wednesday’s fatal Sea World killer whale attack in Florida actually points at sites distributing scareware. Read the full article. [The Register]
Secunia reports a hole in Google’s Picasa image management and editing software that allows attackers to compromise Windows using specially crafted JPEG images to provoke an integer overflow in the PicasaPhotoViewer.exe file, which can then be exploited to cause a heap overflow. Google closed the hole in the recently released Picasa 3.6 build
105.41, although Google’s release notes say nothing about a fix. Read the full article. [The H Security]
With the help of a U.S. federal judge, Microsoft has struck a blow against one of the Internet’s worst sources of spam: the notorious Waledac botnet. Microsoft said that it had been granted a court order that will cut off 277 .com domains associated with the botnet. Read the full article. [Computerworld]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
