Black Hat DC: Researcher Cracks Secure Microchip
The ultra-secure technology used to protect
some of the world’s most commonly used microchips might not be so
secure, a researcher said at Black Hat DC. Read the full article. [Dark Reading]
Malware
80K Records’ Breached in Iowa Gaming Hack
Around 80,000 Iowa employee names, birth dates and social security numbers have been exposed after an Iowa Gaming Commission server was hacked. Read the full article. [Secure Computing]
XSS Flaws Found in Cisco Tools
An advisory discloses a vulnerability that could affect large numbers
of organizations using Cisco’s Secure Desktop security package and
leave users of the product open to potential Cross-Site Scripting (XSS)
attacks. Read the full article. [Help Net Security]
The majority of online banking customers reuse their online-banking
login credentials on other websites, according to a new survey on
password insecurity. Read the full article. [The Register]
At Black Hat DC, Foreground Security Senior Security Researcher Mike Bailey will examine Flash’s security model and take a look at some of the ways attackers can leverage Adobe Flash vulnerabilities to compromise a system. Read the full article. [eWEEK]
Underscoring a little-known web vulnerability, hackers are exploiting a
weakness in the Mozilla Firefox browser to wreak havoc on Freenode and
other networks that cater to users of internet relay chat. Read the full article. [The Register]
More than 300 Web sites are being pestered by infected computers that are part of the Pushdo botnet, according to security researchers. Read the full article. [Security Central]
By Magnus KalkuhlHave you ever found a false positive when uploading a file to a website like VirusTotal? Sometimes it happens that not just one scanner detects the file, but several. This leads to an absurd situation where every product which doesn’t detect this file automatically looks bad to users who don’t understand that it’s just false positives.
Google may have threatened to leave China in order to keep us all from concluding that “the cloud” can’t be secured. But isn’t that precisely what we should conclude based on the fact that Google chose to leave China? Read the full article. [Computerworld]
MOSCOW — Attackers have been focusing a lot of attention on social networking destinations such as Facebook, Twitter and even LinkedIn for some time now, but they recently have begun shifting their tactics to make their attacks much more effective and precise through the use of geolocation and profiling.
