Robert Mueller, Director of the Federal Bureau of Investigation, will deliver a keynote address at RSA Conference 2010 that will detail cyber threats through the years – from criminal threats like computer intrusions and identity theft to the use of the Internet by extremists and hostile foreign powers. Read the full article. [Help Net Security]
Web site domain registrar and hosting provider Network Solutions acknowledged that hackers had broken into its servers and defaced hundreds of customer Web sites. The hackers appear to have replaced each site’s home page with anti-Israeli sentiments and pictures of masked militants and armed with rocket launchers and rifles, along with the message “HaCKed by CWkomando.” Read the full article. [KrebsonSecurity]
According to a statement by D-Link, firmware updates for its DIR-635
(HW-Revision B), DIR-655 (HW-Revision A1-A4) and DIR-855 (HW-Revision
A2) router models are now available to download at to close the
recently discovered hole in the Home Network Administration Protocol
(HNAP) of these devices. Read the full article. [The H Security]
Security researchers are continuing to delve into the details of the malware that’s been used in the attacks against Google, Adobe and other large companies, and they’re finding a complex package of programs that use custom protocols and sophisticated infection techniques.
The developers behind the OAuth protocol have developed a new variant called OAuth WRAP that is simpler and easier to implement. It’s a stop-gap solution that will enable broader OAuth adoption while
OAuth 2.0, the next generation of the specification, is devised by a
working group that is collaborating through the Internet Engineering
Task Force (IETF). Read the full article. [Ars Technica]
Jonathan Ness of Microsoft’s Security Research and Defense team explains the inner workings of the Data Execution Prevention technology that can help mitigate the targeted attacks exploiting the vulnerability in Internet Explorer right now.
Ryan Naraine and Dennis Fisher discuss the Google attack, the Internet Explorer vulnerability used in the attack and the continuing weakness of client security.
Booby-trapped PDF files, posing as messages from the US Department
of Defense, were emailed to US defence contractors last week. The
document refers to a real conference due to be held in Las Vegas in
March. Read the full article. [The Register]
It’s tax season, and that means IRS-related phishing scams are ramping up. One such fake e-mail hitting in-boxes this past week asks
“U.S.-based employers” to complete an “updated” version of the
government’s W-2 form because of “important changes” within the forms. Read the full article. [Pittsburgh Post-Gazette]
Security reporter Brian Krebs goes visual with ATM skimmers, asking readers to look at images and see if they would be able to tell the difference between a real ATM card reader and actual skimming devices. Read the full article. [KrebsonSecurity.com]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
