According to a posting on the CPAN Testers’ blog, the CPAN Testers’ server has been being aggressively scanned by “20-30 bots every few seconds” in what they call “a dedicated denial of service attack”; these bots “completely ignore the rules specified in robots.txt”. Read the full article. [The H Security]
Security measures such as the use of one-time passwords and phone-based user authentication — considered among the most robust forms of IT defenses — are no longer enough to protect online banking systems against fraud, a Gartner report warns. Read the full article. [Computerworld]
Hackers linked to China used a zero-day vulnerability in Microsoft’s Internet Explorer browser to compromise corporate systems at more than 30 U.S. companies, including Google, Adobe and Juniper Networks.According to Microsoft, the vulnerability is still unpatched and can lead to remote code execution attacks if a target is lured to a booby-trapped Web site or views a malicious online advertisement.
In response to the security hole in several versions of
Internet Explorer (IE), the German Federal Office for Information
Security is recommending that Internet Explorer users should switch to an
alternative browser until a patch for IE has been made available. Read the full story [The H Security]
A Romanian national pleaded guilty to a charge related to a
phishing operation that sought to defraud customers of banks such as
Citibank and Wells Fargo, and of Web sites such as eBay. Read the full article. [Computerworld]
Lincoln National Corp. (LNC) last week
disclosed a security vulnerability in its portfolio information system
that could have compromised the account data of approximately 1.2
million customers. Read the full article. [Dark Reading]
A former London pizza delivery man, Renukanth Subramaniam, 33, faces a 10-year prison sentence
after admitting he helped found the notorious DarkMarket forum for
computer crime. Read the full article. [The Register]
Several of the companies victimized in the attack that hit Google and dozens of other companies recently were compromised through the use of a new, unpatched vulnerability in Internet Explorer, experts say.
The FBI today reminds Internet users who receive appeals to donate
money in the aftermath of Tuesday’s earthquake in Haiti to apply a
critical eye and do their due diligence before responding to those
requests. Read the guidelines. [FBI.gov]
A day after confirming a major security breach by Chinese hackers looking for GMail account information, Google has turned on default “https:” access for its popular Web mail service.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
