Browser Attacks Continue to Evolve
While the security teams at Microsoft, Mozilla and the other browser vendors continue to work on new defenses and exploit mitigations, the state of the art in attacks is continuing to evolve.
Malware
Paul Roberts on the Decade in Security
Dennis Fisher talks with Paul Roberts of The 451 Group about the changes that the last decade has brought in computer security, the biggest story of the ‘00s and what the Teens might hold.
Network Weaknesses Exposed at 26C3 Berlin
At the 26th Chaos Communication Congress in Berlin, security researcher Fabian Yamaguchi demonstrated a number
of vulnerabilities that can apparently be found in many average
communication networks and affect all levels from the access layer to
the application layer. Read the full article. [The H Security]
If you’ve been doing some last minute Amazon holiday shopping on Wednesday evening, you’ve probably noticed that Amazon’s web site was sluggish and, at times, completely down; The same fate greeted Wal-Mart, Expedia, and a number of smaller sites. Read the full article. [Mashable]
Even the latest images in Google’s reCAPTCHA can be cracked with sufficient reliability to allow protective services to be exploited. Read the full article. [The H Security]
Hackers have exploited flaws in a popular
open-source advertising software to place malicious code on
advertisements on several popular Web sites over the past week. Read the full article. [Computerworld]
Cybercrime affiliates of unlicensed pharmaceutical websites have begun
moving on from attacks purely designed to poison Google search engine
results, and are now targeting Microsoft’s web properties. Read the full article. [The Register]
By Dmitry BestuzhevThe day before yesterday, we saw reports about how search engine queries for “Brittany Murphy” returned sites containing links to malware. So it’s the usual situation, with the bad guys exploiting the death of a famous person, just like they did with Michael Jackson.
Stephen Watt, a 25-year-old former Morgan Stanley software engineer,
pleaded guilty last December to creating a custom sniffing program
dubbed “blabla” that Albert Gonzalez and other hackers used to siphon millions
of credit and debit card numbers from TJX’s network; Watt received a 2 year Federal prison sentence. Read the full article. [Wired]
A former Massachusetts prison inmate has been given an 18-month prison
sentence for hacking prison computers while he was incarcerated. Read the full article. [Computerworld]
