Microsoft’s warning of a vulnerability in its XML Core Services 3.0, 4.0, 5.0 and 6.0 that allows remote code to be executed if a victim is convinced to visit a malicous Web site using Internet Explorer. The actively exploited security hole affects all supported Windows releases and all supported editions of Office 2003 and 2007.
Privileged accounts have become an important attack vector, and if a recent survey of mostly IT managers and executives is any indication that threat will continue to grow.
According to results of ID management provider Cyber-Ark’s sixth annual global “Trust, Security and Passwords Survey,” just under half of 820 respondents admitted if they were fired tomorrow, they’d walk out with proprietary data such as privileged password lists, company databases, R&D plans and financial r
A new Anonymous-styled hacktivist group, SpexSecurity, has surfaced and then vanished, but not before allegedly siphoning the personal information of over 100,000 residents of a Tennessee town, including individuals’ e-mail passwords, social security numbers and birth dates.
In the June 2012 edition of Patch Tuesday, Microsoft shipped seven security bulletins, of which, only three were deemed worthy of a critical rating.
If a newly released survey is any indication, publicized data breaches aren’t enough to prompt small businesses to better protect their customer or employee data.
A survey released this week by The Hartford found 85 percent of small business owners believe a data breach is unlikely and often lacked even basic measures to secure sensitive data.
A new survey conducted by a credit card comparison Web site indicates consumers continue to be lax when it comes to guarding against identity theft.
The attackers behind the Flame malware used a collision attack against a cryptographic algorithm as part of the method for gaining a forged certificate to sign specific components of the attack tool. Microsoft officials said on Tuesday that it’s imperative for customers to install the update issued for the problem on Sunday, as it’s possible for other attackers to exploit the same vulnerability without using the collision attack.
In addition to watching what you say at the office, you may want to be extra careful what you post about work on blogs, Facebook, YouTube and Twitter.
This admonishment is not new, but a Gartner report predicts up to 60 percent of corporations worldwide will monitor employees’ social media use for security breaches within the next three years. Currently, only 10 percent of companies keep tabs on what employees say about them online and its mainly as reputation, rather than risk, management.
Serco Inc., a well-known contractor working with the U.S. government, announced that it was the target of a sophisticated attack that exposed data on 123,000 civil employees of the Federal government and their families, including names, addresses and social security numbers taken from the company’s system.
On the list of things made obsolete by the Internet, signatures are right up there with paperback books and the postal service, but the Microsoft Malware Protection Center decided to dig deeper into the signature of Carl A. (unreadable last name) anyway and see why it keeps turning up in malware samples.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
