Vulnerabilities


RSA’s SecurID Quandry: Replace or Recall?

RSA acknowledged on Monday that a hack at Lockheed Martin was tied to the theft of information on its SecurID tokens. The company offered to replace the tokens for customers, but experts wonder whether RSA should go further and recall SecurID tokens from the market.

Sony CEO Apologizes to Fans and Partners at E3

Sony Computer Entertainment of America’s President and CEO, Jack Tretton kicked off his company’s E3 conference appearance with an apology to all those affected by the outage that has plagued Sony for better part of the last two months.


It’s been about six months since I reported a vulnerability in the
Android mobile platform that allowed the unprompted installation of
arbitrary applications with arbitrary permissions on a victim’s device.
While the vulnerability has long been fixed on Android handsets around
the world, I’ve yet to write up any technical details about it, and it’s
unlikely you’ve heard of it unless you were present at our ShmooCon presentation earlier this year. So without further ado, let’s dive into “When Angry Birds attack: Android edition.”

Adobe has released an out-of-cycle update for Flash that fixes a serious vulnerability in the application on all platforms. The bug is a cross-site scripting flaw that can be used in drive-by download attacks and Adobe said that is being used in some targeted attacks right now.

Computer security experts have been forecasting the arrival of malicious programs that target Apple’s products for so long that they had begun to sound like the kind of Rapturistas and Mayan Calendar sleuths that we all (smartly) ignore. But if May didn’t bring Harold Camping’s Judgement Day, as predicted
(Update: its now October 21st, y’all!), it did prove those Apple
doomsayers correct as real Mac-focused crimeware and rogue antivirus
appeared in the wild.

The security woes for Sony are continuing unabated, and the latest entry in the laundry list of attacks against the company came Thursday when a group of hackers posted a large amount of data that it stole from databases belonging to Sony Pictures and a couple of other subsidiaries.