Vulnerabilities


Rustock Author May Be Former Google Hopeful

As Microsoft’s crusade against the Rustock botnet continues, a new article from Brian Krebs claims the formerly prolific botnet’s author may be a self-described mathematician and software engineer who once sought employment from Google.

Pentagon Adds Cyber-Weapons to List of Arms

The Pentagon is compiling a list of offensive cyber-weapons capable of deliberately crippling or destroying an adversary’s critical infrastructure according to a recent report in the Washington Post.This collection of cyber weapons is part of a broader list of weapons approved by the Pentagon for use against America’s enemies.


More than a month after suffering an “external intrusion” that shut down the PlayStation Network (PSN), Sony announced today that it will fully restore PSN services by the end of the week in most countries. However, PSN users in Sony’s native Japan will have to wait, as the Japanese government awaits proof that the company has fixed the security issues leading to the breach.

A high-profile attack on PBS, the U.S. Public Broadcasting System, was made possible by a previously unknown hole in the MoveableType content management software, according to the hacking group that claimed responsibility for the hack.

An internal document listing the backdoor accounts for switches manufactured by networking equipment vendor Allied Telesis was circulating online Friday, a day after an internal support page providing instructions on accessing hard coded back door accounts in the company’s products was found to be publicly accessible.

With all of the talk around the importance of web and application security, why is there so little focus on the corporate databases, which store the most valuable data? Last week, at the annual Computer Enterprise and Investigations Conference, Threatpost had the opportunity to sit down with noted security and database expert David Litchfield to find out. During his career, Litchfield has uncovered hundreds of vulnerabilities in software from IBM, Microsoft, and Oracle. He’s perhaps best known for his database security research.