Goal.com, a popular football (aka “soccer” for all us Yanks) news site was hacked and found serving malware via drive-by-downloads between April 27 and 28, according to a post by Web security firm Armorize.
A breach that started with the PlayStation Network has also affected Sony Online Entertainment’s 25 million customers, the company acknowledged on Tuesday.
A U.S. Department of Justice audit of the FBI’s ability to investigate cyber intrusions concluded that the agency is not doing an adequate job.
Mozilla has released the first update to their Firefox browser since making Firefox 4 available in March. Firefox 4.0.1 fixes three security and stability issues, two that are rated critical.
Amazon’s multi day outtage on its Elastic Computer Cloud (EC2) started with a faulty upgrade to one of its East Coast facility just after midnight on April 21, the company admitted in a blog post on Thursday.
A new report suggests that lawmakers, policy wonks and
corporations are sensationalizing the risk of cyber attacks far beyond the
actual threat. The inflation of cyber security threat, like the inflation of the threat of Communism during the Cold War, or terrorist acts in the wake of the 9/11 attacks, could lead to laws
that curtail individual freedoms and regulate the Internet in
unnecessary ways, the report concludes.
Cisco published an advisory report yesterday detailing multiple vulnerabilities in there Unified Communications Manager.
There are three denial of service vulnerabilities that affect session initiation protocol services, two SQL injection vulnerabilities, and a directory transversal vulnerability.
These bugs affect versions 6-8 of Cisco’s Unified Communications Manager.
The DoS bugs are triggered by a malformed SIP message that could cause a critical process to fail, resulting in the failure of voice services.
Google has released another new version of Chrome that fixes a total of 27 different bugs on various platforms. The company paid out $16,500 in bounties to researchers for the vulnerabilities they reported, including one $3,000 payment for a high-severity bug.
The official line in Washington D.C. is that there’s a new Cold War brewing, with an ascendant China in the place of the old Soviet Union, and cyberspace as the new theater of war. But work done by an independent security researcher suggests that the Chinese government is woefully unprepared to fend off cyber attacks on its own infrastructure.
The FBI is warning businesses about an ongoing spate of attacks that are stealing millions of dollars from companies through unauthorized bank transfers to Chinese companies. The fraudulent wire transfers are not a new tactic, but the FBI says the current round of attacks is notable in that virtually all of the transfers are going to shell companies based in China and have cost U.S. businesses $11 million.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
