Children, the New Hot Commodity in the Business of Identity Theft?
Evidently the kids are not alright. At least, that is when it comes to the increasingly lucrative identity theft black market.
Vulnerabilities
RSA: SecurID Attack Was Phishing Via an Excel Spreadsheet
RSA confirmed on Friday that the attack that compromised the company’s high-value SecurID product was essentially a small, targeted phishing campaign that included a payload of a malicious Flash object embedded in an Excel file.
Security Threats Increasing in Sophistication and Precision
IBM’s X-Force 2010 Trend and Risk report showed that as vulnerability disclosures hit their highest level ever in 2010, security threats continued to increase in sophistication and precision.
Security firms are warning about a fast-spreading Web based attack that has been linked to the installation of rogue anti virus products.
There’s a grand tradition in the security community of clever, cerebral and sometimes downright inane April Fool’s pranks. They often take the form of fake news stories about viruses, world-ending attacks or something involving Bruce Schneier and Chuck Norris. But the security world is bizarre enough on its own without any help, so we’ve collected some of the stranger, scarier and more entertaining true stories of recent times that we wish had been April Fool’s jokes.
Google has added a new security feature to the latest versions of its Chrome browser that will now warn users when the browser encounters out-of-date plugins and will automatically disable them.
In the more than nine years since Bill Gates’s Trustworthy Computing email kicked off Microsoft’s comprehensive, company-wide security initiative, the company has not only committed a tremendous amount of money and resources to the project but also has been quite open and public about the process. This week, Microsoft released its first major report on the progress and changes in the Security Development Lifecycle program, detailing not only its progress but also the things that still need to be improved.
Facebook like-jacking scams are popping up in a wider variety of languages, according to research by Kaspersky Lab.
The panic that arose yesterday about Samsung allegedly shipping laptops that contained a pre-installed keylogger turns out to have been a complete mistake after further investigation by security researchers and the company itself. In fact, the controversy was the result of a false positive from one commercial antimalware suite and nothing else.
In his talk at the TED2011 Conference, Ralph Langner, a control systems security expert, discusses the work he and his team did to tear apart the Stuxnet worm and work out exactly what it does and what it’s target and ultimate purpose were.
