Officials at Comodo have acknowledged that an additional two registration authorities affiliated with the company have been compromised in the wake of the high-profile attack on the company that was disclosed last week. However, no forged certificates were issued as a result of the new attacks.
A Krebsonsecurity piece looks into the unknown party behind the Rustock botnet, and whether it may have been operated by just one person.
A recent audit of NASA’s computer network found the agency’s infrastructure fraught with security holes, many of which have been known about for months, yet remain unpatched, according to a report by the space agency’s Office of the Inspector General (OIG).
The unnamed hacker who has taken credit for the attack on Comodo last week that resulted in a number of fraudulent certificates being issued for high-value sites belonging to Google, Yahoo and Microsoft has posted the certificate that he issued himself for a Mozilla domain, as well as the private key for that certificate, in an effort to prove his claims.
The Web site MySQL.com and other Web servers belonging to Oracle Corp.’s Sun Microsystems division were compromised on Sunday by Romanian hackers who took advantage of a SQL injection vulnerability in an application running on the server.
Someone claiming to be the person behind last week’s attack on a registration authority tied to Comodo
has posted an explanation of the methods he supposedly used and the
reasons for the attack. The rambling, disjointed message claims that the
Comodo attack was not the act of an organized, state-sponsored group,
but was instead the work of a lone actor who stumbled upon a way in.
Just days after news emerged of the attack on a registration authority in Europe tied to Comodo
that caused the revocation of a number of fraudulent certificates from
the major browsers, Mozilla officials have admitted that they made a
mistake by not disclosing the details of the incident to its users
earlier.
Google has released a new version of its Chrome browser, fixing six high-risk security bugs in the process and paying out $8,500 in bug bounties along the way.
Users of free music streaming service, Spotify are reporting that they have been the victims of drive-by malware attacks according to a report from Netcraft.
Since organizations started opening their internal applications to the Web, a little more than a decade ago, it became clear that the security of those connected applications would be more complex – and critical to get right – than before.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
