Adobe is warning its users about a critical vulnerability in Flash that affects Adobe Reader and Acrobat, as well. The bug can be used by remote attackers to run arbitrary code and Adobe officials said that they’ve already seen some attacks that are targeting the vulnerability.
Web sites are chronically insecure, according to new data from security firm WhiteHat Security.
There is a wave of ongoing attacks against a bug in MHTML that affects all of the current versions of Windows, and there seems to be little recourse for sites trying to protect their users from the attacks.
Google has patched one of the vulnerabilities that a team of researchers used last week to win one portion of the Pwn2Own contest at CanSecWest. The bug is in the WebKit rendering engine.
The latest version of Microsoft’s Internet Explorer promises to make it harder for malicious hackers to push dodgy Web applications onto end user systems, with a new Application Reputation filter.
One of the greatest knocks on the information security profession is that IT security is always asking for budget to spend against the latest threat, only to abandon the cause like harried firefighters, jumping from one conflagration to the next.
VANCOUVER–For the fourth consecutive year, researcher Charlie Miller won one of the prizes at the annual Pwn2Own contest here. The difference this time is that Miller successfully exploited an iPhone 4 to win, rather than Safari, which he’s gone after the last three years. The BlackBerry Torch 9800 also was taken down, by a multinational team of researchers who were able to exploit the device’s browser by chaining three exploits together.
The annual Pwn2Own contest at the CanSecWest conference kicked off Wednesday and one of the winners this year was Stephen Fewer, who exploited Internet Explorer 8 on Windows 7. Dennis Fisher spoke with him about the contest, the challenge of attacking IE 8 and the utility of memory protections.
A Hong Kong based developer of games for mobile devices says that its online, multi player games are being besieged by users making fraudulent purchases from compromised iTunes accounts and says that iPhone maker Apple has turned a deaf ear to its efforts cut off the bogus activity.
VANCOUVER–On the first day of the Pwn2Own contest here, contestants were able to take down both Safari on Mac OS X and Internet Explorer 8 on Windows 7. None of the researchers decided to try their hand against Google Chrome, however, so that browser was the only one still standing after day one.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
