“The marketplace for hacker exploit kits is getting more crowded according to research by Kaspersky Labs, which found that new tools with names like SEOsploit and Crimepack are challenging the dominance of legacy tools like the Phoenix, Eleonore, Neosploit, YESExploit, and Liberty kits.
SAN FRANCISCO — Mobile phones, tablet PCs and other new technologies are poised to take over the workplace, but organizations that hope to secure them before they do so face an uphill battle, according to a symposium on mobile security.
SAN FRANCISCO–The vulnerability disclosure and patching arms race that has developed in the last decade or so in the security industry has made life extremely difficult not just for the developers writing code, but also for the folks who are interested in helping to fix broken applications. A new model and mindset is needed to help solve the problem.
There’s a vulnerability in the Kerberos implementation in several versions of Ubuntu, which could allow an attacker to cause a denial-of-service on vulnerable servers. The bug is in Ubuntu 8.04, Ubuntu 9.10, Ubuntu 10.04 and Ubuntu 10.10.
The Stuxnet Worm attempted to infiltrate five industrial
complexes in Iran over a span of ten months according to a report in the New York Times
based on a Stuxnet
Dossier published by Symantec.
SAN FRANCISCO–Security is hard and getting it right all the time is nearly impossible. But many of the mistakes that people make are simple, avoidable ones that can lead to serious intrusions and major network compromises.
Email users may have experienced a serious decline in spam
over the past couple months, however, a Web security trends report by M86 Security released today at RSA in San Francisco says cybercriminals are coming
up with new and innovative methods of phishing as well as producing increasingly
robust and complicated exploit kits.
Four months after it first went public with a warning about widespread vulnerabilities in network security products, Stonesoft said it has found more than 100 new holes, and that security vendors are doing little to address the problem.
By Marc MaiffretReading the headlines today one could not help but notice the latest
installment of “scary Chinese hacker press” making the headlines. And
who can blame the news media for latching on to this story as it has all
the right ingredients: foreign governments targeting U.S. interests,
catchy nicknames like Night Dragon, connections to a previous scary
threat “Operation Aurora” and a timely announcement leading up to one of
the security industry’s biggest conferences in San Francisco next week,
RSA. Wait, what?
Google has introduced a new two-step authentication feature for Gmail users that it says will significantly increase the security of the free mail service. The system enables users to set up a method for obtaining a secret code that will be required, along with a password, to access a Gmail account.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
