There is a critical vulnerability in the Opera browser that could be used by an attacker to execute arbitrary code on vulnerable machines. The bug affects the latest version of Opera running on Windows 7, as well as Windows XP SP3.
Attacks
that use search engine optimization to push malicious pages into the top rankings on search engine results are on the rise in 2011, but new research from zScaler suggests that efforts to identify and block the pages are paying meager dividends.
If a Web site leaves sensitive data hanging out in the open, can you still be accused of hacking when you grab it? Turns out, the answer is “hell, yeah!” But lots of people still do it.
Stuxnet chat saturated the news this week after the New York Times got the cyber security echo chamber going with a story delving into the mysterious worm. But Stuxnet was hardly the only news this week, which also saw new research from the Black Hat Briefings conference in Washington D.C. and progress on the strange disappearance of security researcher Dancho Danchev. Read on for the full week in review.
By Alex RothackerJanuary 18th marks the 6th anniversary of the Oracle Critical Patch Update (CPU) in its current form as a quarterly patch. For those who remember, before the CPU, Oracle released patches as Security Alerts, the last being Security Alert 68 at the end of August 2004.
The Zeus Botnet continues to evolve and shift in focus from
its traditional targets, banks and their customers, to other money-handling
institutions like electronic money and online payment systems, according to a new
report.
The shift has been going on for months and likely follows
policy moves by banks to protect themselves and their customers from the
malicious theft of personal and financial information.
ARLINGTON, VA–Pulling valuable data out of corporate networks is the end goal of many, if not most, attacks these days and the tactics that attackers use to get into their targets are fairly well understood and publicized. But it’s not often that you get a look at the way that the data is actually removed from the victims’ networks.
ARLINGTON, VA–A number of researchers showed off interesting new attack techniques at the Black Hat DC conference this week, including one that enables an attacker to execute malicious code on handsets over the air.
A fast-moving Twitter worm is in circulation, using Google’s goo.gl redirection service to push unsuspecting users to a notorious scareware (fake anti-virus) malware campaign.At 8:45 a.m EST today, this Twitter search shows thousands of Twitter messages continuing to spread the worm.
Data suggests that 2010 was a year of “more of the same” when it comes to computer threats, but 2011 likely won’t be, at least according to networking giant Cisco Systems, which released its Annual Security Report on Wednesday.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
