One day after it released updates for its Firefox web browser, the Mozilla Project has issued versions 3.1.4 and 3.0.8 of Thunderbird, the latest stable and legacy branch updates of its popular open source email client. According to the developers, the latest maintenance updates improve the applications overall stability and address several user experience concerns found in the previous stable branch release. Read the full article. [The H Security]
Intel has confirmed Blu-ray HDCP encryption is cracked after
admitting a leaked master key is the real deal. High-bandwidth Digital Content Protection (HDCP) copy protection
technology is designed to protect high-definition video content as it
travels across digital interfaces. Read the full artcicle. [The Register]
Web insecurity was in the news this week, with a major flaw in the security of ASP.NET and some sobering statistics on Web site infections. When your bank account gets hacked – is it your fault? And, with a patch out for one of four (!) zero day exploits used by Stuxnet, security experts wonder if its the most sophisticated malware…ever!?
Adobe is cautioning its users about installing an unofficial patch for the Reader CoolType.dll bug that was released on Wednesday, saying that although the patch appears to prevent the crash in Reader, installing it could have some unintended consequences.
Apple patched a critical vulnerability in QuickTime that was
reported to the company by a bug bounty program months ago. Read the full article. [Computerworld]
The Linux kernel has been purged of a bug that gave root access to
untrusted users – again. Read the full article. [The Register]
As users await the Oct. 4 release of a patch for the CoolType.dll vulnerability in Adobe Reader, a software and security company has published an unofficial patch for the bug that essentially replaces the vulnerable DLL with a patched one.
A sophisticated worm designed to steal industrial secrets and disrupt
operations has infected at least 14 plants, according to Siemens. Read the full article. [IDG News Service]
Web anti malware firm Dasient has published data claiming that more than 1 million Web sites were compromised in the second quarter, 2010 – a sharp increase.
Security researchers have discovered another botnet that uses Twitter as a command and control channel. Read the full article. [The Register]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
