Vulnerabilities

Instead of indicating password quality via coloured bars, the Windows crypto tool Thor’s Godly Privacy (TGP) informs users about the estimated time required for a successful brute-force attack on the chosen password. Read the full article. [The H Security]

Privacy shortcomings in Chatroulette expose users to risks in phishing, man-in-the-middle attacks and location-based threats,
according to a study by security researchers. Read the full article. [The Register]

Developers could build a framework that could maintain transactional records among web services in order to recreate the scene of the crime in the aftermath of a cyber attack, scientists from the National Institute of Standards and Technology suggest in a new study. Read the full article. [Information Week]

Mozilla on Tuesday warned users that a password-stealing add-on slipped
into Firefox’s extension gallery more than a month ago had been
downloaded nearly 2,000 times before it was detected. Read the full article. [Computerworld]

The Windows Help and Support Center vulnerability that was patched with yesterday’s MS10-042 bulletin was under active attack by malware miscreants, especially in Europe where Microsoft tracked about 25,000 attempts to exploit the vulnerability.

This is a recording of a live chat session with the technical support agent associated with a rogue AV program. The session was recorded by Nicolas Brulez, a security analyst at Kaspersky Lab.

Cisco Industrial Ethernet 3000 (IE 3000) Series switches contain well-known,
hard-coded read and write SNMP community strings. An remote attacker
could take full control of a vulnerable device. Read the full statement. [US-CERT]