Someone hacked the list of attendees for the recent Cisco Live 2010 users’ conference, a security breach that led Cisco to
notify the customers as well as a broader group who have dealings
with the company. Read the full article. [Network World]
A group of code breakers believe they have
successfully reverse engineered Skype’s implementation of the RC4
cipher, one of several encryption technologies used by the
consumer-oriented VoIP service. Read the full article. [The Register]
Mobile malware that affects Symbian Series 60 handsets is being used to
create a botnet. Read the full article. [The Register]
Security weaknesses in the hugely popular file-sharing Web site thepiratebay.org have exposed the user names, e-mail and Internet addresses of more than 4 million Pirate Bay users. Read the full article. [KrebsonSecurity]
A flaw in the module pam_motd (message of the day), which
displays the daily motto and other information after login (to the
shell), can be exploited under Ubuntu to expand access rights. Read the full article. [The H Security]
For years now, Adobe Flash files have been a very useful attack vector for hackers and a serious security problem for end users and IT departments. Now, a German researcher is planning to unveil a new browser plug-in designed to prevent many common types of Flash attacks.
More than 53,000 people, who did business with the
University of Hawaii at Manoa parking office’s data base from 1998-2009,
are being notified by mail that they may be affected by a computer
security breach. Read the full article. [Honolulu Star Advertiser]
By Alex RothackerSQL injection is the most common penetration technique employed by hackers to steal valuable information from corporate databases. Yet, as widespread as this method of attack is, a seemingly infinite number of ‘sub-methods,’ or variations of SQL Injection attacks can be carried out against the database.
An anonymous group of security researchers last
week published information about an unpatched Windows bug, saying that
they were disclosing the vulnerability because of the way Microsoft
treated a colleague. The flaw in Windows Vista and Server 2008
could be used by attackers to gain unauthorized access to a PC or cause
it to crash. Read the full article. [Computerworld]
There’s an unpatched vulnerability affecting Internet Explorer 8 running on most current versions of Windows that could give attackers the ability to run code on remote machines. The flaw is a memory leak that gives attackers key information on the location of a specific address in memory, even with memory protections such as ASLR enabled.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
