Senior engineers at Facebook responsible for SRE (site reliability
engineering) challenged Facebook employees to try to compromise him and
gain access to Facebook’s administrative system via information obtained
from him. They succeeded. Read the full article. [TechCrunch]
There’s a new attack technique in use right now that enables attackers to inject Trojan code onto victims’ machines by disguising it as a Windows input method editor (IME).
Cybercrooks have developed regionally-targeted banking Trojans that are
more likely to slip under the radar of security defenses. Read the full article. [The Register]
A security researcher has found a way to circumvent Adobe Systems’ effort to address the /launch action issue that made headlines a few months ago. Read the full article. [eWEEK]
Many of the most widely used third-party software applications for Microsoft Windows do not take advantage of two major lines of defense built into the operating system that can help block attacks from hackers and viruses, according to research released today. Read the full article. [KrebsonSecurity]
Scareware purveyors’ top target for today: Twilight fans using Google to
search for show times, sound tracks and all things related to latest
movie about young vampire lovers. Read the full article. [The Last Watchdog]
In a move hailed by privacy advocates, Facebook deployed a
feature that allows its users to better control what personal
information can be accessed by third-party applications and websites. Read the full article. [The Register]
Attackers are ramping up their attempts to exploit the recently disclosed vulnerability in the Windows Help and Support Center in Windows XP. There have been targeted attacks against the flaw for two weeks now, but experts have noticed a major increase in the volume and spread of them in recent days.
Guests who recently stayed at Destination Hotels & Resorts may have been
victimized by compromised
point-of-sale systems. The company refused to release many details of
the incident citing an ongoing investigation by the FBI. In a note posted to its Web site said that it had “uncovered a malicious
software program inserted into its credit card processing system from a
remote source.” Read the full article. [Computerworld]
A developer figured out that Foursquare had a privacy leak because of how it published user check-ins on web pages for each location. He logged 875,000 in San Francisco. Foursquare is aware of the bug. Read the full article. [Wired]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
