DHS Inspector General Richard Skinner spoke before the House Committee on Homeland Security yesterday and detailed his office’s latest report on the progress US-CERT has made in securing cyberspace and included noting limitations with enforcement, staffing and strategic planning. Read the full article. [Infosecurity]
Microsoft launched a new Web-based
mechanism for researchers to securely report stolen credentials, bank
and credit card data, or other data they discover, and as a way to
quickly alert the appropriate banks, retailers, or government agencies
of a compromise. Read the full article. [Dark Reading]
Operating and planting an ATM skimmer can be a risky venture, because the crooks have to return to the
scene of the crime to retrieve their skimmers along with the purloined
data. Some criminals are now using ATM skimmers that
eliminate much of that risk by relaying the information via text
message. Read the full article. [KrebsonSecurity]
Attention-piquing malicious spam emails purportedly coming from the DHS,
the Pentagon or the Transportation Security Administration have
recently been spotted by researchers. Read the full article. [Help Net Security]
As soon as a new technology gets traction, smart criminals figure out a
way to misapply it, and one of the hottest features in the mobile
world, location awareness, is next in line for exploitation. A contest involving 300 testers found close to 900 bugs in three leading
location/check-in services. Read the full article. [InfoWorld]
Banks in Russia and Ukraine are under continued siege by criminal gangs
wielding a sophisticated, next-generation exploitation kit that hacks
the financial institutions’ authentication system and then hits it with a
denial-of-service attack. Read the full article. [The Register]
There’s an ongoing argument in barrooms, pubs and wherever else soccer fans gather about who is the best player in the world. The general consensus right now is Lionel Messi, the Argentinian genius, but others can build a case for Wayne Rooney, Didier Drogba or even Cristiano Ronaldo. A similar discussion often breaks out among security professionals about which vendor currently is wearing the goat’s horns, and while Adobe has topped the list of late, AT&T, a late entrant, is gunning for that number one spot right now.
The dream of bolting security onto the Internet’s Domain Name System
takes one step closer to reality as Internet
policymakers hosted a ceremony in northern Virginia to generate and
store the first cryptographic key that will be used to secure
the Internet’s root zone. Read the full article. [Network World]
Apple has shipped a critical security patch for its iTunes media player to fix several gaping security holes that expose Windows users to hacker attacks.The vulnerabilities could be exploited to launch remote code execution attacks if a user simply opens an image file or surfs to a rigged Web site.
Dennis Fisher talks with Mike Mimoso of SearchSecurity.com and Information Security magazine about the current spate of highly targeted attacks, the silliness of the term cyberwar and the controversy surrounding the disclosure of the Windows Help Center flaw.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
