A spyware application that surreptitiously scans chat logs and hard
drives of unsuspecting Mac users has found its way onto three of the
more popular download sites, said security researchers. Read the full article. [The Register]
The Accoria web server, also known as Rock Web Server, contains several
cross-site scripting (XSS) and cross-site request forgery (XSRF)
vulnerabilities. Read the full advisory. [Department of Homeland Security]
A vulnerability on Facebook forced hundreds of thousands of users to
endorse a series of webpages over the holiday weekend, making the social
networking site the latest venue for an attack known as clickjacking. Read the full article. [The Register]
Organized cyber thieves stole more than $100,000 from a small credit
union who serves U.S. Treasury employees in Salt Lake City last week, in a brazen online robbery that
involved dozens of co-conspirators. Read the full article. [KrebsonSecurity]
Researchers at TippingPoint’s Digital Vaccine Laboratories have reported a new batch of unpatched security holes in Adobe software products.
The Financial Times is reporting that Google is phasing out the internal use of Microsoft’s Windows operating system because of security concerns.The report, which is short on solid sourcing, quotes Google’s employees as saying the company is steering people towards using Apple’s Mac or the Linux operating system to avoid malicious hacker attacks.
In case you needed any reminders that privacy is one of the more pressing problems on the Web right now, this week’s news provided plenty of them. Along with stories of Facebook’s continued privacy missteps, this week gave us the gift of Google letting users install some Google code to opt out of other Google code, as well as Adobe perhaps moving to a monthly patch cycle. Read on for the full week in review.
Oil giant BP suffered further embarrassment after its
official Twitter account was hacked. Pranksters purloined the @BP_America Twitter account to write “Terry
is now in charge of operation Top Kill, work will recommence after we
find a XXL wetsuit. #bpcares #oilspill”. Read the full article. [The Register]
Federal authorities say they have cracked open a cybercrime gang that
allegedly duped tens of thousands of consumers into paying more than
$100 million for worthless antivirus protection, priced from $30 to $70.
A Chicago grand jury returned an indictment against Bjorn Daniel Sundin, 31, a U.S. citizen believed
to be living in the Ukraine; Shaileshkumar P. Jain, 40, a Swedish
citizen believed to be living in Sweden; and James Reno, 26, of Amelia,
Ohio. Read the full article. [The Last Watchdog]
Japanese police have arrested two men over suspected involvement in a
Hentai-themed malware scam campaign. Read the full article. [The Register]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
