After more than two years, Apple’s Safari browser for Macs remains
vulnerable to attacks that allow websites to litter a user’s hard drive
with thousands of malicious files. The “carpet bomb” vulnerability was publicly disclosed in May 2008 after members of Apple’s security team said they didn’t consider the quirk a security issue. Read the full article. [The Register]
For the second month in a row, Microsoft has tried to eradicate a
mutating rootkit that has blocked some Windows users from installing
security updates. Read the full article. [Computerworld]
Today’s attackers care less about the browser you use and more about
whether your third-party browser add-ons and plugins are out-of-date and
exploitable. Read the full article. [KrebsonSecurity]
Last month Adrian Lamo, a man once hunted by the FBI, did something
contrary to his nature. He picked up a payphone outside a Northern
California supermarket and called the cops. Read the full article. [Wired]
This was an amazingly busy news week in the security world, with a lot of major stories competing for your attention: Microsoft sharing pre-patch vulnerability data with foreign governments, IBM handing out certified pre-owned USB keys, Google spying on Wi-Fi users. If you missed anything, never fear, we’ve got a quick review of that matters from the last week. Read on.
Two developers have refined techniques for rummaging through browser
histories to the extent that web sites can now find out what articles a
user has recently read on news sites, their exact postcode and which
search terms that have entered into search engines. Read the full article. [The H Security]
Beta customers named in two click fraud lawsuits Microsoft filed this week maintain their innocence, and both say they assisted
the software company in investigating the source of the problem. Read the full article. [IDG News Service]
We conducted our third live chat this week, this one with HD Moore, the founder of the Metasploit Project and the CSO of Rapid7. Moore got a lot of great questions on a wide variety of topics, so if you weren’t able to join us, here’s a full transcript of the chat.
An e-mail with the subject “See Office 2010 Beta in action” uses an
alleged Office 2010 Beta version used as bait. Read the full article. [Help Net Security]
A trio of researchers who
discovered vulnerabilities in Cisco firewalls and in Cisco and McAfee
security management software will demonstrate proof-of-concept attacks
against these products at the upcoming Black Hat USA conference. Read the full article. [Dark Reading]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
