Version 3.4.8 of the free Samba file and print server fixes various holes
including two denial of service (DoS) vulnerabilities which allow
attackers to remotely crash the Smbd service. Read the full article. [The H Security]
The cybercriminals behind the intensifying phishing scam that has
been plaguing Twitter since late last week are proving how easy it is to
pervert the trust social networks like Twitter and Facebook along with
search giant Google have made a cornerstone of their respective business
models. The idea is to get Web users accustomed to using their Twitter, or
Gmail or Facebook credentials as a “single sign-on” to access the Web’s
coolest apps. Read the full article. [The Last Watchdog]
A huge attack by a rogue Facebook application last weekend infected
users’ PCs with popup-spewing adware, said a researcher. Read the full article. [Computerworld]
Data secretly collected from an international phishing
operation over 18 months suggests that criminals who pursue a career
in phishing can reap millions of dollars a year, even if they only
manage to snag just a few victims per scam. Read the full article. [KrebsonSecurity]
PostgreSQL 7 and 8 users are advised to update their installations as the development team has released new versions which fix a vulnerability classed as moderately severe in PL/perl and PL/tcl. CVE-2010-1169, CVE-2010-1447 and CVE-2010-1170 reports detail the vulnerabilities involved. Read the full article. [The H Security]
A former security guard has pleaded guilty to charges that he broke into his employer’s computers while working the night shift at a Dallas hospital. Jesse William McGraw pleaded guilty to two counts of transmitting malicious code, said the U.S. Department of Justice (DoJ). Read the full article. [IDG News Service]
Amid a controversy about privacy, Facebook unveiled new security features designed to protect user accounts. Read the full article. [eWEEK]
One of the internet’s most resilient and crimeware-friendly networks PROXIEZ-NET was
knocked offline after the plug was pulled on its upstream
service provider, security watchers said. Read the full article. [The Register]
A new paper by a group of academic researchers has exposed a set of serious weaknesses in the software systems that control many modern cars, giving them the ability to lock passengers inside the car, cut the car’s brakes and perform other interesting tricks.
Sergey Storchak was detained after he landed in
New Delhi on a domestic flight from the southwestern holiday state of
Goa, a police spokesman said. He is one of 11 people wanted by
the U.S. Justice Department in “the largest hacking and identity theft
case ever prosecuted,” which was filed in August 2008. Read the full article. [Dark Reading]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
