Dennis Fisher talks with Gary McGraw of Cigital about the release of the BSIMM2 model, the continued maturing of software security programs and the similarities between computer security and cargo cult science.
The FBI’s top anti-cyber crime official today said the
agency is planning a law enforcement action against so-called “money
mules,” individuals willingly or unwittingly roped into helping
organized computer crooks launder money stolen through online banking
fraud. Read the full article. [KrebsonSecurity]
ST. PAUL, MINN.–If the United States wants to remain competitive in the global economy and prevent widespread penetrations of its strategic, corporate and commercial networks, enterprises and government agencies should stop relying on commercial software and go back to writing more of their own custom code, a security expert said Tuesday.
Mozilla has expanded its Plugin Check utility to support multiple web browsers.According to Mozilla, a new cross-browser Plugin Check page now works with Firefox, Safari 4, Chrome 4, Opera 10.5 and Internet Explorer 7 and 8 for the most popular plugins (but since IE requires specific code to be written for each plugin, it will take a little longer to get to full coverage).
Adobe joined the Patch Tuesday train today with the release of patches for at least 21 documented security vulnerabilities in the Shockwave and ColdFusion product lines.
Microsoft today issued patches for a pair of critical (remote code execution) vulnerabilities in Windows and Microsoft Office and urged affected users to apply the fixes as soon as possible.
A now-closed Facebook exploit took advantage of cross site scripting to inject malicious code into Yelp. Normally such an attack wouldn’t have particularly broad implications for Facebook users, but Yelp is one of the three sites that have been deemed fit for Facebook’s highly controversial Instant Personalization feature. Read the full article. [TechCrunch]
A deceptive “help” message invites recipients to check their PCs’
compatibility with Windows 7 by downloading and running an altered
version of the Windows 7 Upgrade Advisor concealing a Trojan. Read the full article. [Help Net Security]
On the heels of a worm that
was installing backdoors on Windows systems via Yahoo Instant Messenger
comes a new worm that is even more sophisticated in its social
engineering and payload, researchers have discovered. Read the full article. [CNet]
In the past few days a number of websites created using WordPress have been hacked. While the attack initially appeared to be limited to web sites hosted by American ISP DreamHost, it has since become apparent that blogs hosted at GoDaddy, Bluehost and Media Temple have also been affected. Read the full article. [The H Security]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
