Visa is warning financial institutions that it has
received reliable intelligence that an organized criminal group plans to
attempt to move large amounts of fraudulent payments through a merchant
account. Read the full article. [KrebsonSecurity]
A zero-day vulnerability in Apple’s Safari browser could expose millions of Windows users to drive-by download malware attacks. The flaw is currently unpatched.
This week, the Electronic Privacy Information Center filed a 38-page complaint against Facebook with the Federal Trade Commission, demanding it cancel new features introduced in mid-April that compel users to share more information than before. Read the full article. [Computerworld]
Foxit Corp has added new security features to its alternative PDF reader software to help thwart recent malware attacks that exploit the “/launch” feature.
For years, security experts, analysts and even users have been lamenting the state of desktop security. Viruses, spam, Trojans and rootkits have added up to create an ugly picture. But, the good news is that the desktop security battle may be over.
Microsoft plans to ship two bulletins next Tuesday to fix multiple remote code execution vulnerabilities in Windows, Microsoft Office and Microsoft Visual Basic for Applications.Both bulletins are rated “critical,” Microsoft’s highest severity rating. The company describes a critical flaw as one whose exploitation could allow the propagation of an Internet worm without user action.
Yesterday (Wednesday) the last of the 13 authoritative root servers for the domain name system switched over to
the DNS Security Extensions (DNSSEC) security protocol. DNSSEC is
intended to prevent DNS exploits such as cache poisoning. All 13 root
servers are now serving a signed version of the root zone. However, it
is not possible to validate these signatures at present as the public
key remains undisclosed. Read the full article. [The H Security]
Flaws in the configuration and security of the
U.S. Coast Guard IT system caused a material weakness in the Department
of Homeland Security financial system, according to a recent audit. Read the full article. [Dark Reading]
A recent security patch from Microsoft silently fixed two severe bugs
that were never disclosed even though they posed a risk to many of its
customers, a security researcher said. Read the full article. [The Register]
The problems with security and privacy on Facebook hit a new gear today with news that a web site vulnerability exposed live chat sessions and other private user data.According to a TechCrunch Europe report, the gaping security security on the Facebook site allowed any user to view the live chats of their ‘friends’ with just a few mouse clicks.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
