A who’s who confab of government, corporate and civic leaders from the
around the world has convened in Dallas this week at the East West Institute’s Worldwide Cybersecurity Summit to discuss the need
for wider public-private partnerships to make the Internet safer. Read the full article. [The Last Watchdog]
A North Carolina grocery worker is being held without bail in Houston
on attempted computer hacking charges after inadvertently partnering
with an undercover FBI agent in an alleged citywide ATM-reprogramming
caper. Thor Alexander Morris, 19, was arrested at a Houston flea market last
month after trying a default administrative passcode on a Tranax
Mini-Bank ATM there, according to the FBI. Read the full article. [Wired]
The LoveBug worm, a simple email that spread a virus to millions of computers a decade ago, paved the way for many of today’s social engineering and targeted cyber attacks. Read the full article. [CSO]
Dennis Fisher talks with Didier Stevens, the security researcher who developed the innovative method for using the /launch command in PDF readers to execute code on remote machines. Stevens discusses the ramifications of the discovery, the security of PDFs in general and the user behavior that makes these attacks more effective.
An “extremely severe” security vulnerability in the Opera browser could put web surfers at risk of remote code execution attacks, the software maker warned today.The vulnerability, now patched with the new Opera 10.53, affects Opera for Windows and Mac.
A smiley-faced instant message with a photo link
posing as if it’s from someone on your buddy list is actually spreading
misery worldwide in the form of a worm on Yahoo Instant Messenger: The
IM ultimately delivers a worm that allows an attacker to take over the
victim’s machine, not to mention spread itself among the victim’s
contact list. Read the full article. [Dark Reading]
Websites operated by the US Treasury Department are redirecting visitors
to websites that attempt to install malware on their PCs, a security
researcher warned. Read the full article. [The Register]
In the space of a given year, untold thousands of vulnerabilities are found in operating systems, applications and plug-ins. In many cases, the affected vendors fix the flaws, either with a patch, a workaround or some other mitigation. But there’s also a huge population of security bugs that vendors never fix because they’re deemed unexploitable, an assumption that may be turning into a serious mistake for software makers.
Buffer overflows have been a serious security problem for software developers for several decades now, but the history of exploitation research on this class of flaws is relatively short.
Two of the accused Mariposa botnet operators in Spain requested jobs at Panda Security in March some 2 months after their arrest, according to a Panda Security official. Read the full article. [KrebsonSecurity]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
