The UK’s National Health Service has been hit by a voracious,
data-stealing worm that’s easily detected by off-the-shelf security
software, according to researchers who directly observed the mass
compromise. Read the full article. [The Register]
Computer criminals are taking steps to block search engines bots
from indexing legitimate Web pages that have been hacked and
booby-trapped with hostile code. Read the full article. [KrebsonSecurity]
Microsoft has withdrawn an update for Windows Server because the patch, issued eight days ago, does not treat the root cause of the problem it was meant to fix. MS10-025 was designed to address a flaw specific to Windows 2000 Server installations also running Windows Media Services. Read the full article. [The Register]
Affinity Health Plan, a New York managed care
service, is notifying more than 400,000 current and former customers
employees that their personal data might have been leaked through the
loss of an unerased digital copier hard drive. Read the full article. [Dark Reading]
A fire alarm company in Arkansas lost more than $110,000 this month when
hackers stole the firm’s online banking credentials and drained its
payroll account. Read the full article. [KrebsonSecurity]
A new version of the data-stealing trojan Zeus is for the first time able to successfully exploit Mozilla’s Firefox browser to commit sophisticated online banking fraud. Read the full article. [Secure Computing]
How many botnets are there? Symantec says 6.8 million, but a former Symantec executive at Immunet and a key creator of the Internet Security Threat Report says his former company is off by several magnitudes of order. Gunter Ollmann of Damballa concurs with Immunet and puts the numbers between 19 and 24 million. Read the full article. [The Last Watchdog]
BOSTON — A prominent security consultant is urging a rethink of the way businesses handle user education and awareness, warning that the way attackers have latched on to social engineering techniques makes it difficult to cope with hacker attacks.
Less than 10% of the top 300 most highly trafficked sites are protected using a registry lock service. Why is that? MarkMonitor attempts to answer that in a Q&A. Read the full article. [ZDNet]
Google has released version 4.1.249.1059 of Chrome for Windows, a security update that addresses four high risk vulnerabilities in its WebKit-based browser. These vulnerabilities are; a memory corruption issue in Chrome’s V8 JavaScript Engine, type confusion errors with forums, cross-site scripting (XSS) vulnerabilities on the Chrome downloads page and HTTP request errors that could lead to possible cross-site request forgeries (XSRF). Read the full article. [The H Security]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
