US brokerage D.A. Davidson has agreed to pay $375,000 to settle charges
that lax security practices allowed criminal hackers from Latvia to
pilfer the confidential information of some 192,000 of its customers. Read the full article. [The Register]
Microsoft took steps Tuesday to avoid repeating the debacle two months
ago that left Windows XP users staring at the notorious “Blue Screen of
Death” error message after they applied a patch. Read the full article. [Computerworld]
European researchers are proposing a paradigm-shifting solution to
trusted computing that offers better security and authentication with
none of the drawbacks that exist in the current state of the art. Read the full article. [Science Daily]
Google learned some hard security lessons after it was attacked late last year by hackers, said CEO Eric Schmidt.”Google is now particularly paranoid about that,” Schmidt said during a question-and-answer session following Google’s Atmosphere 2010 conference before about 400 CIOs. Read the full article. [CNet]
Adobe on Tuesday released its quarterly load of patches, including an update for Adobe Reader that fixes several critical vulnerabilities. The company also used the opportunity to enable the new automatic updater in both Reader and Acrobat.
Microsoft today released 11 security bulletins with fixes for a total of 25 security vulnerabilities, including several flaws that expose users to browse-and-you’re-hacked (malicious drive-by download) attacks.
Later today, Microsoft will play it safe by patching a Windows 7 bug that it says can’t be exploited. Read the full article. [Computerworld]
When the final version of Adobe Flash Player 10.1 hits desktops later this year, it will bring with it new functionality designed to allow users to automatically clear Flash cookies after a Web session. But while the feature may be lauded in the name of privacy, it may also force online banks to change how they fight fraud. Read the full article. [eWEEK]
Combining a cross-site scripting (XSS) vulnerability with a TinyURL redirect, hackers successfully broke into the infrastructure for the open-source Apache Foundation in what is being described as a “direct, targeted attack.”
A new technique allows medical records to be used for research on the
genetics of disease while still protecting patients from prying eyes. The new method disguises parts of the medical history data that are not
relevant to a geneticist’s particular research question using an
algorithm that combs through health records and makes some aspects of
them more general. Read the full article. [ScienceNews]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
