Malicious hackers have found a way to hijack WordPress database credentials and use that information to redirect thousands of blogs to Web sites laden with malware.The attacks, which started last Friday, occurred mostly on WordPress blogs hosted by Network Solutions but it appears that there are multiple security weaknesses in play.
An ongoing ransomware campaign is pretending to be the fake ICPP Foundation (icpp-online.com), where the ransomware locks down the user’s desktop issuing a “Copyright violation: copyrighted content detected” message which lists torrent files found on the infected PC and forces the user to pay $400 for the copyright holder’s fine and emphasizing “the maximum penalties can be five years in prison and up to $250,000 in fines.” Read the full article. [ZDNet]
Researchers at the University of Illinois at Chicago have received a $1.15 million grant from the National Science Foundation to build a new computer operating system based on virtual machines and the concept of isolation.
Virtualisation specialist VMware has released security updates for a number of its products, closing a total of ten security vulnerabilities. Read the full article. [The H Security]
Dennis Fisher and Ryan Naraine discuss the new vulnerability in Java, whether the Internet works without Java and the new operating system released by security researcher Joanna Rutkowska.[swf
file=”http://www.threatpost.com/sites/default/files/newswrap_20.mp3]
A large number of bloggers using Wordpress are
reporting that their sites recently were hacked and are redirecting
visitors to a page that tries to install malicious software. Read the full article. [KrebsonSecurity]
The Black Hat security conference will kick off next week in Barcelona, with training sessions and briefings from some of the most talented security researchers in the industry. Facebook’s chief security officer, Max Kelly, is scheduled for a keynote presentation on Wednesday morning following two days of training sessions. Read the full article. [Computerworld]
A group of sophisticated identity thieves managed to steal more than $4
million by filing bogus tax returns using the names and Social Security
numbers of other people, many of them deceased, according to a 74-count
indictment unsealed in Arizona. Read the full article. [Wired]
Oracle has moved
Solaris onto its quarterly security patch schedule, meaning users of
the Sun Microsystems operating system will now know months in advance
when they will be getting security updates. The next Critical Patch Update is due on Tuesday. The update
will include 16 security fixes for Sun products, including Solaris, Sun
Cluster, Sun Convergence and the Sun Ray server software. Read the full article. [IDG News Service]
There is a serious vulnerability in Java that leaves users running any of the current versions of Windows open to simple Web-based attacks that could lead to a complete compromise of the affected system. Two separate researchers released information on the vulnerability on Friday, saying that it has been present in Java for years.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
