Adobe today announced plans to ship a critical security patch next Tuesday (April 13, 2010) to fix multiple high-risk security holes in its Reader and Acrobat product lines.The patches will be released alongside a new automatic updater software that the company hopes will speed up the downloading and deployment of its security fixes. The security fixes in this Reader/Acrobat patch batch will apply to Windows, Macintosh and UNIX users.
Microsoft plans to release 11 security bulletins on Tuesday April 13, 2010 to fix multiple vulnerabilities that expose Windows users to remote code execution attacks.
A proposal to let Internet service providers conceal the contact
information for their business customers is drawing fire from a number
of experts in the security community, who say the change will make it
harder to mitigate the threat from spam and malicious software. Read the full article. [KrebsonSecurity]
Customers of Countrywide Financial have filed a
class-action lawsuit over the 2008 data breach that enabled company
insiders to steal and sell their personal information. Read the full article. [Dark Reading]
A Bank of America computer specialist is set
to plead guilty to charges that he hacked the bank’s automated tellers
to dispense cash without recording the activity. Read the full article. [Computerworld]
Former State of Pennsylvania CISO Robert Maley has been watching all the news about his firing for talking about a security incident without permission at last month’s RSA conference. He began a talk on application security at CSO Perspectives 2010 by going off topic and addressing the controversy head on. Read the full article. [CSO]
A new type of cross-site scripting (XSS) attack that exploits commonly used network administration tools could be putting users’ data at risk, a researcher says. Read the full article. [Dark Reading]
Romanian police have arrested 70 suspected cybercrooks, thought to be
members of three gangs which allegedly used compromised eBay accounts
to run scams. Read the full article. [The Register]
Joanna Rutkowska, a security researcher known for her work on virtualization security and low-level rootkits, has released a new open-source operating system meant to provide isolation of the OS’s components for better security.
A rash of home foreclosures and abandoned dwellings had already taken its toll on the tax revenue for the Village of Summit, a town of 10,000 just outside Chicago. Then, in March, computer crooks broke into the town’s online bank account, making off with nearly $100,000. Read the full article. [KrebsonSecurity]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
