Vulnerabilities


Following the Malware Supply Chain

While many outside of the security industry
still perceive “hackers” as teenagers or isolated geeks who work alone, a recent research report encourages the general
public to see malware as a cooperative industry that supports
specialists, economies, and supply chains. Read the full article. [Dark Reading]

Winter Olympic Search Results Exploited by Malware

Cybercriminals have been capitalizing on the world’s interest in the Winter Olympics in Vancouver to spread malware, experts warned. Attackers have been using Twitter and black hat search engine (SEO) optimization tactics to promote fake Olympics videos that are spreading malware. Read the full article. [Secure Computing]


An Israel-resident British IT worker has reacted with horror to news
that a suspected member of an alleged hit squad used a passport with
his details to enter Dubai, before allegedly participating in the
assassination of a prominent Hamas official. He’s not alone. Read the full article. [The Register]

A common Web programming error could give hackers a way to take over Google Buzz accounts with cross site scripting, a security expert said. Read the full article. [Computerworld]

Adobe
today released an out-of-band security update to patch a pair of gaping
holes that expose hundreds of millions of computer users to remote code
execution attacks.
The vulnerabilities are rated “critical” and affect Adobe Reader and Adobe Acrobat on all platforms — Windows, Mac and Linux.

In a bid to demonstrate that the French Chatenay-Malabry laboratory made a mistake
while analyzing his fateful urine sample that stripped him of his 2006 Tour de France win, Landis apparently commissioned a hacker to break into
their computers and steal documents that would help his cause. Read a security article. [HelpNet Security] Read the original article. [San Diego Union-Tribune]

A newly released report shows that based on more than a trillion Web requests processed in 2009, the use of malicious PDF files exploiting flaws in Adobe Reader/Adobe Acrobat not only outpaced the use of Flash exploits, but also, grew to 80% of all exploits the company encountered throughout the year. Read the full article. [ZDNet]