80K Records’ Breached in Iowa Gaming Hack
Around 80,000 Iowa employee names, birth dates and social security numbers have been exposed after an Iowa Gaming Commission server was hacked. Read the full article. [Secure Computing]
Vulnerabilities
XSS Flaws Found in Cisco Tools
An advisory discloses a vulnerability that could affect large numbers
of organizations using Cisco’s Secure Desktop security package and
leave users of the product open to potential Cross-Site Scripting (XSS)
attacks. Read the full article. [Help Net Security]
73 Percent of Users Reuse Banking Passwords
The majority of online banking customers reuse their online-banking
login credentials on other websites, according to a new survey on
password insecurity. Read the full article. [The Register]
At Black Hat DC, Foreground Security Senior Security Researcher Mike Bailey will examine Flash’s security model and take a look at some of the ways attackers can leverage Adobe Flash vulnerabilities to compromise a system. Read the full article. [eWEEK]
Underscoring a little-known web vulnerability, hackers are exploiting a
weakness in the Mozilla Firefox browser to wreak havoc on Freenode and
other networks that cater to users of internet relay chat. Read the full article. [The Register]
VMware advises on vulnerabilities that relate to problems in the Java Runtime
Environment (JRE) where several of the 47 flaws can be used by
an attacker to compromise a systems. Read the full article. [The H Security]
More than 300 Web sites are being pestered by infected computers that are part of the Pushdo botnet, according to security researchers. Read the full article. [Security Central]
When a computer virus infection at a business allows thieves to steal tens of thousands of dollars from the company’s commercial banking account, banks typically don’t reimburse the victim company. But the truth is, most banks make that decision on a case-by-case basis. Take, for example, the case of two Umpqua Bank customers in Vancouver, Wash., both of which suffered major financial losses last year after compromises at employee computers allowed thieves to access their accounts remotely. Read the full article. [KrebsonSecurity]
Google may have threatened to leave China in order to keep us all from concluding that “the cloud” can’t be secured. But isn’t that precisely what we should conclude based on the fact that Google chose to leave China? Read the full article. [Computerworld]
Social networking sites are ideal havens for online criminal activities as they provide a combination of two key factors: a huge number of users and a high-level of trust among these users, cautioned a security specialist. ZDNet Asia spoke to industry experts who highlight the top five security threats enterprises should be mindful about when using social networking sites. Read the full story [ZDNet]
