Vulnerabilities


As the Fraud Turns: Bank Sues Robbed Customer

A machine equipment company in Texas is tousling with its bank after
organized crooks swiped more than $800,000 in a 48-hour cyber heist
late last year. While many companies similarly victimized over the past
year have sued their banks for having inadequate security protection,
this case is unusual because the bank is preemptively suing the victim. Read the full article. [KrebsonSecurity]

Zeus Trojan Found in Fake AIM Update

A new iteration of Zeus, a notorious password-stealing trojan, is victimizing users of AOL Instant Messenger (AIM), according to researchers. Read the full article. [Secure Computing]

Google Chrome Update Addresses Security

Google has announced the availability of Chrome version 4.0 for Windows which addresses several high-risk security vulnerabilities, the latest release of the WebKit-based browser includes a number of new features. Read the full article. [The H Security]


Popular technology site TechCrunch was hit by potty-mouth hackers late on Monday, leaving the site temporarily unavailable.

A notice on TechCrunch.com’s front page on Tuesday morning explains that “TechCrunch.com was compromised by a security exploit”. Read the full article. [The Register]

It’s been more than two weeks now since the cyber-end of the cyber-world caused by the cyber-attacks on the cyber-networks of Google, Adobe and several other high tech companies, and amid all of the noise and hand-wringing there has been precious little in the way of cool, logical analysis of what lessons might be drawn from the incidents.

At least three US oil companies were victims of highly targeted,
email-borne attacks designed to siphon valuable data from their
corporate networks and send it abroad, according to a published report
citing unnamed people and government documents. Read the full article. [The Register]

Microsoft’s Internet Explorer (IE) could inadvertently allow a hacker
to read files on a person’s computer, another problem for the company
just days after a serious vulnerability received an emergency patch. Read the full article. [Computerworld]