Mozilla yesterday reported a “huge increase” in downloads of Firefox in
Germany after that country’s computer security agency urged users of
Microsoft’s Internet Explorer to dump the browser and run a rival
instead. Read the full article. [Computerworld]
Although the first known attacks using the Aurora malware that compromised Google weren’t discovered until late last year, some parts of the malware codebase has been in existence in China for nearly four years, raising questions about how many other attacks it might have been used in during that time frame.
This is just a quick heads-up that the emergency security patch for Microsoft’s Internet Explorer will be released tomorrow (January 21, 2009).The update, rated critical for all versions of IE, will cover a remote code execution flaw that has already been used in targeted attacks against U.S. companies, including Google and Adobe.
Here are some steps Microsoft and other security firms recommend you
can take now to help defend yourself against the IE Aurora attacks. Read the full article. [Dark Reading]
Even though online job scams have become more convincing as criminals
have honed their skills, sometimes victims don’t fall for them – they
jump into them. Read the full article. [SFGate]
Adobe’s run on the patching treadmill continued this week with a “critical” update to fix a pair of code execution holes in its Shockwave Player.
Robert Mueller, Director of the Federal Bureau of Investigation, will deliver a keynote address at RSA Conference 2010 that will detail cyber threats through the years – from criminal threats like computer intrusions and identity theft to the use of the Internet by extremists and hostile foreign powers. Read the full article. [Help Net Security]
A now published hole in Windows allows users with restricted access to
escalate their privileges to system level – and this is believed to be
possible on all 32-bit versions of Windows from Windows NT 3.1 up to,
and including Windows 7. Read the full article. [The H Security]
Web site domain registrar and hosting provider Network Solutions acknowledged that hackers had broken into its servers and defaced hundreds of customer Web sites. The hackers appear to have replaced each site’s home page with anti-Israeli sentiments and pictures of masked militants and armed with rocket launchers and rifles, along with the message “HaCKed by CWkomando.” Read the full article. [KrebsonSecurity]
Apple’s first Mac OS X security update for 2010 is out, providing cover for at least 12 serious vulnerabilities.The update, rated critical, plugs security holes that could lead to code execution vulnerabilities if a Mac user is tricked into opening audio files or surfing to a rigged Web site.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
