Vulnerabilities


P2P, Mobile Malware to Rise in 2010

Cybercriminals have already begun shifting their focus from websites to
file-sharing networks when it comes to dispensing malware, and will
continue with this trend throughout 2010 with more mobile malware to come. Read the full article. [Ars Technica]

Black Energy Tool Used in Citigroup Hack

The Federal Bureau of Investigation is probing a computer-security
breach targeting Citigroup Inc. that resulted in a theft of tens of
millions of dollars by computer hackers who appear linked to a Russian
cyber gang, according to government officials. Read the full article. [Wall Street Journal]


Intel has released a patch for its series of silicon-based security
protections after researchers from Poland identified flaws that allowed
them to completely bypass the extensions. Read the full article. [The Register]

It didn’t take long before cybercriminals seized the opportunity to use
the death of actress Brittany Murphy to peddle malware in search engine optimization poisoning. Read the full article. [Help Net Security]

Adobe has released a critical patch to cover a pair of serious vulnerabilities affecting the Adobe Flash Media Server (FMS) 3.5.2 and earlier versions.The update is available for all platforms and addresses issues that allow an attacker to run malicious code on the affected system.

Nullsoft has released version 5.57 of Winamp, the popular media player, closing several critical vulnerabilities that could be exploited to compromise a user’s system and fixing a number of bugs. Read the full article. [The H Security]

Adobe chose to wait until mid-January to
patch a critical PDF bug because issuing an emergency update would have
disrupted its quarterly security update schedule, the company said
today. Read the full article. [Computerworld]