World Cup Email Scams on the Rise
Cybercrooks have begun punting World Cup ticket and HD TV viewing scams as a successor to earlier lottery-based cons. Read the full article. [The Register]
Vulnerabilities
TJX Hacker to Enter Guilty Plea for Heartland
Admitted TJX intruder Albert Gonzalez has entered into a plea agreement
on charges that he hacked into Heartland Payment Systems, Hannaford
Brothers, 7-Eleven and two other unnamed national retailers. Read the full article. [Wired]
Hacker to Pentagon: XSS Flaws Remain
A hacker has posted a proof-of-concept attack
exploiting vulnerabilities on the Pentagon’s public Website that were
first exposed several months ago and remain unfixed. Read the full article. [Dark Reading]
Adobe has shipped a critical Flash Player update to fix at least
seven documented security vulnerabilities that expose nearly every
computer user to dangerous hacker attacks.
The Flash Player 10.0.42.34 update is available for all platforms
(Windows, Linux and Mac OS X). Here are the raw details:
Guest editorial by Jason Miller Microsoft has released six new security bulletins for December. They have also released two new security advisories as well as one bulletin that has been re-released. In addition to the Microsoft releases, even though Adobe’s quarterly security update is scheduled for next month, they are planning to release a security bulletin for Adobe Flash and Adobe Air today.
Microsoft
today shipped six bulletins with patches for a total of 12 documented
security vulnerabilities in a wide range of widely deployed software
products. Three of the six bulletins are rated “critical,” Microsoft’s
highest severity rating.
The most serious issues affect the company’s Internet Explorer browser, including the newest IE 8 on Windows 7.
In the first half of next year the German government plans to set up an advisory center
which will help users purge their computers of viruses and bots. Read the full article. [The H Security]
Compromised (zombie) machines accounted for more than four in five
(83.4 per cent) of an estimated global volume of 107 billion junk mail
messages sent out every day during 2009. Read the full article. [The Register]
Citing a rising tide of complaints from people
who unknowingly bought counterfeit software infected with malware,
Microsoft announced the launch of educational initiatives
and enforcement actions in over 70 countries to raise awareness of
counterfeit software and to protect consumers. Read the full article. [Dark Reading]
Google filed a lawsuit Monday against a U.S. company it alleges runs
work-at-home scams that unnecessarily charge people’s credit cards and
spoof Google’s brand name. Read the full article. [Computerworld]
