Richard Clarke, a former top adviser on information security and terrorism in the Bush White House, is calling for Barack Obama to initiate an open public dialogue on the use of offensive and defensive information warfare capabilities and what the consequences of a cyberwar could be for the country.
On the same day Mozilla shipped a Firefox update
to fix multiple critical vulnerabilities, Opera dropped a major patch
to fix three documented flaws, including a memory corruption issue that
exposes users to code execution attacks. Here are the raw details:
Mozilla has released Firefox 3.5.4 with fixes for a wide range of serious security vulnerabilities.The most serious issue could allow a malicious hacker to take complete control of a computer by simply tricking a user into visiting a rigged Web page. In all, Mozilla released 11 advisories, six rated critical. Here’s a list of the security vulnerabilities being addressed:
At the ToorCon San Diego conference, a CNN iReporter talks with security professionals about basic security issues and then see Marty Morrow escape from handcuffs without a key!
It’s not just credit cards and debit cards
that are at risk of fraud: pre-paid gift cards can also easily be
cloned and stolen by cybercriminals, according to newly published
research [pdf] from U.K-based Corsaire.
Researchers scanning the internet for vulnerable embedded devices have
found nearly 21,000 routers, webcams and VoIP products open to remote
attack, due to the fact that their administrative interfaces are
publicly viewable from anywhere on the internet and their owners have
failed to change the manufacturer’s default password. Read the full story [Wired/Kim Zetter]
Dennis Fisher and Ryan Naraine discuss the Evil Maid USB
attack, the Time Warner modem vulnerability and that old standby: the
cybersecurity czar.
Guest Editorial by Christofer HoffThere have been many disruptive innovations
in the history of modern computing, each of them in some way impacting
how we create, interact with, deliver, and consume information. The
platforms and mechanisms used to process, transport, and store our
information likewise endure change, some in subtle ways and others
profoundly.
If your cash card gets eaten by the automated-teller machine, it may not end up in the hands of a bank employee.European financial institutions are seeing a sharp rise in card “trapping,” where criminals use various tricks in order to capture and retrieve a person’s ATM card for fraudulent use. Read the full story [IDG News Service/Jeremy Kirk]
The Big Story podcast with Ryan Naraine – October 22, 2009Trident Risk Management’s Nick Selby joins the Big Story
podcast to discuss the latest news around Metasploit and Rapid7 and how this
affects issues around penetration testing and exploit creation and release.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
