Chinese Internet Traffic Redirects to US Anti-Censorship Site
Much of the Chinese Web was redirecting to the website of an anti-censorship firm for more than an hour yesterday.
Web Security
Google Auto-Update Weakness Exposed by Ad-Peddling Extensions
Google removed two Chrome extensions from the Chrome Store after both were recently bought by spammers who reconfigured the extensions to inject ads into websites visited by users.
‘Password’ is No Longer the Worst Password
If you think you’re being clever by basing your password on the site you’re visiting or adding a zero to the end of 123456789, you’re not. A new list of the 25 worst passwords, culled from public dumps of passwords stolen in data breaches, shows that these are some of the least useful passwords you […]
Cisco has released patches for three vulnerabilities in its Secure Access Control System, including two flaws that could enable a remote attacker to take complete control of an affected system.
Twitter has begun enforcing HTTPS connections between applications and its API.
Adobe patched five critical vulnerabilities in its Flash, Reader, and Acrobat Players that could give attackers the ability to cause crashes and wrest control of affected machines.
Google has fixed five vulnerabilities in its Chrome browser and also has activated a feature that will block malicious file downloads automatically. The change is a major security upgrade for Chrome and will help prevent users from unwittingly downloading harmful files, an attack vector that attackers count on for the success of drive-by downloads and other attacks.
There is a serious vulnerability in several Cisco wireless routers that could give an attacker root level access. The bug is the result of a backdoor in the routers that was set up as a test interface, and Cisco does not yet have patches available to fix it.
As expected, Oracle and Adobe will release critical patches alongside Microsoft on Tuesday to kick off the year’s inaugural Patch Tuesday batch of security updates.
In the weeks and months leading up to 9/11, the National Security Agency had been working on a new information-gathering and analysis system known as THINTHREAD, a system that was built in-house and was meant to replace the uncountable number of stand-alone collection systems and attendant databases the agency had. Its architects believed it had […]
