The relations among Microsoft, Apple and Google, which are testy in the best of circumstances, are being pressured even more of late as the controversy surrounding Google’s actions with cookies and user tracking grows. In the latest installment, Microsoft has said that it has found that Google “is employing similar methods to get around the default privacy protections in IE and track IE users with cookies.”
Researchers are warning about a flaw in the Domain Name System (DNS) that could allow attackers to keep a malicious domain alive and accessible, despite efforts to remove it.
Mozilla is preparing to release a fix for a serious vulnerability in both Firefox and Thunderbird that could result in remote code execution. The update comes just a few days after the company released version 10.0.1 of Firefox, fixing a separate security bug.
Google and several other advertising companies have allegedly been evading the privacy controls of Apple’s Safari browser by placing a special kind of tracking code on a handful of sites, according to new research done by Stanford grad student Jonathan Mayer.
The anarchic hacking collective Anonymous took credit for a successful attack on Web sites belonging to the FTC. The attack, on Friday, was in protest for the U.S. Government’s support of ACTA, the Anti Counterfeiting Trade Agreement.[Story updated to include comment from the FTC.]
Just a few days after releasing a fairly large set of patches for its Chrome browser, Google has pushed out another update, fixing 13 vulnerabilities, more than half of them being high-severity bugs.
Lady Gaga and Carrothead rejoice: with a tweak of its ‘real name’ policy, Facebook will allow high profile members to verify their account and begin using nicknames or pseduonym to identify themselves. The company says the new feature will allow celebrities and other Facebook VIPs to get higher billing on Facebook and attract more followers.
One day after the company released its monthly patch update, Adobe was out again with an emergency update to its Flash Player software, fixing seven holes, six that could lead to remote code execution and one that’s already being exploited in the wild.
The Websites of the NASDAQ and BATS stock exchanges as well as the Chicago Board Options Exchange (CBOE) were knocked offline for parts of Monday and Tuesday after coming under a sustained online attack by a group with links to Anonymous.
Microsoft released nine security updates Tuesday, four critical; five important, fixing 21 different holes in various applications with its February patch release. The four critical fixes deal with vulnerabilities in the company’s Windows, Internet Explorer, .NET Framework and Silverlight programs that could allow remote code execution if left unpatched.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
