NASDAQ OMX, owners and operators of the NASDAQ Stock Exchange, reported
this weekend that their systems had been infiltrated by unknown hackers. According
to a report in the New York
Times,
NASDAQ OMX contacted federal law enforcement officials after discovering suspicious
files in a part of their US server that is not related to trading.
A group of academic researchers at the University of Cambridge has developed a new technique for making JPEG images copy-evident, so that users can tell whether an image has been recompressed and copied.
Google has officially released version 9.0.597.84 of its Chrome web browser to stable and beta channels for Windows, Mac and Linux, an update that addresses nine separate security vulnerabilities.
By Denis MaslennikovA new version of the Android Market has just been launched, making it possible for every device owner to look for applications, buy or even remotely install apps to an Android device directly from the browser on a desktop computer. Wait, remotely install? Have we misheard something?
Mozilla is working on making their web applications more “attack aware,” according to a blog post on the company’s Web Application Security blog Wednesday.In the blog post, Mozilla’s web security nomad Michael Coates, discusses how these “attack aware” applications will be able to differentiate between normal user errors and abnormal errors made by malicious users who intend to damage the system.
Google has announced plans to pay $20,000 to anyone who can successfully
exploit a vulnerability in their Chrome browser and infiltrate a Cr-48 Chrome
Notebook.
Researchers are tracking a new bot that originated in China and is being used by various associated botnets that are hammering away with DDoS attacks aimed at several dozen targets around the world, including a number of telecom companies and specialized manufacturers.
Controversy has erupted around the free online dating site, PlentyofFish.com, after the Web site was
found to contain a serious security vulnerability that could have potentially exposed the personal
information of some 30 million users.
Cross-site scripting bugs have been a major problem for Web site operators for years now, and while their causes and their solutions are both well-understood, they’re still quite pervasive. But a new free service is aiming to help site owners avoid the serious compromises that can follow an attack on an XSS flaw.
The U.S. Department of Homeland Security issued a call for proposals this week in a $40m program to encourage research and development in a wide range of topics related to cyber security: from designing more resilient software, to alternatives to passwords and CAPTCHA technology to prevent automated attacks.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
