New Adobe PDF Zero-Day Flaw Under Attack
Adobe today sounded an alarm for a new zero-day flaw in its PDF Reader/Acrobat software, warning that hackers are actively exploiting the vulnerability in-the-wild.
Web Security
Mozilla Patches Firefox DLL Load Hijacking Bug
Mozilla has joined Apple in being among the first to fix the DLL load hijacking attack vector that continues to haunt hundreds of Windows applications.
Microsoft Warns on Scareware Alerts
Microsoft is warning of a new type of scareware,
dubbed Rogue:MSIL/Zeven, which identifies a user’s browser–whether it’s
Google Chrome, Internet Explorer or Firefox–and serves up a nearly
perfect-looking version of the browser’s malware warning page. Read the full article. [Information Week]
Attacks via social networks continued their steady march on Tuesday, as an untold number of Facebook users unwittingly found themselves caught up in a spam run that pointed friends to premium mobile entertainment Web sites.
TechCrunch Europe has cleaned up its website following the discovery of
malicious code that left visiting surfers exposed to infection by a
variant of the infamous Zeus banking Trojan. Read the full article. [The Register]
Every week, hackers are creating 57,000 new Web addresses which they
position and index on leading search engines in the hope that unwary
users will click them by mistake. Read the full article. [Help Net Security]
A dangerous XSS bug surfaced on Twitter on Monday, and researchers have seen active exploits for the bug, which allows an attacker to steal the session cookie of a Twitter user with a simple click-and-you’re-owned technique.
The countdown to the saturation of the IPv4
address supply is now down to a matter of months: and along with the
vast address space of the next-generation IPv6 architecture comes more
built-in network security as well as some new potential security
threats. Read the full article. [Dark Reading]
Heartland Payment Systems has agreed to pay $5 million to Discover to
settle claims arising from the massive data breach disclosed by the
payment processor last year. Read the full article. [Computerworld]
Google has released a new version of its Chrome browser and has included more than a dozen security fixes in the update. The new version, 6.0.472.53, was released two years to the day after the company pushed out the first version of Chrome.
