Opera Software has released version 10.61 of the Opera web browser to fix a high severity hole. The issue was a heap overflow in the HTML5 canvas when performing some painting operations, which could in some cases be used to execute code. Read the full article. [The H Security]
Minutes after Apple issued a security update Wednesday, the maker of a
10-day-old jailbreak exploit released code that others could put to use
hijacking iPhones, iPod Touches and iPads. Read the full article. [Computerworld]
The dd_ssh bot is currently responsible for an increase in brute force
attacks on SSH connections. Botnet herders are apparently injecting the
script via a phpMyAdmin vulnerability and using the compromised computers for targeted SSH attacks. Read the full article. [The H Security]
As applications have become more and more complex in recent years and Web browsers have evolved into operating systems unto themselves, the task of securing desktop environments has become increasingly difficult. And while there’s been quite a bit of innovation on Windows security, advances in Unix security have been less common of late. But now, a group of researchers from Google and the University of Cambridge in England have developed a new sandboxing framework called Capsicum, designed specifically to provide better security capabilities on Unix and Unix-derived systems.
A bug in Facebook’s login system allows attackers to match unknown email
addresses with users’ first and last names, even when they’ve
configured their accounts to make that information private. Read the full article. [The Register]
Healthcare data breaches have swollen in 2010:
Identity Theft Resource Center reports show that compromised data stores
from healthcare organizations far outstrip other verticals this year. Read the full article. [Dark Reading]
More details have emerged of how security researchers tracked down a
Zeus-based botnet that raided more than $1m from 3,000 compromised UK
online banking accounts. Read the full article. [The Register]
A former member of the hacker gang Kryogeniks was sentenced to four
months in prison for his role in a 2008 stunt that replaced
Comcast’s homepage with a shout-out to other hackers. Read the full article. [Wired]
People still running the now-retired Windows XP Service Pack 2 (SP2) can
trick the operating system into installing security updates, finds a
researcher. Read the full article. [Computerworld]
The Foxit document reader has been updated to fix the same critical bug
that currently leaves iPhones, iPads, and iPod touches wide open to
malware attacks. Read the full article. [The Register]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
