Another month, another zero day flaw has been reported, with malicious
attackers logically taking advantage of the window of opportunity, by
launching malware serving attacks using it. Read the full article. [ZDNet]
Security researchers have uncovered the command and control network of a
Zeus 2 botnet sub-system targeted at UK surfers that controlled an
estimated 100,000 computers. Read the full article. [The Register]
Researchers at Microsoft and Harvard University warn that popular passwords pose a bigger risk to online security than weak ones and suggest that many tools to enforce strong passwords actually steer users to choices that are easy to guess.
A secretive volunteer group that tries to track terrorists and criminals on the Internet went to the Defcon hacker conference this past week in hopes of recruiting information security experts, but it will first have to overcome some skepticism. Read the full article. [IDG News Service]
A security researcher has devised an attack suitable for stalking and similarly creepy endeavors that uses JavaScript and geo location data from Google to pinpoint a victim’s precise location. Read the full article. [The Register]
Roughly 10,000 computer hacking enthusiasts, poseurs, geeks, nerds and government agents gathered for DefCon this weekend. In its 18th year, the world’s largest hacker convention draws people from all walks of life to learn about the latest hacking techniques. Read the full article. [Wired]
A Web site set up to help iPhone users jailbreak their devices is using a flaw in the way that the iPhone handles PDF files to escape the phone’s sandbox security function and enable users to load applications that aren’t in Apple’s official App Store. The same flaw could easily be used to install malicious software in drive-by download attacks, experts say.
According to a newly published report, upon obtaining access to a mini ZeuS botnet dubbed Mumba, researchers at AVG found 60GB of stolen data such as, accounting details for social networking sites, banking accounts, credit card numbers and intercepted emails. Read the full article. [ZDNet]
A hardware hacking expert here at Defcon18
successfully faked several attendees’ cell phones into connecting to his
phony GSM base station during a live demonstration that had initially
raised concerns at the Federal Communications Commission (FCC). Read the full article. [Dark Reading]
IT security researchers Nicholas Percoco and Christian Papathanasiou demonstrated what they claim is the first rootkit for Android. Their aim was to show how slight the obstacles to the development of a such a rootkit are and how powerful the result can be. Read the full article. [The H Security]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
