By Dennis FisherIn the year and a half since we first launched Threatpost, the site has grown very quickly, probably more quickly than any of us had even hoped it might. We’ve added a couple of regular podcasts, original videos, developed a stable of terrific regular contributors and recently launched our first on-demand video event. And now we’re making a major addition to our editorial staff.
A security expert found a way to catch the talks at Black Hat for free,
thanks to bugs in the video streaming service used by the security
conference. Read the full article. [IDG News Service]
Hackers appear to be increasingly counting on configuration problems and programming errors rather than software vulnerabilities in order to steal information from computer systems, according to a new study based on U.S. Secret Service investigations. Read the full article. [IDG News Service]
LAS VEGAS–A security researcher has found a slew of fundamental problems with the way that modern browsers are designed and built, leading to serious questions about the security of these applications and the way that they handle SSL sessions.
Two years after a major flaw was exposed in the
Internet’s Domain Name System (DNS), a major upgrade to the
infrastructure protocol that fixes that weakness is now up and running
in all of the Internet root servers. Read the full article. [Dark Reading]
LAS VEGAS — Using home-brewed software tools and exploiting a gaping security hole in the authentication mechanism used to update the firmware on automated teller machines (ATMs), a security researcher hacked into ATMs made by Triton and Tranax and planted a rootkit that dispensed cash on demand.
A researcher has uncovered a sophisticated check counterfeiting ring
that uses compromised computers to steal and print millions of dollars
worth of bogus invoices and then recruit money mules to cash them. Read the full article. [The Register]
Isolated strains of mainstream malware that took advantage of how the
zero-day Windows flaw first exploited by the sophisticated Stuxnet worm
began appearing late last week. The same approach has since been applied
by the dodgy sorts behind Zeus, a family of sophisticated toolkits
frequently used to steal bank login credentials and the like from
compromised systems. Read the full article. [The Register]
Google has released version 5.0.375.125 of Chrome, a security update that
addresses three “high” risk vulnerabilities in its WebKit-based browser.
According to the developers, two of the high risk issues could lead to
memory corruption while SVG handling or rendering code. Read the full article. [The H Security]
Organizations are getting hit by at least one
successful attack per week, and the annualized cost to their bottom
lines from the attacks ranged from $1 million to $53 million per year,
according to a newly published benchmark study of 45 U.S. organizations
hit by data breaches. Read the full article. [Dark Reading]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
