An analysis of more than one million malware infections in the United
States shows Atlanta, Georgia and Birmingham, Alabama have the highest
malware infection rates in the United States. Read the full article. [Help Net Security]
A Twitter user has demonstrated a cross-site scripting (XSS) vulnerability on
the microblogging platform that could allow an attacker to take over
users’ accounts or spread malware. Read the full article. [Secure Computing]
Two teenagers have been arrested for their alleged involvement in the
world’s largest English-language cybercrime forum. Read the full article. [The Register]
An inside look at a California-based engineering company defrauded by an online banking Trojan, automated clearing house transfers, East-coast based money mules, yet the company was holding a cybersecurity insurance policy and looks to recover all of its stolen funds. Read the full article. [KrebsonSecurity]
Following delays, Mozilla has released version 3.6.4 of the Firefox web browser. Firefox 3.6.4 closes more than 225 bugs found in the previous update, addresses a number of critical security vulnerabilities and includes new crash protection technology from the Mozilla Lorentz Project. Read the full article. [The H Security]
A researcher at Black Hat USA next month plans
to give away a homemade tool that helps organizations glean intelligence about the attacker behind the malware that includes information about native tongue, geographic location, and
ties to other attacks. Read the full article. [Dark Reading]
A prominent security researcher has identified a problem with the way that Mozilla Firefox handles links that are opened in a new browser window or tab, enabling attackers to inject arbitrary code into the new window or tab while still keeping a deceptive URL in the browser’s address bar.
Security researchers have found twelve zero day flaws targeting five of the most common web malware exploitation kits such as Neon, Eleonore, Liberty, Lucky and the Yes exploitation kits. Read the full article. [ZDNet]
Apple has released version 4.0 of its iOS mobile operating system,
formerly know as the iPhone OS, closing a total of 65 vulnerabilities,
some of which could be used by an attacker to take remote control of the
device. Read the full article. [The H Security]
Norwegian vendor Opera has presented
version 10.54 of its browser to close four security holes, one of which
the company rates as extremely severe and as another highly severe. Read the full article. [The H Security]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
