As soon as a new technology gets traction, smart criminals figure out a
way to misapply it, and one of the hottest features in the mobile
world, location awareness, is next in line for exploitation. A contest involving 300 testers found close to 900 bugs in three leading
location/check-in services. Read the full article. [InfoWorld]
Banks in Russia and Ukraine are under continued siege by criminal gangs
wielding a sophisticated, next-generation exploitation kit that hacks
the financial institutions’ authentication system and then hits it with a
denial-of-service attack. Read the full article. [The Register]
There’s an ongoing argument in barrooms, pubs and wherever else soccer fans gather about who is the best player in the world. The general consensus right now is Lionel Messi, the Argentinian genius, but others can build a case for Wayne Rooney, Didier Drogba or even Cristiano Ronaldo. A similar discussion often breaks out among security professionals about which vendor currently is wearing the goat’s horns, and while Adobe has topped the list of late, AT&T, a late entrant, is gunning for that number one spot right now.
Apple has shipped a critical security patch for its iTunes media player to fix several gaping security holes that expose Windows users to hacker attacks.The vulnerabilities could be exploited to launch remote code execution attacks if a user simply opens an image file or surfs to a rigged Web site.
Phishing gangs have been getting bolder of late, and there’s no clearer evidence than the cache of phishing data that researchers at Sunbelt found on a site owned by the Paraguayan government.
Dennis Fisher talks with Mike Mimoso of SearchSecurity.com and Information Security magazine about the current spate of highly targeted attacks, the silliness of the term cyberwar and the controversy surrounding the disclosure of the Windows Help Center flaw.
Researchers from M86 Security Labs are reporting on a recently
detected malware campaign, using a working exploit targeting the (fixed) EasyBits Extras Manager Unspecified Vulnerability, reported in October, 2009. Read More. [ZDNet]
A hacker in the Goatse Security group that discovered the AT&T iPad-related flaw was arrested following the
execution of an FBI search warrant of his home in Arkansas. Read the full article. [CNet]
Just because there have been no big attacks linked to Conficker since
April 2009, it is dangerous to assume that nothing is happening, said the director of the Conficker Working Group, Rodney Joffe. Read the full article. [Infosecurity]
Authorities in 14 countries raided stolen credit card groups and six cloning labs manned by criminal organizations in the U.S., Spain, France, Germany, Italy, Ireland with arrests in Australia, Sweden, Greece, Finland
and Hungary. Read the full article. [Reuters] Read the Interior Minister statement. [Spain]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
