Researchers looking into the security of GSM phone networks are
suggesting that the recent breach, which saw tens of thousands of e-mail
addresses and ICC-IDs inadvertantly disclosed AT&T, could have far more significant implications
than a bit of extra spam: attackers can use the information to learn
the names and phone numbers of the leaked users, and can even track
their position. Read the full article. [Ars Technica]
Kaspersky Lab anti-malware researchers Costin Raiu and Magnus Kalkuhl field questions on targeted attacks, how they work and how businesses can protect themselves.
Researchers have found evidence that attackers are exploiting the vulnerability in the Windows Help and Support Center that was at the center of so much controversy last week.
Keystroke-logging computer viruses let crooks steal your passwords, and
sometimes even read your e-mails and online chats. Recently, however,
anonymous criminals have added insult to injury, releasing a keylogger
that publishes stolen information for all the world to see at online
notepad sharing sites such as pastebin.com. Read the full article. [KrebsonSecurity]
By Chris WysopalVulnerability disclosure is in the spotlight again. First it was Tavis Ormandy disclosing a vulnerability in Microsoft Windows before Microsoft had a fix available. Now a group called Goatse Security has disclosed a vulnerability in an AT&T website that affects Apple iPad 3G owners. The Wall Street Journal reports on the repercussions against vulnerability researchers in “Computer Experts Face Backlash”.
The mass SQL injection attack that has been ongoing for a week or so now is designed mainly to steal credentials for online games and is quite well planned and organized, experts say.
A hacker tried to frame his neighbor by tapping into his Wi-Fi and
sending threatening emails to US vice president Joe Biden, according to
search warrant affidavits unsealed recently. Read the full article. [The Register]
The developers of the open source IRC server UnrealIRCd have had to report that the file servers of the project were compromised several months ago and the IRC servers code, Unreal3.2.8.1.tar.gz was replaced by a version with a backdoor. The backdoor allows anyone to execute commands on the server running UnrealIRCd. Read the full article. [The H Security]
Software security has become one of the more widely discussed and debated topics in the security industry in the last few years, as many software vendors and enterprises both large and small have begun to to focus considerable attention on improving the processes they have in place for producing software. But far less light has been shone on the security of the software supply chain, an increasingly thorny problem in today’s environment.
By Dmitry Bestuzhev The World Cup 2010 is the most popular event running right now. The cyber criminals are already taking advantage by sending spam leading to phishing sites, to spread malware and ID theft attacks. Today we found an interesting attack apparently not related to money.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
