Main PHP-Nuke Site Compromised
The main site for the PHP-Nuke content management system software has been compromised and is serving malicious iFrame exploits to visitors.
Web Security
Small ISP Wins $2.6 Mil From Spammers
A small internet service provider has been awarded nearly $2.6m in a
lawsuit it filed against a company that sent just under 25,000 spam
messages over an 18-month period. Read the full article. [The Register]
Facebook Now Installing Undesired Adware
Already under fire for taking liberties with users’ privacy, Facebook
was outted on Thursday as a distributor of unwanted applications, some
of which install adware or are added to user profiles without
permission. Read the full article. [The Register]
The latest of the series of Apple-related scams involves a phishing site for checking
Apple gift cards. Read the full article. [Help Net Security]
Yesterday (Wednesday) the last of the 13 authoritative root servers for the domain name system switched over to
the DNS Security Extensions (DNSSEC) security protocol. DNSSEC is
intended to prevent DNS exploits such as cache poisoning. All 13 root
servers are now serving a signed version of the root zone. However, it
is not possible to validate these signatures at present as the public
key remains undisclosed. Read the full article. [The H Security]
A recent security patch from Microsoft silently fixed two severe bugs
that were never disclosed even though they posed a risk to many of its
customers, a security researcher said. Read the full article. [The Register]
A new study by a Web security firm has found that despite the myriad differences in the common programming languages and frameworks deployed on the Web today, there is virtually no difference in their practical security and resistance to attack.
The problems with security and privacy on Facebook hit a new gear today with news that a web site vulnerability exposed live chat sessions and other private user data.According to a TechCrunch Europe report, the gaping security security on the Facebook site allowed any user to view the live chats of their ‘friends’ with just a few mouse clicks.
A who’s who confab of government, corporate and civic leaders from the
around the world has convened in Dallas this week at the East West Institute’s Worldwide Cybersecurity Summit to discuss the need
for wider public-private partnerships to make the Internet safer. Read the full article. [The Last Watchdog]
A North Carolina grocery worker is being held without bail in Houston
on attempted computer hacking charges after inadvertently partnering
with an undercover FBI agent in an alleged citywide ATM-reprogramming
caper. Thor Alexander Morris, 19, was arrested at a Houston flea market last
month after trying a default administrative passcode on a Tranax
Mini-Bank ATM there, according to the FBI. Read the full article. [Wired]
