A new study from Prof. Avishai Wool of Tel Aviv University’s School of Electrical
Engineering finds serious security drawbacks in chips that are being embedded in credit, debit and “smart” cards. The
vulnerabilities of this electronic approach — and the vulnerability of
the private information contained in the chips — are becoming more
acute. Read the full article. [ScienceDaily]
The good news is that Microsoft’s Internet
Explorer 8 browser offers a new set of filters designed to prevent some
cross-site scripting (XSS) attacks. The bad news is that those same
filters could be used to enable XSS attacks. That was the gist of a presentation offered by security
researchers David Lindsay and Eduardo Vela Nava at the Black Hat Europe
conference in Barcelona. Read the full article. [Dark Reading]
The Zeus botnet is now using an unpatched flaw in Adobe’s PDF document
format to infect users with malicious code, said security researchers. Read the full article. [Computerworld]
A computer security researcher has released a plugin for Firefox that provides a wealth of data on Web sites that may have been compromised with malicious code. The plugin, called Fireshark, was released at the Black Hat Europe conference. Read the full article. [IDG News Service]
Security researchers have discovered flaws in common file formats,
including .zip, which can be used to sneak malware onto computers by
evading antivirus detection and will present their findings at Blackhat Europe. Read the full article. [CNet]
An application that offers to unlock iPhones is actually designed to
hijack internet connections on compromised Windows PCs, security
watchers warn. Read the full article. [The Register]
New research from Google underscores the breadth of fake antivirus operations on the Web. An analysis of 240 million Web pages collected by Google’s malware detection infrastructure over a 13-month period discovered more than 11,000 domains involved in the distribution of rogue antivirus (AV). Read the full article. [eWEEK]
At Black Hat Europe a researcher will
demonstrate a new, powerful breed of clickjacking attacks he devised
that can bypass newly constructed defenses in browsers and Websites. Read the full article. [Dark Readiing]
Miscreants are highly likely to take advantage of Twitter’s move
towards making money through ad-supported micro-blogging updates,
security watchers warn. Read the full article. [The Register]
Oracle has dealt a sweeping blow to vulnerabilities in its
quarterly Critical Patch Update (CPU). The vendor closes a total of 47
holes in many of its products, among them the database, the business
suites, Sun Solaris and the Java System Directory Server. Read the full article. [The H Security]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
