A large number of bloggers using Wordpress are
reporting that their sites recently were hacked and are redirecting
visitors to a page that tries to install malicious software. Read the full article. [KrebsonSecurity]
The Black Hat security conference will kick off next week in Barcelona, with training sessions and briefings from some of the most talented security researchers in the industry. Facebook’s chief security officer, Max Kelly, is scheduled for a keynote presentation on Wednesday morning following two days of training sessions. Read the full article. [Computerworld]
A group of sophisticated identity thieves managed to steal more than $4
million by filing bogus tax returns using the names and Social Security
numbers of other people, many of them deceased, according to a 74-count
indictment unsealed in Arizona. Read the full article. [Wired]
Oracle has moved
Solaris onto its quarterly security patch schedule, meaning users of
the Sun Microsystems operating system will now know months in advance
when they will be getting security updates. The next Critical Patch Update is due on Tuesday. The update
will include 16 security fixes for Sun products, including Solaris, Sun
Cluster, Sun Convergence and the Sun Ray server software. Read the full article. [IDG News Service]
A new type of cross-site scripting (XSS) attack that exploits commonly used network administration tools could be putting users’ data at risk, a researcher says. Read the full article. [Dark Reading]
Romanian police have arrested 70 suspected cybercrooks, thought to be
members of three gangs which allegedly used compromised eBay accounts
to run scams. Read the full article. [The Register]
A rash of home foreclosures and abandoned dwellings had already taken its toll on the tax revenue for the Village of Summit, a town of 10,000 just outside Chicago. Then, in March, computer crooks broke into the town’s online bank account, making off with nearly $100,000. Read the full article. [KrebsonSecurity]
In a startling revelation, the open-source Mozilla project says that its flagship Firefox browser contains a root certificate authority that doesn’t seem to have a known owner.
It’s quite possible that this could be a legitimate root certificate that changed hands during a merger or some other transaction but the fact that Mozilla’s folks can’t seem to figure out the owner is disconcerting on many levels.
Espionage network GhostNet, first identified about a year ago, is much larger and more sophisticated than previously assumed according to a study entitled “Shadows in the Cloud”, by the Munk Centre for International Studies, the Information Warfare Monitor, the SecDev Group and the Shadowserver Foundation. Read the full article. [The H Security]
Upscale grocery conglomerate Whole Foods Market said it is
continuing to clamp down on a series of Facebook-based scams that
entice users with a purported $500 gift card from the Austin,
Texas-based supermarket chain. Read the full article. [CNet]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
