A new blended email threat appears to be a security alert from
eBay, said researchers. The email message with the subject line “eBay Procedural Warning
– Security Alert,” is addressed to “Dear eBay Member,” and warns
recipients that the sender has “detected security issues on behalf of
your account.” Read the full article. [Help Net Security]
One year after the Conficker botnet was front-page news around the world, the U.S. Department of Homeland Security is preparing a report looking at the worldwide effort to keep it in check.The report, to be published within the month, shows how an ad hoc group of security researchers and Internet infrastructure providers banded together into an organization they called the Conficker Working Group. Its goal was to address what was at the time the world’s most serious cyberthreat. Read the full story [IDG News Service]
Mozilla is the first browser vendor to fix a vulnerability exploited at this year’s CanSecWest Pwn2Own contest.Just one week after a U.K.-based hacker known as “Nils” broke into a 64-bit Windows 7 machine with a Firefox vulnerability, the open-source group shipped Firefox 3.6.3 to plug the security hole.
A new version of Java is available that fixes at least 27 security vulnerabilities in the ubiquitous software. Read the full article. [KrebsonSecurity]
Red Hat has released an OpenJDK 1.6.0 security update for Red Hat Enterprise Linux 5. The update comes after Oracle updated Java 6 with Update 19 and addresses many of the same vulnerabilities. Read the full article. [The H Security]
CanSecWest: Two security researchers at search engine giant Google have discovered
20 kernel bugs, about half remaining unpatched, affecting Windows,
Linux and the popular VMware virtualization software over the last
several years. Read the full article. [TechTarget]
According to a newly released report, 64% of all the reported Microsoft vulnerabilities for 2009 could have been mitigated by using the principle of the least privileged accounts. Read the full article. [ZDNet]
The latest rivalry appears to be budding between the author of the Zeus Trojan— a crime kit used by a large number of cyber thieves — and “SpyEye,” a
relatively new kit on the block that is taking every opportunity to
jeer at, undercut and otherwise siphon market share from the mighty
Zeus. Read the full article. [Krebson Security]
Microsoft uncovered more than 1,800 bugs in
Office 2010 by tapping into the unused computing horsepower of idling
PCs. Office developers
found the bugs by running millions of “fuzzing” tests, said Tom
Gallagher, senior security test lead with Microsoft’s Trustworthy
Computing group. Read the full article. [Computerworld]
A security flaw within a popular photo sharing iPhone app known as Quip, has exposed thousands of shared photos, with repositories of them — including the naked ones — already circulating across the Web. Read the full article. [ZDNet]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
