The percentage of Internet users in China with no security software was 4.4% last year,a up from 3.9% the previous year, according to recent survey results by the China Internet Network Information Center (CNNIC) and China’s National Computer Network Emergency Response Technical Team (CNCERT). Read the full article. [Comptuerworld]
The techniques used by unloveable rogues who automate search engine
manipulation attacks themed around breaking news to sling scareware
have been unpicked by new research. Read the full article. [The Register]
The developers at Mozilla soon will be adding a new privacy enhancement to the Firefox browser that will help prevent attackers and the operators of third-party Web sites from seeing which other sites a user has visited.
SEE: Updated report with response from Adobe and FoxIt SoftwareA security researcher has managed to create a proof-of-concept PDF file that executes an embedded executable without exploiting any security vulnerabilities.The PDF hack, when combined with clever social engineering techniques, could potentially allow code execution attacks if a user simply opens a rigged PDF file.
Security expert Andreas Bogk warns that, despite recent PHP
improvements, the session IDs of users who are logged into PHP
applications remain guessable. Upon close examination, the alleged
improvements display frightening weaknesses. Read the full article. [The H Security]
Organized computer criminals yanked more than $200,000 out of the
online bank accounts of a Missouri dental practice this month, in yet
another attack that exposes the financial risks that small- to
mid-sized organizations face when banking online. Read the full article. [KrebsonSecurity]
Miscreants have begun creating malware that overwrites software update applications from Adobe and others. Email malware that poses as security updates from trusted companies
is a frequently used hacker ruse. Malware posing as update utilities,
rather than individual updates, represents a new take on the ruse. Read the full article. [The Register]
Researchers are reporting on an ongoing targeted malware campaign using a FIFA World Cup 2010 theme, in an attempt to trick end users into executing a malicious PDF file, exploiting a recently patched flaw in Adobe Reader. Read the full article. [ZDNet]
Security researchers at CanSecWest unveiled an open-source device that
captures the traffic of a wide variety of wireless devices, including
Microsoft wireless keyboards, medical devices, and remote controls. Read the full article. [The Register]
Networking giant Cisco has published a total of 7 security advisories that address 11 individual vulnerabilities for its Internetwork Operating System (IOS) software. Read the full article. [The H Security]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
