When security professionals flock to San Francisco for next week’s RSA 2010 security conference, they will have access to a set of presentations and events not found on the official RSA agenda. It’s billed as an anti-conference of sorts; a place where practitioners can go for an alternate, stripped-down view of the industry. Welcome to Security B-Sides. Read the full article. [CSO]
An update which fixes around 40 bugs is available for the PHP 5.2
development branch. Version 5.2.13 comes highly recommended for all PHP
5.2.x users, as it includes a number of security-related fixes. Read the full article. [The H Security]
Dennis and Ryan preview the RSA Conference 2010 with their friend Tim Whitman, the head of the security practice at Schwartz Communications.
To improve the chances of installing their malware on random computers,
scareware peddlers have decided to set up more that 60 websites that
contain hundreds of possible search matches for hot, trending topics. Read the full article. [Help Net Security]
The Koobface botnet is the tip of the iceberg for the
malicious operations of the online crime ring. Here are the top 10 things you
didn’t know about the Koobface gang. Read the full article. [ZDNet]
Supposed footage of Wednesday’s fatal Sea World killer whale attack in Florida actually points at sites distributing scareware. Read the full article. [The Register]
SQL injection has become perhaps the most widely used technique for compromising Web applications, thanks to both its relative simplicity and high success rate. It’s not often that outsiders get a look at the way these attacks work, but a well-known researcher is providing just that.
Secunia reports a hole in Google’s Picasa image management and editing software that allows attackers to compromise Windows using specially crafted JPEG images to provoke an integer overflow in the PicasaPhotoViewer.exe file, which can then be exploited to cause a heap overflow. Google closed the hole in the recently released Picasa 3.6 build
105.41, although Google’s release notes say nothing about a fix. Read the full article. [The H Security]
With the help of a U.S. federal judge, Microsoft has struck a blow against one of the Internet’s worst sources of spam: the notorious Waledac botnet. Microsoft said that it had been granted a court order that will cut off 277 .com domains associated with the botnet. Read the full article. [Computerworld]
A New York marketing firm that as recently as two weeks ago was
preparing to be acquired now is facing bankruptcy from a computer virus
infection that cost the company more than $164,000. Read the full article. [KrebsonSecurity]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
