The Obama administration gets a chance to demonstrate its cybersecurity leadership as three top guns from the executive branch – Homeland Security Secretary Janet Napolitano, White House Cybersecurity Coordinator Howard Schmidt and FBI Director Robert Mueller – address the RSA conference in San Francisco next week. Read the full article. [GovInfoSecurity.com]
Twitter users were being hit on Wednesday with what seems to be the
second phishing attack this week, according to researchers. The latest attack features a message that says “This you????” followed by a link that leads to a fake Twitter log-in page. Read the full article. [cnet]
The security industry has undergone massive changes in the last 15 years, and in some cases it’s hard to imagine what things would be like had these events not taken place. Think of a world in which Google focuses on security and privacy and Microsoft never started Trustworthy Computing, and you get the idea.
A group of researchers have discovered a
simple way to reveal the identity of a user based on his interactions
with social networks. The ‘deanonymization’ attack uses social network groups as well
as some traditional browser history-stealing tactics to narrow down and
find the user behind the browser. Read the full article. [Dark Reading]
Adobe today shipped a patch for a critical vulnerability in its Download Manager utility, warning that hackers could exploit the issue to take full control of Windows computers.The vulnerability, discovered by Aviv Raff, could potentially allow an attacker to download and install unauthorized software onto a user’s system, Adobe said in an advisory.
Intel is the latest U.S. corporation to acknowledge that it was
hacked in January in a sophisticated attack that occurred at the same
time that Google, Adobe and others were targeted. The giant California-based chip maker was rumored to have been among
some 34 companies that were targeted, but said on Tuesday there was no
evidence to tie its hack to the attack on Google and others. Read the full article. [Wired]
Rutgers University researchers have demonstrated how rootkits can be a threat to smartphones sporting operating systems not much unlike those in full-blown computers. Read the full article. [Network World]
Users of Google’s Blogger, a free blog publishing tool, are the targets of the latest phishing email campaign. Read the full article. [Help Net Security]
A New Hampshire-based IT consultancy lost nearly $100,000 this month
after thieves broke into the company’s bank accounts with the help of
10 co-conspirators across the United States. Read the full article. [KrebsonSecruity]
Researchers are preparing to release a free tool to stop
“drive-by” downloads: Internet attacks in which the mere act of
visiting a Web site results in the surreptitious installation of
malicious software. The new tool, called BLADE (Block All Drive-By
Download Exploits), stops downloads that are initiated without the
user’s consent. Read the full article. [Technology Review]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
