The organizers of this year’s CanSecWest Pwn2Own have painted a big bulls-eye on mobile devices, offering up an whopping $60,000 in prizes to entice hackers to exploit vulnerabilities on iPhones, Android, Nokia and BlackBerry smartphones.
A former security
researcher turned criminal hacker has been sentenced to 13 years in
federal prison for hacking into financial institutions and stealing
credit card account numbers. Max
Ray Butler, who used the hacker pseudonym Iceman, was sentenced Friday
morning in U.S. District Court in Pittsburgh on charges of wire fraud
and identity theft. Read the full article. [Computerworld]
Web robots, commonly referred to as “bots,” are software programs
written to do automated tasks, like crawling the Web looking for new
sites. They also appear in chat rooms and instant messaging services
masquerading as real people. Read the full article. [cnet]
Adobe Systems on Thursday warned of new critical holes in Reader and
Flash Player, released a security update for the Flash hole, and said a
patch for Reader would come next week. Read the full article. [cnet]
Google has released version 4.0.249.89 of Chrome for Windows, a security update that addresses three high risk vulnerabilities in its WebKit-based browser. Read the full article. [The H Security]
The targeted attacks that hit Google, Adobe,
and other U.S. organizations are still ongoing and have affected many
more companies than the original 20 to 30 or so reported by Google and
others. One researcher believes they are close to naming the suspected coder. Read the full article. [Dark Reading]
Security industry analysts and lawmakers will get an unprecedented
chance next week to evaluate how the government might respond to a
cyber-attack on critical infrastructure targets. Read the full article. [Computerworld]
A non-trivial number of XP users are reporting that their systems suffer from the dreaded Blue Screen of Death (BSoD) and fall into an interminable reboot loop after installing the latest batch of patches from Redmond. Read the full article. [KrebsonSecurity]
Mozilla acknowledged that it had falsely accused a developer of infecting a Firefox add-on with attack code.
The admission came a week after Mozilla announced that a pair of add-ons, Sothink Web Video Downloader 4.0 and Master Filer, had slipped through its security check-in. Read the full article. [Computerworld]
iPhone users beware – an ongoing phishing campaign impersonating Apple.com, attempts to trick users into submitting sensitive device information, with the scammers in a perfect position to use the data in a countless number of fraudulent variations. Read the full article. [ZDNet]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
