Peiter Zatko — a respected hacker known as “Mudge” — has been tapped to
be a program manager at DARPA, where he will be in charge of funding
research designed to help give the U.S. government tools needed to
protect against cyberattacks. Read the full article. [cnet]
Federal authorities are charging a Las Vegas man with marketing a
so-called “cookie-stuffing” operation, enriching himself and others
while defrauding eBay along the way. Read the full article. [Wired]
With millions of personal records and payment card information stolen
on a regular basis, several recently released reports independently
confirm some of the main sources of breaches. Not surprisingly, that’s
not zero day flaws, not even insiders, but good old fashioned SQL injections next to malware infections. Read the full article. [ZDNet]
Some of the bugs Microsoft patched today will be exploited by hackers almost immediately, security researchers predicted. Microsoft’s massive update — a record-tying 13 separate security bulletins that patched 26 vulnerabilities — gives attackers all kinds of ways to compromise machines and hijack PCs. Read the full article. [Computerworld]
Purveyors of a new botnet toolkit are touting a feature aimed at
aspiring cybercriminals: the opportunity to commandeer computers
already compromised by an established crimeware package known as Zeus. Read the full article. [The Register]
To entice security researchers to look for holes in the Chrome browser,
Google has announced it will pay $500 for dangerous security flaws found in the code. But
several experts say that’s not enough money to motivate skilled
vulnerability researchers. Read the full story [CNet]
Researchers at Penn State University have developed an algorithm that defends against the spread of local
scanning worms that search for hosts in “local” spaces within networks
or sub-networks. This strategy allows them access to hosts that are
clustered, which means once they infect one host, the rest can be can
be infected quickly. Read the full article. [Dark Reading]
Top flight outsourcing firm Tata Consulting Services appeared to have
lost control of its website to hackers today, with the domain
apparently being touted for sale. Read the full article. [The Register]
Hackers hit the hospitality industry more than any other – including
the often-hacked financial services industry, according to a new report. Read the full article. [USA Today]
A vulnerability in the creation of symbolic links (symlinks) in the free Samba file and printer server can be exploited to attain access to files outside of predefined paths and to the root directory. Read the full article. [The H Security]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
