Hackers broke into computer systems at a Massachusetts chapter of the
United Way last month and attempted to make off with more than $150,000
from one of the nation’s largest charities with the use of a money mule duped by a “Work-at-home” scam. Read the full article. [KrebsonSecurity]
An IBM ISS researcher at Black Hat DC revealed major
security holes in a little-known wiretapping architecture for IP
networks created by Cisco Systems for law enforcement. The weaknesses
could result in an attacker interfering with legal surveillance or
performing some unauthorized surveillance of his own. Read the full article. [Dark Reading]
A pair of Spanish researchers here today
demonstrated a way to hack the connection between a Web application and
a database, letting the attacker hijack Web credentials and perform
other nefarious activities. Read the full article. [Dark Reading]
Lax security screening at Apple’s App Store and a design flaw are putting iPhone users at risk of downloading malicious apps that could steal data and spy on them, a Swiss researcher warns at Black Hat DC. Read the full article. [cnet]
Adware slingers have taken advantage of the buzz around the latest version of Firefox to establish a fake browser download site. Read the full article. [The Register]
MOSCOW–The problem of attackers infecting legitimate Web sites with malware that then silently exploits vulnerabilities in users’ browsers reached unprecedented levels in 2009, with 1 in every 150 legitimate sites serving up malware, experts say.
Twitter revealed more details about the phishing attacks that caused the company to reset the passwords on some user accounts Feb. 2. Read the full article. [eWEEK]
This video from the SANS Internet Storm Center explains how to detect and block IPv6 traffic in Linux.
Microsoft is trying to boost adoption of the software security practices in its Security Development Lifecycle by releasing a revised set of instructions to make implementation of the process easier and faster.
An advisory discloses a vulnerability that could affect large numbers
of organizations using Cisco’s Secure Desktop security package and
leave users of the product open to potential Cross-Site Scripting (XSS)
attacks. Read the full article. [Help Net Security]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
