Jonathan Ness of Microsoft’s Security Research and Defense team explains the inner workings of the Data Execution Prevention technology that can help mitigate the targeted attacks exploiting the vulnerability in Internet Explorer right now.
Ninety years ago KitchenAid released their first countertop mixer, which weighed in at about 69 pounds. More interestingly, the mixer also had a special socket that allowed users to attach assorted add-ons for new functionality such as slicers, shredders and meat grinders. Today this sort of extensibility of countertop-appliances is old hat for KitchenAid and their competitors. The interesting thing about this socket is that it has not changed in size or shape since the very first version was released. As a result, you can buy a brand new attachment, say the pasta rollers and it will work in every single version of every KitchenAid stand mixer ever made. Talk about backward compatibility!
Ryan Naraine and Dennis Fisher discuss the Google attack, the Internet Explorer vulnerability used in the attack and the continuing weakness of client security.
Booby-trapped PDF files, posing as messages from the US Department
of Defense, were emailed to US defence contractors last week. The
document refers to a real conference due to be held in Las Vegas in
March. Read the full article. [The Register]
A former London pizza delivery man, Renukanth Subramaniam, 33, faces a 10-year prison sentence
after admitting he helped found the notorious DarkMarket forum for
computer crime. Read the full article. [The Register]
The FBI today reminds Internet users who receive appeals to donate
money in the aftermath of Tuesday’s earthquake in Haiti to apply a
critical eye and do their due diligence before responding to those
requests. Read the guidelines. [FBI.gov]
The Internet Engineering Task Force (IETF) has
completed a security extension to the Secure Sockets Layer (SSL)
protocol that fixes a flaw affecting browsers, servers, smart cards,
and VPN products, as well as many lower-profile devices, such as
Webcams, that contain the protocol embedded in their firmware. Read the full article. [Dark Reading]
New evidence indicates one of the gangs chiefly responsible for bank
attacks actually managed to hack directly into a West Virgina U.S. bank last year
and siphon off tens of thousands of dollars with the aid of unsuspecting money mules. Read the full article. [KrebsonSecurity]
Google is apologizing after it mistakenly e-mailed potentially sensitive business data last week to other users of its business listings service. Read the full article. [InfoWorld]
Yet another botnet has been shut down as of
today as researchers joined forces with ISPs to cut communications to
the prolific Lethic spamming botnet — a development that illustrates
how botnet hunters increasingly are going on the offensive to stop
cybercriminals, mainly by disrupting their valuable bot
infrastructures. Read the full article. [Dark Reading]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
