The image of an open Amazon delivery box has a prominent place in the
latest spam campaign that aims to trick users into downloading an
alleged order update coming from the dot com giant. Read the full article. [Help Net Security]
The group that took down Twitter.com last
month has apparently claimed another victim: China’s largest search
engine Baidu.com. Read the full article. [Computerworld]
A false rumor suggesting that Facebook is to start charging is being used to bait malware traps.Thousands of disgruntled users, angry at the false claims that a $4.99 a month charge
for using the social networking site that will supposedly kick in have been induced to
visit “protest group” sites in response to spam emails. Read the full article. [The Register]
Adobe recently released a blacklisting framework that enables users to stop JavaScript from calling some APIs. This video gives users a walk-through of how to define which APIs they want to prevent JavaScript from being able to call.
A phisher hoping to harvest bank login details managed to smuggle his app onto the Android app store. Malicious apps posted by Droid09 were quickly identified, prompting a warning to legitimate users and a ban for the VXer. Read the full article. [The Register]
Ryan Naraine and Dennis Fisher discuss all of the news and
criticism concerning Adobe this week, including their release of a silent
updater and the company becoming a top target for attackers.
Here, in chronological order, are the top 10 security and privacy
stories concerning Facebook and Twitter from the past year. Read the full article. [Network World]
In an advisory sent Wednesday afternoon, Juniper said a
variety of devices could be forced to reboot by sending them internet
packets with maliciously formed TCP options. Read the full article. [The Register]
US CERT advises upgrading PowerDNS
Recursor 3.1.7.2 to address multiple vulnerabilities; Exploitation of
these vulnerabilities may allow an attacker to execute arbitrary code,
cause a denial-of-service condition, or spoof DNS information. Read the advisory. [US CERT]
On January 1, 2010, two important state data security and privacy laws
took effect in Nevada and New Hampshire that create new
obligations for most companies that do business in Nevada and for
health care providers and business associates in New Hampshire. Read the full article. [Hunton & Williams Law Blog]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
