Weatherford, Kaminsky: Top 2010 Security Issues
Mark Weatherford, CISO for California, and Dan Kaminsky, finder of last year’s DNS flaw, offer five security predictions for 2010. Read the full article. [CSO]
Web Security
Google Doodle Caught in Malware Scams
On Tuesday, clicking on the illustration on Google’s front page commemorating the 150th anniversary of the birth of Esperanto’s creator L. L. Zamenhof, generated an awful lot of malicious search results — taking visitors to dodgy advertisements or pages that tried to trick visitors into thinking their computers were infected and paying for fake antivirus software. Read the full article. [Computerworld]
On the Hunt for Conficker
There are several ongoing investigations attempting to find the authors of the Conficker botnet, one of the fastest spreading worms in history, but those responsible for the worm have proven elusive. Read the full article. [TechTarget]
Hackers have released software they say sabotages a suite of forensics utilities Microsoft provides for free to hundreds of law enforcement agencies across the globe known as Computer Online Forensic Evidence Extractor (COFEE). Read the full article. [The Register]
A particular variant of the Koobface worm — dubbed Koobface.GK – initiates by posting malicious links on Facebook wall pages enticing folks to click on a cutesy Christmas video. Read the full article. [The Last Watchdog]
Fraudsters have started to raid user accounts by beating strong two-factor authentication methods with Trojan-based, man-in-the-browser attacks, said Gartner Research. Read the full article. [Help Net Security]
The FBI Internet Crime Complaint Center said rogue antivirus writers have raked in $150 million from users. Read the full article. [Computerworld]
A hacker has unleashed an exploit that lets a user wrest administrative root control of a Motorola Droid smartphone. Read the full article. [Dark Reading]
Dennis Fisher: Okay, welcome back to this CSO series podcast, also known
as Real World Security. My guest today is
Ed Bellis, the CISO of Orbitz Worldwide, one the top travel sites in the
world. Ed’s got a pretty broad range of
experience in the technology industry, having worked as a web architect at Ford
Motor Company, and a manager at Ernst & Young before getting into the
security world as a V.P.
Botnets – apart from inundating out inboxes with spam – can also be
used for ulterior purposes such as executing DDoS attacks or hosting
websites, so understanding the “modus operandi” and size behind the
well-known names is a good idea; Here’s a top ten botnet list. Read the full article. [Help Net Security]
