Admitted TJX intruder Albert Gonzalez has entered into a plea agreement
on charges that he hacked into Heartland Payment Systems, Hannaford
Brothers, 7-Eleven and two other unnamed national retailers. Read the full article. [Wired]
An electronics testing firm in Louisiana is suing its bank, Capital One,
alleging that the financial institution was negligent when it failed to
stop hackers from transferring nearly $100,000 out of its account
earlier this year. Read the full article. [Washington Post]
A hacker has posted a proof-of-concept attack
exploiting vulnerabilities on the Pentagon’s public Website that were
first exposed several months ago and remain unfixed. Read the full article. [Dark Reading]
Microsoft dismissed recently-disclosed threats to its BitLocker
disk-encryption technology as “relatively low risk,” noting that
attackers must not only have physical access to a targeted PC, but must
manipulate the machine two separate times. Read the full article. [Computerworld]
In the first half of next year the German government plans to set up an advisory center
which will help users purge their computers of viruses and bots. Read the full article. [The H Security]
Compromised (zombie) machines accounted for more than four in five
(83.4 per cent) of an estimated global volume of 107 billion junk mail
messages sent out every day during 2009. Read the full article. [The Register]
Citing a rising tide of complaints from people
who unknowingly bought counterfeit software infected with malware,
Microsoft announced the launch of educational initiatives
and enforcement actions in over 70 countries to raise awareness of
counterfeit software and to protect consumers. Read the full article. [Dark Reading]
Researchers expect Conficker to get worse in the coming year in a number of specific ways including the corruption on defensive systems, keylogging, DDoS, mass identity theft, and more. Read the full article. [Help Net Security]
U-Test has just completed a substantive, independent review of three major e-tailing sites–Amazon, Walmart and Target– and found a gaping cross-site scripting security hole in one of them. Read the full article. [The Last Watchdog]
A security researcher has released a proof-of-concept attack that
exploits critical vulnerabilities that Apple patched on Thursday; The
vulns stem from bugs in the Java runtime environment that allow
attackers to remotely execute malicious code. Read the full article. [The Register]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
