Dennis Fisher and Ryan Naraine discuss the increasing volume
and sophistication of attacks on social networks, the continued rise of malware
campaigns such as Gumblar and the recent news around cyberwar and cyberterror.
Amazon said today that it has taken steps to mitigate a security issue in its cloud computing infrastructure that was identified recently by researchers from MIT and the University of California at San Diego. The report described how attackers could search for, locate and attack specific targets in Amazon’s Elastic Computer Cloud (EC2) because of certain underlying vulnerabilities in the infrastructure. Read the full story [Computerworld].
Dennis Fisher and Ryan Naraine discuss the Evil Maid USB
attack, the Time Warner modem vulnerability and that old standby: the
cybersecurity czar.
According to new data from ClickForensics, botnet-infected computers are behind the majority of click-fraud attacks against advertisers and publishers.For the third quarter this year, about 43 percent of all fraudulent clicks came from computers within botnets. The figure
is the highest in four years, when Click Forensics began producing
reports. For the same quarter a year ago, botnets accounted for 27.5%
of bad clicks. Read the full story [Jeremy Kirk/IDG News Service]
One of the great things about the Internet is that things can live on indefinitely. Unfortunately, that long life expectancy applies to malware, as well.
The Big Story podcast with Ryan Naraine – October 19, 2009 In the debut installment of the ‘Big Story’ podcast, Threatpost editor-in-Chief Ryan Naraine chats with Mozilla VP of Engineering Mike Shaver (right) on his decision to blacklist – then unblock – the controversial Microsoft-created Firefox add-ons.
The botnet masters behind the most efficient social engineering driven botnet, Koobface, launched a new campaign currently spreading across Facebook with a new template spoofing Adobe’s Flash updater embedded within a fake YouTube page. Read the full story [zdnet.com/Dancho Danchev]
Today I got a ‘Anti-virus notification message’ from our mail server (protected by kav4lms) so naturally I was interested in what the content was. Examining the quarantined mail on the server revealed some interesting details starting from the mail header itself.
Mozilla has packaged a suite of security-centric plugins to help Firefox users stay safe while surfing on the Internet.
The package, available here, includes NoScript, Better Privacy, AdBlock Plus and WOT (Web of Trust). Mozilla has also expanded its Plugin Check to help users identify and patch vulnerable Firefox add-ons.
PayPal suspended the account of a white-hat hacker on Tuesday, a day after someone used his research into website authentication to publish a counterfeit certificate for the online payment processor.
“Under the Acceptable Use Policy, PayPal may not be used to send or receive payments for items that show the personal information of third parties in violation of applicable law,” company representatives wrote in an email sent to the hacker, Moxie Marlinspike. “Please understand that this is a security measure meant to help protect you and your account. We apologize for any inconvenience.” Read the full story [Dan Goodin/The Register]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
