Best Of Web
Best Of The Web
BOING BOING
AnonyMiss, The Yin To Anonymous' Yang
Group of women works under the Anonymous effort
IT KNOWLEDGE EXCHANGE
Was Stuxnet An Inside Job?
As more attacks are said to be "state-sponsored," actual attribution can be tricky, expert warns
TREND MICRO
"Serious" Cyberattack On The European Union
Details are sketchy as EU prepares for summit; may mirror recent attack on French Ministry during G20 meeting
THE REGISTER
Hackers Make Off With TripAdvisor's Membership List
Vulnerability allowed attackers to make off with a portion of customer email database, company warns
IT SECURITY EXPERT
Play.com Breach: Don't Trust Your Third Parties
Major breach may offer lessons to companies that rely heavily on outsourcing and supply chains
NETCRAFT
Browsers Vulnerable To Fraudulent SSL Certificates
Researcher discovers suspected certificate authority compromise
SC MAGAZINE
Texas Hospital Hacker Sentenced To Nine Years
Hospital guard was convicted of planting malware, planning a DDoS attack
TRUSTEER
A Closer Look At A Targeted Attack
Vanity infection from Google news searches is a classic example of how such attacks work
DAILY MAIL
Security Scare As Council Loses Memory Stick Containing Access Codes To Homes Of Thousands
More than 4,000 elderly could be at risk, officials say
ICSA LABS
Top 10 Countries Sending Spam
India holds onto its top position, despite a drop-off in spam traffic
CYBERLAW
You�ve Been Tagged--Privacy Implications Of Facebook Court Case
Kentucky appeals court holds that Facebook users don't need permission to tag others in photos
BIT9
Thoughts On Multifactor Authentication
In light of RSA breach, it's time to take a second look at authentication strategy
PHP FOG
How We Got Owned By A Few Teenagers (And Why It Will Never Happen Again)
CEO shares his company's cautionary tale on being hacked
COMPUTERWORLD
Student Used Spyware To Steal Passwords, Change Grades
High school student changed his own grades and those of 12 others, officials say
NETCRAFT
Play.com Confirms Security Breach
Compromise took place through third-party marketing communications firm, company says
VILLAGE VOICE
Anonymous Exposed: Hacker Group Infiltrated, Chat Logs Leaked
In new twist, correspondence among group's members is published on the Web
THREATPOST
Adobe Pushes Critical Patch In Flash Player, Reader, Acrobat
Vulnerability is already being exploited in the wild, company says
EUROGAMER
Hacker Helps Plug Rift Security Hole
Company thanks researcher for warning them of vulnerability in popular online game
THE INQUIRER
Paypal Gets Hit With Sophisticated Phishing Attack
Attack also targets Lloyd's, Bank of America, and TSB
CSO
HBGary'Hoglund: Anonymous "Not At All What People Think They Are"
Following attack by Anonymous, HBGary chief shares what he has learned about them
THREATPOST
FireFox 4 With Content Security Policy Due Tuesday
New capability is designed to help prevent frequently used Web-based attacks
TECHWORLD
Google Accuses China Of Blocking Access To Gmail
Chinese users are reporting difficulties reaching the Gmail site and slow service, and Google says China is blocking access to Gmail in the country
COMPUTERWORLD
The Clock Is Ticking For Encryption
Quantum computing will make cracking encryption codes trivial, putting encryption at risk, experts say
PC WORLD
Dutch Court Rules WiFi Hacking Is Now Legal
A court in The Hague has ruled that it is legal to break WiFi security to use an Internet connection and those who piggyback on open WiFi networks in bars and hotels can�t be prosecuted
COMPUTERWORLD
Cisco Cancels March IOS Security Advisory
Cisco announced that it has canceled its scheduled security advisory update for IOS software due to concerns that users affected by recent events in Japan would not be able to respond �effectively� to the patches
HUFFINGTON POST
Identity Theft Victim Can't Convince Freddie Mac He Owns His Home
A builder scammed a man who paid him cash to purchase his house, taking out a mortgage on the house in the homeowner�s name and leaving the victim to proof he was the victim
SCIENCE DAILY
Two New SCAP Documents Help Improve Automating Computer Security Management
The National Institute of Standards and Technology (NIST) has issued updated publications on finding and managing vulnerabilities more effectively, by standardizing the way vulnerabilities are identified, prioritized, and reported
CIO
On the Company Dime: Rogue Game Server Admins Tell All
IT administrators are the most likely to use corporate servers for illicit gaming
THREAT POST
Back-End Software May Be Real Worry in RSA Attack
Security expert Steve Bellovin of Columbia University said more likely target the attack on RSA was source code for the software used to administer and run token deployments for its customers
COMPUTERWORLD
Firefox Follows Chrome Lead, Eyes Faster Releases
New update cycle will mean new Firefox every 16 weeks, meaning that Mozilla will ship Firefox 5 and 6, perhaps even Firefox 7, during 2011
THINQ
ICO Survey Reveals Widespread Wi-Fi Security Woes
Forty percent of home users have no idea how to configure their Wi-Fi security settings, study says
PACKET STORM
Times Square Video Screens Allegedly Hacked With iPhone
Hacker claims ability to post his own image on Times Square megascreens
SYMANTEC
Has The Rustock Botnet Ceased Spamming?
One of the oldest and largest botnets is pulled down
DAILY MIRROR
Beware Of Cyberspace Racketeers
Cybercriminals seek to exploit tsunami disaster for their own gain
THE REGISTER
HBGary's Nemesis Is A '16-Year-Old Schoolgirl'
Forbes interviewed the hacker who says she impersonated an HBGary Federal executive via email with an IT administrator in order to gain access to HBGary's servers
OFFICE OF INADEQUATE SECURITY
Former Wachovia Bank Employee Sentenced For ID Theft Scheme
Marisol Morales was sentenced to two years and one day in prison for bank fraud and aggravated identity theft in a scheme that defrauded her employer, Wachovia Bank, of more than $300,000
THE NEW YORK TIMES
Poker Bots Invade Online Gambling
PokerStars online poker site was infiltrated with bots masquerading as players, and since has shut them down
BCS
Awareness Of Cybercrime Costs Varies By Sector, Says Expert
Some sectors have no idea that attacks are occurring
BLACKBERRY.COM
Vulnerability In Webkit Browser Engine Impacts Blackberry Device Software Version 6.0 And Later
Research In Motion says a vulnerability affecting the implementation of open source WebKit technology in the BlackBerry Browser in BlackBerry Device Software affects BlackBerry devices running version 6.0 and later
FORBES
Ex-Anonymous Hackers Plan To Out Group's Members
Former members of Anonymous say they plan to out some active members of Anonymous who hacked PayPal, MasterCard, HBGary, and Westboro Baptist Church
Best Of Web Archive:
Most Recent | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173 | 174 | 175 | 176 | 177 | 178 | 179 | 180 | 181 | 182 | 183 | 184 | 185 | 186 | 187 | 188 | 189 | 190 | 191 | 192 | 193 | 194 | 195 | 196 | 197 | 198 | 199 | 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207 | 208 | 209 | 210 | 211 | 212 | 213 | 214 | 215 | 216
Free Research and Reports
Whitepapers
Upcoming Events
Dark Reading Digital Magazine
In This Issue
- How Hackers Fool Your Employees: People are your most vulnerable endpoint. Make sure your security strategy addresses that fact.
- Not All Or Nothing: Effective security doesn't mean stopping all attackers.
Tech Insight
Bugs
Enterprise Vulnerabilities From DHS/US-CERT's National Vulnerability Database
CVE-2013-3342 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 do not properly handle operating-system domain blacklists, which has unspecified impact and attack vectors.
CVE-2013-3341 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, and CVE-2013-3340.
CVE-2013-3340 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, and CVE-2013-3341.
CVE-2013-3339 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3340, and CVE-2013-3341.
CVE-2013-3338 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3339, CVE-2013-3340, and CVE-2013-3341.