Best Of Web
Best Of The Web
SECURITY WEEK
Lessons From The Most Interesting Data Breaches Of 2010
Some thoughts on how your organization can avoid being one of those breaches in 2011
KREBS ON SECURITY
FBI Identifies Russian "Mega-D" Spam Kingpin
Botnet once accounted for a third of all spam on the Web
YAHOO!
Google Ramps Up Fight Against Online Piracy
Search engine takes steps against users who post or share pirated material
CSO ONLINE
WikiLeaks Incidents Stoke IT Security Angst
Experts warn that absence of proper policies could expose enterprises to insider data leaks
THE NEW NEW INTERNET
"Indian Cyber Army" Strikes Against Pakistani Government Websites
Forty sites attacked by hacker group
HOST EXPLOIT
Russian Gang Used Customized Virus Bought From Hacker Forum On ATMs
Members of criminal group arrested in Yakutsk
CYBERINSECURE.COM
Cryptographers Crack Canon Original Data Security
Fake test photos authenticated as real, researchers say
HOST EXPLOIT
Baidu And Register.com Settle Cyber Attack Case
Baidu's domain was hijacked following attack on domain registrar
LIGHT READING
Next-Gen Security For Mobile Infrastructure
Mobile broadband services open up a new range of targets for attackers, researcher says
ESET
Stealing From Santa (Scammers' Holiday Season)
New threat report offers a look at recent and forthcoming attacks
TRUSTEER
The Golden Hour Of Phishing Attacks
Researchers find that phishing attacks are most effective in the first hour, before they're discovered by security vendors
REDSEAL
Chess Lessons For IT Security
As in chess, the best security management will require partnership between humans and computers
PROCESSOR
Have You Been Breached? The Answer Might Lie In Your Data Logs
Many enterprises overlook key security information that is right in front of them, experts say
THINQ
Facebook's 'Like This' Button Is Tracking You
A Dutch researcher says Facebook's 'Like This' button watches your every move and reaches beyond Facebook�s own site as other sites use the button
THE TRIBUNE
Cyberwarfare: Indian Hackers Take Down 36 Government Websites
A hacker group calling itself the "Indian Cyber Army" hacked some 26 Pakistan government websites yesterday
SOFTPEDIA
Polymorphic Injection Attack Targets WordPress Blogs
A mass injection attack that uses polymorphic obfuscation is under way and so far has targeted WordPress blogs at an U.S.-based hosting provider
ADOBE SECURE SOFTWARE ENGINEERING TEAM BLOG
The Year Of The Sandbox Isn't Over Yet!
Adobe has added sandboxing support within Chrome?s integrated version of Flash Player
YAHOO NEWS
China Arrests Hundreds Of Hackers, Says Situation "Grim"
China has arrested more than 460 hackers this year, but the prospects to prevent future assaults on computer security remain grim, the ministry of public security said a day after the WikiLeaks U.S. State Department cables were published
COMPUTERWORLD
IE's Share Slides Again As IE6 Starts To Fade Away
Internet Explorer 6 usage fell 1.3 percent during November, the biggest decline in eight months, while IE's overall share fell as well
FUTURE INTELLIGENCE
Putin Lends Support To Hacker Probe
Russia�s financial watchdog has announced an investigation into links between its banks and hacker attacks against the U.S.
HOST EXPLOIT
Russian Gang Used Customized Virus Bought From Hacker Forum On ATMs
Members of an organized crime group responsible for infecting ATMs paid $3,200 to a hacker who wrote the malware for them that infected the cash machines
BBC
Talk Talk To Introduce Controversial Virus Alert System
Malware monitoring may be seen as invasion of users' privacy
HEALTHCARE INFO SECURITY
Privacy Violations Result In Eight Fines
Hospitals get sanctions under tough California laws.
IT TOOLBOX
Cyber Unit Of Army Guards Computer Networks
Army Cyber Command takes reins in online defense
HELP NET SECURITY
Vinself: A Back Door For Corporate Networks?
FireEye researcher suggests that new attacks may be in it for the long haul
NETWORK WORLD
Who Wants To Be A Cybersecurity Warrior?
U.S. government continues efforts to attract young security talent
IT PRO
Hackers Launch DDoS Attacks In Pirate Bay Rage
Anonymous launches attacks on Warner Brothers and IFPI following court's decision to jail Pirate Bay founders
CNET
WikiLeaks Has U.S. Scrambling To Plug Holes
Release of sensitive documents causes "meltdown" in U.S. foreign policy
FORBES
An Interview With WikiLeaks' Julian Assange
Founder of whistle-blowing organization talks about his background and the rationale behind WikiLeaks' activities
SANS BLOG
UI Spoofing Safari On The iPhone
Researcher releases proof-of-concept demonstrating how to spoof a Web page via Safari on the iPhone
EWEEK
Security Expert Warns Of Android Browser Flaw
Android bug would let a malicious website access files stored on the SD card; Google is working on a fix for the zero-day flaw
REUTERS
Iran Says Cyber Foes Caused Centrifuge Problems
Iranian president Mahmoud Ahmadinejad today said enemies of Iran used computer code to generate "limited" problems for centrifuges involved in uranium enrichment at some of its nuclear sites
CNN
Hacktivist 'For Good' Claims Wikileaks Takedown
"The Jester" claimed responsibility for a DDoS attack that took down the Wikileaks site Sunday prior to its posting hundreds of thousands of classified U.S. diplomatic cables
PC ADVISOR
Microsoft Investigates Windows UAC Hack
Microsoft is investigating reports of an unpatched bug in the Windows kernel that could be exploited to bypass the User Account Control (UAC) feature in Windows Vista and Windows 7
THE REGISTER
Secunia Recovers From DNS Redirection Hack
Secunia confirmed it suffered a DNS redirection hack that sent its visitors to a malicious site last Thursday morning, and customers of registrar DirectNIC were hit
TRUSTED SOURCE BLOG
Spammed Malware Linked Into Your Facebook Photo
Recent attack via email poses as a Facebook message that a friend �commented on your photo�
SOFTPEDIA
Second T-Mobile UK Former Employee Admits To Customer Data Theft
A second man formerly with T-Mobile UK pleaded guilty this week to having sold confidential customer information to third parties
CSO ONLINE
Woman Helped Sell Fake Chips To U.S. Military
Florida woman who helped her employer sell phony computer chips to Defense contractors supplying the U.S. military faces up to five years in prison and a $250,000 fine
THE REGISTER
Network Card Rootkit Offers Extra Stealth
Security researchers have developed a proof-of-concept that demonstrates placing a backdoor rootkit on a network card
SOFTPEDIA
Korean Artillery Fire Exchange Exploited To Distribute Scareware
Keywords related to the conflict have become hot search topics, and scareware pushers launched black hat search engine optimization scams
Best Of Web Archive:
Most Recent | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173 | 174 | 175 | 176 | 177 | 178 | 179 | 180 | 181 | 182 | 183 | 184 | 185 | 186 | 187 | 188 | 189 | 190 | 191 | 192 | 193 | 194 | 195 | 196 | 197 | 198 | 199 | 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207 | 208 | 209 | 210 | 211 | 212 | 213 | 214 | 215 | 216
Free Research and Reports
Whitepapers
Upcoming Events
Dark Reading Digital Magazine
In This Issue
- The Future Of Web Authentication: Password technology is out of steam. We need safer ways to prove who's who online.
- Rethink ID Management: If the technology continues to improve, it might soon be OK for all of us to be one person on the Web.
Tech Insight
Bugs
Enterprise Vulnerabilities From DHS/US-CERT's National Vulnerability Database
CVE-2013-3562
Multiple integer signedness errors in the tvb_unmasked function in epan/dissectors/packet-websocket.c in the Websocket dissector in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
CVE-2013-3561
Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (loop or application crash) via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector.
CVE-2013-3560
The dissect_dsmcc_un_download function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
CVE-2013-3559
epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x before 1.8.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (integer overflow, and heap memory corruption or NULL pointer dereference, and application crash) via a malformed packet.
CVE-2013-3558
The dissect_ccp_bsdcomp_opt function in epan/dissectors/packet-ppp.c in the PPP CCP dissector in Wireshark 1.8.x before 1.8.7 does not terminate a bit-field list, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.