Welcome Guest. | Log In | Register | Membership Benefits
Best Of Web Archive:
Most Recent | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173


Best Of The Web

TECH WORLD
Trojan Gang Targets BT, Talk Talk And Sky Customers
Thieves target phone service logins to fool verification checks

INFOWORLD
Security Slackers Risk Internet Blackout On Mar. 8
If feds pull down temporary DNS fix as planned, machines infected with DNSChanger Trojan won't be able to access the Web

GOOGLE CHROME BLOG
German Federal Office Of Information Security Recommends Chrome
Best practices guide recommends Chrome for its security benefits

SECURITY NEWS DAILY
Authentication Giant VeriSign Hacked Repeatedly In 2010
Company admits to multiple hacks, but won't say what information was stolen

BITCYBER SECURITY
Cridex Trojan Breaks CAPTCHA, Targets Facebook, Twitter Users
Variant of banking Trojan can communicate with CAPTCHA-breaking server

CNET
Kelihos Botnet Makes A Comeback
A once-dead botnet has been resurrected and resumes its spamming ways

HERALD SUN
Governments Struggling To Fight Cybercrime, UN Says
International action to snuff out cybercrime is desperately needed, United Nations official says

YAHOO! NEWS
Komen Foundation Controversy Spurs Website Hack
Best-funded breast cancer organization in the U.S. comes under fire for decision to end support for Planned Parenthood

SECURITY NEWS DAILY
Anonymous Attacks American Nazis
Hacktivists take down and deface American Nazi Party website

FIERCE HEALTH IT
Report: Data Breaches From Unencrypted Devices Up 525 Percent in 2011
Healthcare organizations need to server as their own watchdogs, study says

THE GUARDIAN
Oscars Vote Vulnerable To Cyberattack Under New Online System, Experts Warn
Academy to switch to electronic ballots in 2013 -- but move from paper voting does not eliminate prospect of foul play

FIERCE GOVERNMENT
Clapper Sounds Alarm On Cyber Capabilities Of Iran, China And Russia
Director of national intelligence James Clapper said in testimony before Congress that Iran's cyberpower has increased "dramatically" and that the cyberintelligence capabilities of China and Russia are a big threat

CSO ONLINE
Kelihos Botnet, Once Crippled, Now Gaining Strength
Microsoft and Kaspersky Lab say the botnet, which was taken down in September, is now coming back to life and spamming again

THREAT POST
Game On: Gamma Ray Scanners To Guard 'Most Technologically Secure' Super Bowl Ever
Organizers of Super Bowl XLVI built an $18 million regional operation center that includes surveillance cameras, and security staffers with iPhones for wiring any suspicious or malicious activity to the center during the game at Lucas Oil Stadium

INFOSEC ISLAND
Put Away The Pitchforks: RSA Grants BSides Sponsor Waivers
Organizers of the RSA Conference are issuing waivers for RSA sponsors and exhibitors to participate in BSides San Francisco as well

TRUSTEER BLOG
Malware Redirects Bank Phone Calls To Attackers
Trusteer says a variant of Zeus called Ice IX steals telephone account information from victims to divert calls from the bank to the attacker

COMPUTERWORLD
Facebook Files For $5B IPO
According to papers filed with the U.S. Securities and Exchange Commission, Facebook earned $3.7 billion in revenues in 2011

ABC NEWS
FBI Director Says Cyberthreat Will Surpass Threat From Terrorists
FBI Director Robert Mueller testified before Congress that cyberespionage, computer crime, and attacks on critical infrastructure will overtake terrorism as the No. 1 threat facing the country

CNET
Dubious Android Apps May Not Be Malware--Just Ads
Symantec may have mistakenly flagged more than a dozen Android apps as malware, security researchers at ICSA Labs say

SOFTPEDIA
TinKode Arrested By Romanian Authorities
Grey hat hacker accused of hacking into major U.S. websites

INTERNATIONAL BUSINESS TIMES
Anonymous Hacks French Government Website As Acta Row Rumbles On
Hacktivist group defaces government site in protest of an international copyright law

HELP NET SECURITY
Greatest Risks To Database Security
Organizational issues, not hacks or leaks, are greatest challenge

SECURITY NEWS DAILY
Choosing The Best Website Security Software For Your Business
The trick is finding tools that enhance both security and performance

BLOOMBERG
China-Based Hackers Target Law Firms As Back Doors In Search For Deal Data
Hackers rifled one secure computer network after the next, report says

HELP NET SECURITY
Law Firms Get Hacked For Deal Data
Cyberspies hired by big companies and foreign governments go on hunt for sensitive information

THE REGISTER
Cyberwar Report: Israel, Finland Best Prepared For Conflict
Sweden is also among nations that are better prepared than most, study says

BLOOMBERG
Cybersecurity Disaster Seen In U.S. Survey Citing Spending Gaps
Critical infrastructure companies would have to spend nine times more on security to prevent a digital Pearl Harbor, study says

GOV INFOSECURITY
Push On For Comprehensive Infosec Bill
The White House wants Congress to pass comprehensive cybersecurity legislation this year, taking an approach backed by the Senate versus a piecemeal one in the House, according to a blog post by White House cybersecurity coordinator Howard Schmidt

NAKED SECURITY BLOG
The FBI Vs. The FTC: The Battle For User Privacy In Social Media
Conflicting policies in the U.S. regarding user privacy on social media were highlighted recently with the FBI's plans to develop an app that can grab intelligence from social media, while the Federal Trade Commission is after Facebook and Google for changes in their privacy policies

BUSINESSWEEK
RIM's Heins 'Here To Fight' for BlackBerry Revival Against Apple
RIM is rebuilding its BlackBerrys on BB10, an operating system based on software used to run nuclear power plants and unmanned aerial drones, as its new CEO gears up to revive the flagging mobile platform

THE WASHINGTON POST
Megaupload Data Could Be Deleted Starting Thursday
The fate of data stored on file-sharing site Megaupload remains unclear for users who had legitimate files on the site, such as documents, photos, and home videos

CHANNELCONOMICS
Cloud Heating Up Security Competition
Symantec and McAfee are each increasing revenues despite losing some customers to one another -- and it's all due to the cloud

FORBES
Hacker's Demo Shows How Easily Credit Cards Can Be Read Through Clothes And Wallets
A few hundred dollars' worth of equipment can invisibly see credit card data through a wallet, purse, or pocket

RIA.RU
Russia Must Be Ready For Space, Cyber Wars
Chief of the General Staff of the Russian Armed Forces Nikolai Makarov said this weekend that warfare has moved online and to aerospace, and Russia is looking at how Western countries are moving this direction

INFOSEC ISLAND
Urgent: Help Us Save Security BSides San Francisco
BSides San Francisco is looking for non-RSA participating sponsors to keep the event on schedule after sponsors were notified that companies that sponsor RSA cannot sponsor another event in a five-mile radius

SECURITY WEEK
85 Percent Of Malware Comes From The Web, 30K Sites Infected Daily, Says Sophos
More than 30,000 websites are infected daily -- 80 percent of which are legitimate sites infected by attackers -- and two-thirds of them were hijacked by the Blackhole Trojan crimeware kit

STANFORD CYBERLAW
MegaUpload: A Lot Less Guilty Than You Think
The legal ramifications of the case are complicated, including the jurisdictional implications over whether the U.S. has jurisdiction over someone who uses a hosting provider in the Eastern District of Virginia, and over a company that uses PayPal

FINEXTRA
SEC Charges Latvian Trader With Account Hijacking
A Latvian man has been charged by the Securities and Exchange Commission with hacking into online brokerage accounts and altering stock prices -- he made some $850,000 in the scam, which cost others millions of dollars

CSO ONLINE
Middle East Stock Exchanges Hit By Hackers
The Saudi Arabia and Abu Dhabi stock exchanges were the target of hackers in what appears to be part of online protests

THREAT POST
FBI Looking For App To Monitor Twitter And Facebook For Threat Data
The FBI is planning to craft an application for monitoring news feeds, Twitter, and Facebook to gather information on emerging threats and new events


Best Of Web Archive:
Most Recent | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173








Bugs
ENTERPRISE VULNERABILITIES
Vulnerability:ssl-vpn end-point interrogator/installer activex control
Published:2010-11-03
Severity:High
Description:Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller) before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long (1) CabURL and (2) Location arguments to the Install3rdPartyComponent method.
Vulnerability:gvim
Published:2010-11-03
Severity:High
Description:Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse User32.dll or other DLL that is located in the same folder as a .TXT file. NOTE: some of these details are obtained from third party information.
Vulnerability:cforms
Published:2010-11-03
Severity:Medium
Description:Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in cforms WordPress plugin 11.5 allow remote attackers to inject arbitrary web script or HTML via the (1) rs and (2) rsargs[] parameters.
Vulnerability:links, wsn links, wsn links
Published:2010-11-03
Severity:High
Description:Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) namecondition or (2) namesearch parameter.
Vulnerability:deluxebb
Published:2010-11-03
Severity:Medium
Description:SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033.



Briefing Centers
POWERFUL INFORMATION
AT YOUR FINGERTIPS
(SPONSORED LINKS)