Best Of Web
Best Of The Web
INDUSTRY WEEK
China Warns That Destructive Panda Virus Has Returned
Turns out a new worm spreading around China's Internet is an updated version of the Panda Burning Incense virus, which infected millions of PCs three years ago
WIRED
Lawmakers Want to Bar Sites From Posting Sensitive Government Docs
Republican lawmakers ask Department of Homeland Security how to bar or criminally penalize whistleblower sites that reposted TSA's airport-screening manual
DATA LOSS DB
Federal Data Breach Bill Passes House
Bill gets closer to law than any of its many predecessors
GOVERNMENT INFO SECURITY
NASA's Hack Woes Continue
"Friendly" hacker claims to have broken into secure internal sites at space agency
JOONG ANG DAILY
Hacking Internet Phone Service Is Said To Be Simple
Newspaper finds experts who easily get past passwords, firewalls
INTERNET EVOLUTION
Ten Years After Y2K, Web Threat Is Greater
Millennium bug was nothing compared to threat against Internet, expert says
WPA CRACKER
New Cloud-Based Service Checks Security Of Encrypted WiFi
Moxie Marlinspike's new service for penetration testers and auditors tries to crack WPA passwords
SECURITY PRO NEWS
Germany Goes On Offensive Against Malware
ISPs will look for unusual traffic patterns, then warn users
NETWORK WORLD
Report Predicts Rise Of Self-Defending Botnets
Automated nets require no human intervention, study says
MSNBC
U.S. Takes Fight Against Hackers Overseas
FBI, Secret Service set up shop abroad to counter sophisticated attacks
INFORMATION SECURITY RESOURCES
Massive TSA Security Breach Revealed
The Transportation Security Agency inadvertently posted online its entire airport screening procedures manual, including secrets rules for diplomats, CIA, and law enforcement
COMPUTERWORLD UK
Microsoft Dismisses Windows BitLocker Break In
Says threats to its BitLocker disk-encryption technology are "relatively low risk" in the wake of a paper published by German researchers
CNET
Congress Probes Visa, Amex Role In Web Scam
A U.S. Senate committee investigates after learning of thousands of complaints from online shoppers about unauthorized charges
WIRED
TJX Hacker To Plead Guilty To Heartland Breach
Albert Gonzalez has entered into a plea agreement on charges he hacked into Heartland Payment Systems, Hannaford Brothers, 7-Eleven, and two other unnamed national retailers
SOPHOS BLOG
Sarah Palin Hacker Suspect Had Spyware-Infected PC
Legal team defending the 21-year-old student accused of hacking into Palin's Yahoo account says defendant's computer was infected with spyware
US-CERT
Adobe Releases Security Updates For Flash Player And AIR
Security bulletin addresses multiple vulnerabilities in Adobe Flash Player 10.0.32.18 and earlier, and Adobe AIR1.5.2 and earlier
NIST
NIST Develops Experimental Validation Tool For Cell Phone Forensics
Application automatically uploads cell phone data, such as phone numbers and text messages, for access by forensics investigators
SEARCH SECURITY
RSA's Coviello Declines Cybersecurity Coordinator Post
Art Coviello, president of RSA, is among several business leaders who have declined an offer from the Obama administration to become cybersecurity coordinator
CHANNELWEB
FTC Considers Enacting Tougher Online Privacy Rules Tougher
New rules would target online retailers
VARIETY
'CSI' TV Show Creator Gets Deal To Solve Cyber Crimes
Zuiker will build show around newly formed government agency that handles online crimes
READ WRITE WEB
User Data Easier Than Ever To Phish On Facebook, New Study Shows
Twenty-somethings even more willing to give up personal information than they were two years ago
NETWORK WORLD
True Security Requires Extensive End User Training User
Many security leaks occur because end users don't understand the threat, expert says
SEARCH SECURITY
Cybercriminals Invest In Social Networking Attacks
Exploits described as "rising stars" in new security research report
HELP NET SECURITY
Conficker Worm To Become Bigger Threat In 2010
Despite Microsoft's bounty on its perpetrators, botnet continues to grow, BitDefender researchers say
eSECURITY PLANET
U.S. No Longer The Spam Leader
Brazil takes over top spot as biggest spammer; U.S. falls to No. 2
WASHINGTON POST
Louisiana Firm Sues Capital One After Losing Thousands In Online Bank Fraud
Electronics testing firm alleges negligence because bank didn't stop hackers from withdrawing funds
READWRITEWEB
Facebook Forms New Safety Advisory Board
The new Facebook Safety Advisory Board is made up of Internet safety organizations that will advise the social networking firm on online safety issues
HELP-NET SECURITY
Handing Your Encryption Key To Authorities: US Vs. UK Law
In the U.S., a federal judge ruled that a defendant didn't have to surrender an encryption key to his encrypted hard drive, but in the U.K. a law requires that defendants do so
THE WASHINGTON POST
Phishers Angling For Web Site Administrators
A new attack attempts to trick Webmasters into providing their credentials to the bad guys, who are targeting site owners at 90-plus online hosting providers
COMPUTERWORLD
HSBC Exposed Sensitive Bankruptcy Data
A bug in its imaging software caused sensitive data about some of its customers undergoing bankruptcy proceedings to be exposed, HSBC Bank discloses
THE TELEGRAPH
Climategate: Was Russian Secret Service Behind Email Hacking Plot?
Speculation grew over the weekend that hackers working for the Russian secret service were responsible stealing controversial email in the "Climategate" scandal
THE REGISTER
Paypal Mistakes Own Email For Phishing Attack
PayPal treated its own email as a phishing attack after being notified its email looked suspicious
FIN 24
World Cup To Bring More Crime
The 2010 FIFA World Cup is likely to generate more cybercrime and viruses, security experts say
ASSOCIATED PRESS
Iran Chokes Off Internet On Eve Of Student Rallies
The Iranian government has blocked Internet access in advance of expected demonstrations opposed to the country's clerical rulers
YAHOO! NEWS
New Study Calls For Cybersecurity Overhaul In The U.S.
Government should offer incentives to businesses to fix security problems, Internet Security Alliance Says
PUREWIRE
Preview To A Possible Future Of Rogue AV
New attack uses fakejava_script-generated alerts claiming the user's PC is infected
PC PRO
The Top Ten Security Heroes
Kaminsky, Moss, Norton are among those keeping the Web safer, report says
NEXTGOV
DHS Completes Draft Plan Of How To Respond To National Cyberattack
Agency accepting input on plan prior to test run in 2010
IT SECURITY PORTAL
Hackers View Holiday Season As Ideal Time For Hacking Business Systems
High traffic and skeleton security staffs make it the most wonderful time of the year for the bad guys
LINUX
Security Report Predicts Cloud Computing Attacks In 2010
M86 predictions include new exploits in the cloud
Best Of Web Archive:
Most Recent | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173 | 174 | 175 | 176 | 177 | 178 | 179 | 180 | 181 | 182 | 183 | 184 | 185 | 186 | 187 | 188 | 189 | 190 | 191 | 192 | 193 | 194 | 195 | 196 | 197 | 198 | 199 | 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207 | 208 | 209 | 210 | 211 | 212 | 213 | 214 | 215 | 216
Free Research and Reports
Whitepapers
Upcoming Events
Dark Reading Digital Magazine
In This Issue
- How Hackers Fool Your Employees: People are your most vulnerable endpoint. Make sure your security strategy addresses that fact.
- Not All Or Nothing: Effective security doesn't mean stopping all attackers.
Tech Insight
Bugs
Enterprise Vulnerabilities From DHS/US-CERT's National Vulnerability Database
CVE-2013-3342 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 do not properly handle operating-system domain blacklists, which has unspecified impact and attack vectors.
CVE-2013-3341 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, and CVE-2013-3340.
CVE-2013-3340 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, and CVE-2013-3341.
CVE-2013-3339 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3340, and CVE-2013-3341.
CVE-2013-3338 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3339, CVE-2013-3340, and CVE-2013-3341.