Best Of Web
Best Of The Web
COMPUTERWORLD
DDOS Attack Again Takes Down South Korean Websites
Top news site, top auction site, and president's personal home page are latest victims
THREATPOST
Microsoft To Release Patches For Two Video Flaws
Both patches should be ready by July 15
BUSINESSWEEK
Lessons Learned From The Data Breach At Heartland
How the company responded, and what other companies might learn from it
GOVERNMENT INFO SECURITY
Cyber Attacks: How Worried Should We Be?
Potential danger, so far, seems to be in the eye of the beholder
YAHOO!
Complex fraud scams may surround London 2012, police warn
TG DAILY
Cyber Secure Institute Criticizes Microsoft's Hack-And-Patch Strategy
Security experts say software giant needs to "break the cycle"
NEW YORK TIMES
Murdoch Papers Said To Pay To Settle Hacking Cases
Reporters worked with private eyes to hack the cell phones of public figures, report says
COMPUTERWORLD
IE Bug Is Next Conficker
Newly discovered vulnerability is "custom made" for hackers, researchers say
FINEXTRA
New Jersey Street Gangs Gravitating To Hi-Tech Cheque Fraud
Several members of the New Jersey Bloods gang have been arrested and accused of using laptops and digital cameras to create counterfeit checks worth $654,000
ADOBE PRODUCT SECURITY INCIDENT RESPONSE TEAM
Adobe Warns Of Potential ColdFusion Security Issue
Adobe has had reports of ColdFusion Websites being compromised through a vulnerability in the FCKEditor rich text editor, which is installed with ColdFusion 8; Adobe is working on a patch
THE REGISTER
Cops Swoop On E-Crime Gangs After Banks Pool Intelligence
Two London-based cybercrime gangs were apprehended following an agreement by banks and credit card companies to share intelligence on network attacks and malware
GOOGLE BLOG
Native Client Security Contest: The Results Are In!
Winning contestants found bugs that enabled exploits, but no fundamental flaw, in the design of Google Native Client, Google says
THE WASHINGTON POST
GAO: Major Security Flaws At Federal Buildings
The federal government police agency in charge of protecting federal buildings has failed several physical security audits
COMPUTERWORLD UK
Malware Traffic Soars
Fortinet data shows the exploit rate is near 60 percent for first time
HIR INFORMATION REPORT
Fare Thee Well, Milw0rm
Milw0rm, a site dedicated to posting new exploit code, appears to be on its way out
NETWORK WORLD
US Authorities Extradite Indian On Hacking Charges
Indian pleads not guilty to charges of hacking into online brokerage accounts in order to manipulate stock prices
COMPUTERWORLD
How To Maintain Security Without Increasing The Operational Load On IT Staff
Automated log management, provisioning can help
ENTERPRISE SECURITY TODAY
Cyberspace Shapes Up To Be Next Battleground
Legislators, military leaders plan for future conflicts
Legislators, military leaders plan for future conflicts
James Bond Hopefuls Should Steer Clear Of Facebook
British intelligence agency says potential spies should keep a low online profile
USA TODAY
Some Twitter Users Likely Unaware Of Security Risks
Experts expect more attacks on popular microblogging service
BUSINESSWEEK
Identity Thieves Target Job Seekers
Fraudsters hack corporate job sites, send fake messages impersonating potential employers
THE REGISTER
Opera CEO: Unite Not A Security Risk
Cloud technology is actually safer than server-based alternatives, exec says
CIOL
Dell Launches Digital Forensics Service For Police
System protects digital evidence audit trails while allowing multiple analysts to work on the same data
SCIENCE DAILY
Social Security Numbers Can Be Predicted With Public Information
University study shows that public records can be used to guess SSNs with surprising accuracy
WASHINGTON POST.COM
PC Invader Costs Ky. County $415,000
Ukraine-based cybercriminals stole $415,000 from Bullitt County, Kentucky, with the help of malware and dozens of "mules" in the U.S.
SANS INTERNET STORM CENTER
0-Day In Microsoft Directshow (Msvidctl.Dll) Used In Drive-By Attacks
A zero-day exploit in Microsoft DirectShow is being actively exploited in drive-by attacks using thousands of newly compromised Websites
THE H SECURITY
Security On Symbian Mobiles: Early Signs Of Crumbling
Researcher releases paper that shows how to find and exploit vulnerabilities in Symbian and Symbian applications
ECONSULTANCY
Facebook Threatens National Security
Family details of the incoming Chief of the British Secret Intelligence Service were posted on Facebook by his wife, posing a serious security threat
NEWS ABOUT FRAUDS
Australians Warned On Card Fraud After $6m Bust
Seven people were charged for allegedly running a $6 million credit card scam using stolen personal information to create fake credit cards, Medicare cards, driver's licenses
TECHWORLD
Malware Authors Hit By Recession, Too
German software security company G Data says the number of unique malware signatures dropped by 30 percent between May and June -- mainly due to the economic forces
MCAFEE AVERT LABS
McAfee's July Spam Report Released
The most popular subject line in six continents this quarter was "Viagra"
MSN MONEY CENTRAL
When A Parent Steals Your Identity
Parents victimizing their own kids' identities to establish credit or set up fraudulent accounts is more common than you'd think
SECURITY FOCUS
Juniper Pulls Talk On ATM Vulnerabilities
Researchers agree to withhold disclosure of flaws until vendor can fix them
NETWORK WORLD
New Trojan Puts Sneaky Twist On Click Fraud
Malware invisibly funnels search queries through its own site, cheating Google out of money
CHINA DAILY
Plug Not Pulled On Green Dam
Despite delay, China says controversial Internet filter requirement will go forward
COMPUTERWORLD UK
Forrester: Don't Take Cloud-Based Mail Security At Face Value
Users should ask hard questions before choosing a provider, analyst firm says
BCS
Cybercriminals Target New Harry Potter Film
Fans should wait until legitimate sources are available before downloading film, security firm says
IT-DIRECTOR.COM
Finjan: Second Indian Government Website Hacked By Cybercriminals
New attack takes place despite stepped-up security
NETWORK WORLD
Cybersecurity Boondoggle?
Developments suggest federal efforts to promote cybersecurity may already be out of control
WASHINGTON POST
Obama Administration To Involve NSA In Defending Civilian Agency Networks
Department of Homeland Security chief says NSA's involvement will be "guided"
Best Of Web Archive:
Most Recent | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173 | 174 | 175 | 176 | 177 | 178 | 179 | 180 | 181 | 182 | 183 | 184 | 185 | 186 | 187 | 188 | 189 | 190 | 191 | 192 | 193 | 194 | 195 | 196 | 197 | 198 | 199 | 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207 | 208 | 209 | 210 | 211 | 212 | 213 | 214 | 215 | 216
Free Research and Reports
Whitepapers
Upcoming Events
Dark Reading Digital Magazine
In This Issue
- How Hackers Fool Your Employees: People are your most vulnerable endpoint. Make sure your security strategy addresses that fact.
- Not All Or Nothing: Effective security doesn't mean stopping all attackers.
Tech Insight
Bugs
Enterprise Vulnerabilities From DHS/US-CERT's National Vulnerability Database
CVE-2013-3342 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 do not properly handle operating-system domain blacklists, which has unspecified impact and attack vectors.
CVE-2013-3341 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, and CVE-2013-3340.
CVE-2013-3340 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, and CVE-2013-3341.
CVE-2013-3339 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3340, and CVE-2013-3341.
CVE-2013-3338 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3339, CVE-2013-3340, and CVE-2013-3341.