Best Of Web
Best Of The Web
FIERCE CIO
1 In 6 PCs Around The World Not Protected By Security Software
Seventeen percent of PCs access the Internet without active anti-malware protection, study says
NEW YORK TIMES
Obama Order Sped Up Wave Of Cyberattacks Against Iran
Detailed account describes birth of Stuxnet, U.S. tactics for use of cyberweapons
INTELLIGENT UTILITY
BC Hydro: Risk Management Is Essential For Security Planning
The hows and whys of securing AMI
THREAT POST
DHS Says No Evidence That Flame Targets Industrial Systems, But Urges Caution
ICS CERT says it doesn�t believe new malware targets SCADA systems, but advises critical infrastructure owners to be on the alert
HELP NET SECURITY
Gamers Increasingly Under Attack
Video shows how scammers increasingly target gamers and gaming databases because of valuable personal information
HOMELAND SECURITY NEWSWIRE
Pentagon: Sabotaging U.S. Computers Is An Act Of War Against U.S.
Sabotage by another country may elicit a traditional military response, officials say
THE LOCAL
'We Are Not Interested In Assange': U.S. Envoy
U.S. ambassador dismisses suggestions that Washington wants WikiLeaks founder extradited
WASHINGTON POST
U.S. Tech Companies Warn Of Threat To Internet From Foreign Governments
China, Russia, and some Arab states are pushing to hand more control of the Web to the United Nations, officials say
INDUSTRY WEEK
Nine Principles To Boost Cybersecurity
White House and industry botnet group offer basic guidelines for increasing cyberdefense
REUTERS
Energy Assets In Front Line Of Cyberwar
Global energy infrastructure is more vulnerable than ever, thanks to Stuxnet progeny
SECURITY WEEK
Hacktivism: Where It's Been And Where It's Going
As new groups come on the scene, we could see evolutions that prove more fruitful than harmful
CNET
Meet The Little Box That Could Stop Flame And Stuxnet
New plug-and-play device for factories and power plants could stop malware from triggering a major malfunction
1ST SECURE IT
Understanding The New PCI Vulnerability Management Requirement
After June 30, the ranking of vulnerabilities becomes a requirement under PCI compliance guidelines
THE REGISTER
'Super-Powerful' Flame Work Actually Boring BLOATWARE
Malware is more Jabba the Hutt than lean Windows killing machine, experts say
THE GUARDIAN
Cyber-Attack Concerns Raised Over Boeing 787 Chip's 'Back Door'
Two Cambridge researchers say they found a back door in a computer chip used in military systems and aircraft such as the Boeing 787 that could allow hackers to access and sabotage the chip
THE HACKER NEWS
New Jersey Mayor Arrested For Hacking
The mayor of West New York, New Jersey, and his son have been charged for allegedly hacking into a website and related email account that was organizing a recall for the mayor
THE WASHINGTON POST
Cybersecurity Experts Needed To Meet Growing Demand
There are plenty of cybersecurity jobs out there, but relatively few qualified applicants, experts say
F-SECURE BLOG
Targeted Attack: London 2012 Olympics
F-Secure has found an Olympics-themed email attack that uses a malicious Adobe Reader and Acrobat-based PDF attachment
THREAT POST
UI Randomization, Statistical Analysis Could End Clickjacking
PayPal researcher Brad Hill says randomized user interfaces and back end screenshot comparison tools could stop clickjacking attacks
THE NEW YORK TIMES
With Personal Data In Hand, Thieves File Early And Often
The IRS has discovered 940,000 fake income tax returns where identity thieves would have gotten $6.5 billion in refunds, but the IRS missed another 1.5 million fraudulent returns worth $5.2 billion in returns
VISA
Digital Wallet Services Security
Visa says the best way to keep digital wallets safe is to lock them down with passwords/passphrases, use PINs and other security steps to ensure only you can access sensitive information, and know who to call if your digital wallet is breached
THE REGISTER
Millions Snub Antivirus, Firewalls In Web Poll
One in six Windows PCs worldwide don�t run basic security software, or 17 percent of all machines online, according to a new McAfee study
KREBS ON SECURITY
White House Aims To Stoke Botnet Fight
Obama administration meeting will focus on methods for stopping botnets
INFOWORLD
The One Company That Wasn�' Hacked
If you want to avoid the bad guys, avoid giving users elevated privileges, expert says
SECURITY NEWS DAILY
'Wikiboat' Hackers Threaten Massive Attacks
Hacktivist group threatens DDoS attacks against multinational firms
ZDNET
Top 374 Keywords The U.S. Government Monitors
If these words appear in your social networking posts, you could get some attention
GOVERNMENT INFO SECURITY
Fighting Hackers With Public Relations
Keeping hacktivists at bay means understanding their motives, experts say
INFOSEC ISLAND
The (Hidden) Costs Of Security Fixes In Enterprise Software
"Free" fixes and patches may carry a heavy cost to the buyer
THREAT POST
Serco: 'Sophisticated' Attack On U.S. Government Pension Plan Nets Info On 123,000
Contractor says it was a target of attackers seeking data on federal employees and their families
NETWORK WORLD
Romanian Authorities Dismantle Hacker Group Targeting Government Websites
Romania's organized crime prosecutors detain 12 individuals suspected of hacking official sites
COMPUTERWORLD
Researchers Propose TLS Extension To Detect Rogue SSL Certificates
Researchers have proposed an extension to the Transport Layer Security (TLS) protocol that would allow browsers to detect and block fraudulently issued SSL certificates
THREAT POST
FBI Warns Top Firms Of Anonymous Protest Hacks On May 25
The FBI's Cyber Division issue a warning to some of the world's top corporations -- including Apple, McDonald's, ExxonMobil, Hewlett-Packard, and Walmart -- about a massive planned DDoS attack and leak of classified data by Anonymous against them
USA TODAY
Clinton: U.S. Hacked Yemeni Al-Qaeda Sites
Ads promoting the killing of Americans changed into ads showing the number of Yemenis killed by Al-Qaeda, Secretary of State says
COMPUTERWORLD NZ
UK Cybersecurity Professionals Are 'Too Old,' Says Baroness Neville-Jones
The UK government's special representative to business for cybersecurity says the IT security industry needs more young people to avoid a skills shortage in the near future
SECURELIST BLOG
The Anatomy Of Flashfake, Part 2
The Mac OS X Flashback Trojan interferes with user activity on Google and can make its scammers thousands of dollars per day
CSO ONLINE
Chinese Cyber-Espionage Threatens U.S. Economy, DoD Says
Chinese hackers are the most active and persistent cyberspies and is a growing and constant threat the U.S. economy, the Defense Deparment said in a recent national security report to Congress
SECURITY BALANCE BLOG
Browsers And Malware
No browser owns more than 40 percent of the market, so it makes sense for attackers to go after Adobe Flash and Java for a big-hit attack
THREAT POST
Absinthe 2.0 Jailbreak For iOS 5.1.1 Devices Released
A new jailbreak tool lets users run unsigned iPhone apps on their iOS 5.1.1 device and its developers say it's one of the simplest jailbreak tools � "so easy your grandma could do it"
FIERCE GOVERNMENT IT
No BYOD, CAC In The Tactical Environment, Says Army Official
The U.S. Army will not allow bring-your-own devices in the tactical environment, an Army official said, in part because it requires full device virtualization to secure it, which won't work in the field
MCAFEE BLOG
Selling Your Old Smartphone? Not Smart
Even if you wipe and reformat a hard drive, you can still leave private and sensitive content behind on your smartphone, so don�t sell it on eBay or Craigslist
Best Of Web Archive:
Most Recent | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173 | 174 | 175 | 176 | 177 | 178 | 179 | 180 | 181 | 182 | 183 | 184 | 185 | 186 | 187 | 188 | 189 | 190 | 191 | 192 | 193 | 194 | 195 | 196 | 197 | 198 | 199 | 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207 | 208 | 209 | 210 | 211 | 212 | 213 | 214 | 215 | 216
Free Research and Reports
- Strategy: Building and Maintaining Database Access Control Permissions
- Best Practices: Using Apple's Global Proxy to Boost Mobile Security
- InformationWeek 2013 IT Spending Priorities Survey
- Take the InformationWeek 2013 Database Technology Survey
- Strategy: How to Conduct an Effective IT Security Risk Assessment
Whitepapers
Upcoming Events
Dark Reading Digital Magazine
In This Issue
- The Future Of Web Authentication: Password technology is out of steam. We need safer ways to prove who's who online.
- Rethink ID Management: If the technology continues to improve, it might soon be OK for all of us to be one person on the Web.
Tech Insight
Bugs
Enterprise Vulnerabilities From DHS/US-CERT's National Vulnerability Database
CVE-2013-3496 (vipnet_client, vipnet_coordinator, vipnet_personal_firewall, vipnet_safedisk)
Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file.
CVE-2013-2849 (chrome)
Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome before 27.0.1453.93 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) drag-and-drop or (2) copy-and-paste operation.
CVE-2013-2848 (chrome)
The XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain sensitive information via unspecified vectors.
CVE-2013-2847 (chrome)
Race condition in the workers implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via unknown vectors.
CVE-2013-2846 (chrome)
Use-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2013-2840.