Best Of Web
Best Of The Web
SECURITY WEEK
RIM Gets BlackBerry 7 Devices Approved For Department Of Defense Networks
The U.S Department of Defense has approved use of BlackBerry 7 smartphones on its networks, including BlackBerry Bold 9900 and 9930, BlackBerry Torch 9810, BlackBerry Torch 9850 and 9860, and BlackBerry Curve 9360
INTERNET CRIME COMPLAINT CENTER (IC3) ALERT
Malware Installed On Travelers' Laptops Through Software Updates On Hotel Internet Connections
The FBI is warning travelers about new attacks that target them via hotel Internet connections -- a pop-up window posing as an update to a widely used software program appears but actually installs malware if the user clicks on it
AGENCE FRANCE-PRESSE
U.S. Probing Cyber Attacks On Gas Pipelines
National gas industry spokesperson says its member firms had been in contact with investigators and "know the nature of the threat" but not the intent
NPR
Cyber Briefings 'Scare The Bejeezus' Out Of CEOs
Public-private partnership brings chief executives from top technology and defense companies to Washington, D.C., two or three times a year for classified briefings on cyberwarfare and other threats
MSNBC
Interpol To Crack Down On Cyber Crime
Interpol president Khoo Boon Hui said cybercrime is becoming more transnational as organized crime gangs recruit members from countries without diplomatic ties
ZDNET BLOG
Hackers Target Twitter Spammers In Massive Account Data Breach
A breach has left 55,000 Twitter accounts exposed on Pastebin, but the hackers behind the leak may have targeted spammers
TRUSTEER BLOG
A New Twist: Fraudulent Fraud Insurance
The latest scam offers online banking fraud protection insurance via the Tatanga malware platform
MICROSOFT
Microsoft Releases Seven Security Updates
Patch Tuesday includes three critical updates
SOPHOS
Apple Offers iOS 5.1.1 Update, Fixes Some Serious Vulnerabilities
Newest version of operating system patches at least three security flaws, all of them serious
HELP NET SECURITY
Is A German Criminal Behind The Latest Ransomware Campaign?
New campaign seems to point toward German-speaking criminal who did his homework well
COMPUTERWORLD
Half Of All Macs Will Lack Access To Security Updates By Summer
Mountain Lion's impending debut means Apple will stop supporting Snow Leopard, unless it changes a decade-old habit
ZDNET
Researchers Spot New Web Malware Exploitation Kit
Meet the RedKit, a recently spotted Web malware exploitation kit
SECURITY DIRECTOR NEWS
New Federal Security Standards Increase Burden On Electric Utilities
Proposed NERC CIP standards will place a higher burden on security managers
BANK INFO SECURITY
Phisher Guilty Of $1.3 Million Scam
Bank of America, Chase customers targeted by advanced attack
SMART GRID SECURITY BLOG
IBM CISO Study As Predictor Of Future Electric Sector Cybersecurity
Security leaders in utility industry are becoming more closely integrated into the business -- and more independent of IT
GOVERNMENT INFO SECURITY
Why Fed CIOs Worry Most About Infosec
Cybersecurity outranks costs, personnel as top concern in survey
THE REGISTER
Cybercriminals Dump Email For Irresistible Twitter, Facebook Spam
Social networks are an easier way to make money, security experts say
INFOWORLD
PHP Working On New Patch For Critical Vulnerability After Initial One Failed
Upcoming PHP updates will address two known remote code execution vulnerabilities
BBC
India Steps Up Battle Against Rising Cybercrime Wave
Data theft was the most frequently committed fraud in India last year, study says
THREAT POST
UK Ministry Of Defense: Hackers Have Breached Top Secret Systems
Top military leader tells newspaper that "the likelihood is there are problems in there we don't know about"
SECURITY AFFAIRS
U.S. Cybersecurity Capability National Preparedness Report
White House-commissioned report offers insights on U.S. readiness for cyberattack
BANK INFO SECURITY
Mobile Banking: Mitigating Consumer Risks
Users pose obstacles in securing mobile transactions
HOMELAND SECURITY NEWS WIRE
Number, Diversity Of Targeted Cyberattacks Increased In 2011
Vulnerabilities down, but malicious attacks are up, Symantec report states
THE REGISTER
London Olympics 'Not Immune' To Cyber Attack
Cabinet Office minister Francis Maude has warned that the London Olympics will not be immune to cyberattack, and that organizers have set up a dedicated unit for defense
THREAT POST
Expert Warns That WordPress Autoupdate Feature Used To Infect Blogs With Malware
More than 1,000 WordPress blogs are getting hit with malware that has spread via the WordPress automatic update function, a security researcher has discovered
SEARCH SECURITY
Android Mobile Attack: Hacked Websites Target Android Users
Compromised websites are now targeting Android devices with a suspicious mobile application, in what appears to be the first drive-by attack to target mobile users
NEXGOV
DHS Cyber Chief: Industrial System Threats Are Growing
Mark Weatherford, deputy undersecretary for cybersecurity at DHS' National Protection and Programs Directorate, says there has been a "troubling increase in the threats and the vulnerabilities associated with" industrial systems
HOMELAND SECURITY NEWS
Slowing Time As A Way To Counter Cyberattacks
University of Tulsa engineers say slowing down Internet traffic when an attack is detected would also slow down malware and give organizations time to respond
IRAN TIMES
Tehran Says It Traces Stuxnet Back To Texas
The commander of the Iranian civil defense organization told the state news agency that Iranian investigations have found that the Stuxnet worm came from Texas: "After following up the reports that were sent, it became clear that the final destinations [of these reports] were the Zionist regime and the American state of Texas," he said
CHANNEL5 BELIZE
Antivirus Founder, John McAfee, Says Politics Caused GSU Raid
Philanthropist John McAfee, founder McAfee Antivirus, was raided and arrested by Belize's Gang Suppression Unit in his home there under what he says were bogus charges
TREND MICRO BLOG
17 Bad Mobile Apps Still Up: 70,000 Downloads So Far
More malicious apps were discovered in the official Android app store now known as Google Play --10 apps using AirPush to potentially deliver ads and six apps that contain Plankton malware
WALL STREET JOURNAL
Card Data Breach May Be Wider Than First Reported
Global Payments compromise may leave as many as 7 million card accounts vulnerable
ADWEEK
Ad Industry Takes Major Step To Fight Online Piracy
ANA, 4A's adopt best practices to cut ads on rogue sites
MICROSOFT
Microsoft To Issue Seven Updates On Patch Tuesday
Three new patches are considered critical, software giant says
THE CONSUMERIST
Study: 13 Million People Haven't Touched Facebook Privacy Settings
Millions rely on default settings, Consumer Reports study says
SC MAGAZINE
700 U.S. Government Staff Details Hacked
Home addresses and phone numbers published on Pastebin
BANK INFO SECURITY
Global Breach: Did It Start In 2011?
New Visa advisories suggest breach goes back to June
BBC
Attack Takes Soca Crime Agency Website Down
Website of U.K.'s Serious Organized Crim Agency is taken offline by cyberattack
SYMANTEC
Website Injection Campaign Used In Conjunction With An Android Trojan
New campaign involves distribution of a mobile threat
THREAT POST
Citing Terms Of Service, Google Takes Down Blog Of Iranian Security Researcher
Google has taken down a blog of an Iranian man who exposed a security hole in a popular point of sale system in Iran and posted account information for 3 million bank accounts in Iran online
Best Of Web Archive:
Most Recent | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173 | 174 | 175 | 176 | 177 | 178 | 179 | 180 | 181 | 182 | 183 | 184 | 185 | 186 | 187 | 188 | 189 | 190 | 191 | 192 | 193 | 194 | 195 | 196 | 197 | 198 | 199 | 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207 | 208 | 209 | 210 | 211 | 212 | 213 | 214 | 215 | 216
Free Research and Reports
Whitepapers
- Three Principles to Improve Data Security and Compliance
- Aligning IT with strategic business goals: A proactive approach to managing IT risk to your business
- Connecting the Dots: Are You Seeing the Complete Big Data Picture?
- How crowdsourced testing has changed the game for innovative software companies
- Ensuring Your Apps Work in the Real World
Upcoming Events
Dark Reading Digital Magazine
In This Issue
- The Future Of Web Authentication: Password technology is out of steam. We need safer ways to prove who's who online.
- Rethink ID Management: If the technology continues to improve, it might soon be OK for all of us to be one person on the Web.
Tech Insight
Bugs
Enterprise Vulnerabilities From DHS/US-CERT's National Vulnerability Database
CVE-2013-3562
Multiple integer signedness errors in the tvb_unmasked function in epan/dissectors/packet-websocket.c in the Websocket dissector in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
CVE-2013-3561
Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (loop or application crash) via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector.
CVE-2013-3560
The dissect_dsmcc_un_download function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
CVE-2013-3559
epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x before 1.8.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (integer overflow, and heap memory corruption or NULL pointer dereference, and application crash) via a malformed packet.
CVE-2013-3558
The dissect_ccp_bsdcomp_opt function in epan/dissectors/packet-ppp.c in the PPP CCP dissector in Wireshark 1.8.x before 1.8.7 does not terminate a bit-field list, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.