Best Of Web
Best Of The Web
THE REGISTER
Brits Guard Facebook Passwords More Than Work Logins
A third of users have shared their work logins, but only 20 percent say they share Facebook credentials
CNET
Tech Firms Agree To Privacy Protections For Mobile Apps
Apple, Google, Microsoft and others agree to inform users of data usage policies before they download apps
WIRED
Ruling Stands: Defendant Must Decrypt Laptop
Woman who faces years in prison says decryption would violate her Fifth Amendment rights; appeals court says defendant must be acquitted or convicted before appeal can take place
SECURITY NEWS DAILY
Hidden Security Worms May Loom In Apple�s Future
Rapid growth of platform could lead to increased targeting by hackers, experts say
INFO SECUIRITY
Firms Move Ahead With Mobility, Despite Security Concerns
More than 41 percent of IT professionals in Symantec study say they are worried about security risks posed by mobility programs
INFOSEC ISLAND
DHS's Mark Weatherford On The Cybersecurity Act Of 2012
Deputy undersecretary for cybersecurity publicly endorses proposed legislation
COMPUTERWORLD
Google, Microsoft Butt Heads Over IE Privacy Skirting
Google countered Microsoft's assertion that the search engine giant is skirting Internet Explorer's privacy protections
GARTNER BLOG
Proposing An International Cyberweapons Control Protocol
Gartner analyst says protocols for cyberweapons weapons control and law enforcement are linked and lauds Eugene Kaspersky�s views on cyberwar
SECURELIST
DDoS Attacks In H2 2011
Kaspersky Lab says the longest DDoS attack in the second half of last year was against a travel website and lasted 80 days, 19 hours, 13 minutes, and five seconds
RAPID 7 COMMUNITY
Metasploit 4.2 Released: IPv6, VMware, And Tons Of Modules
New version of popular hacking tool supports opening command sessions and shells on IPv6 networks and existing payloads in Metasploit now also support IPv6
BANK INFOSECURITY
Tips To Fight Debit Fraud
New American Bankers Association report finds that POS signature suffer more losses than PIN-debit and ATM, which are a bit safer with their PINs, and debit card losses are now more than paper check fraud
HELP NET SECURITY
Users Don't Bother Changing Default Passwords
Most people rarely change default, automatically generated and assigned passwords, and only about 25 percent change their passwords regularly
ZDNET
Microsoft Quietly Extends Consumer Support For Windows 7, Vista
Microsoft this month changed its support policy for consumer versions of Windows � now Vista and Windows 7 will get a full 10 years of support
MOBILE COMMERCE PRESS
Visa Criticizes Lackluster Security Measures For PayPal�s New Mobile Payment Platform
Visa is warning anyone that chooses to use PayPal�s platform to guard their PINs so their financial information isn�t stolen
CNET
Scared Of Anonymous? NSA Chief Says You Should Be
Hacktivist group is growing more powerful, official says
IT NETWORKS
Hacker Jailed For Infiltrating Facebook Servers From His Parents� House Last Year
Hacker who �tested� secure areas of Yahoo gets eight months for doing the same to Facebook
GOVERNMENT COMPUTER NEWS
The Riskiest Cities For Cybercrime: Where Does Yours Rank?
Nation�s capital takes top spot in Symantec report
bit9
State-Sponsored Threats: Q&A With Richard Clarke
Former White House cybersecurity adviser offers insight on foreign governments� initiatives
FEDERAL NEWS RADIO
DHS Defends Social Media Monitoring Program
Congress takes closer look at privacy aspects in Homeland Security program
CYBER NEWS
Anonymous Hackers Promise 'Something Big' Is Coming
Hacktivist group says a massive announcement will take place later this week
IT NETWORKS
Hackers Can Follow You Via Your Cell Phone
With cheap equipment, hackers can easily locate where you and your phone are, University of Minnesota study says
MARKETWATCH
New Survey Highlights Security Risks Facing Health IT And Security Professionals
Rapid adoption of mobile technologies brings new challenges to health care settings
THE GASTON GAZETTE
IRS: Beware Of Dirty Dozen Tax Scams
The Internal Revenue Service has issued its annual "Dirty Dozen" tax scams list to warn taxpayers about scams and threats including identity theft and return preparer fraud
THE WASHINGTON POST
Google Pulls Cookies That Tracked Users Through Safari
Google has removed special code it had reportedly attached to users' cookies when they ran Apple Safari browser that allows advertisers and Google to bypass Safari's ability to block third-party cookies
THREAT POST
Google Password Generator In The Works
Google is building a tool to help users generate strong passwords for websites as an interim solution until the OpenID standard becomes widely deployed
ARS TECHNICA
Is Megaupload "A Lot Less Guilty Than You Think?"
Legal experts say Megaupload is likely in serious legal trouble, but Jennifer Granick, a Bay Area attorney blogging for Stanford's Center for Internet and Society, raises the distinction between civil and criminal law in the case
HELP NET SECURITY
Thwarting Attacks With Genetically-Inspired Computer Configuration Systems
Automated security technology would be capable of learning from experience
TRUSTEER
Merchant Of Fraud Returns -- Shylock Polymorphic Financial Malware Infections On The Rise
Each new build of this polymorphic malware contains excerpts from Shakespeare's The Merchant of Venice
THREAT POST
What You Need To Know About The RSA Key Research
RSA algorithm is not broken, analysis says
FORBES
Anonymous Plans To Take Down The Internet? We're Being Trolled
Hacktivists' plan to take down the Web�s core address book could be a hoax, expert says
SANS INSTITUTE
SANS Launches Eighth Annual Log And Event Management Survey
Study aims to collect data on how enterprises collect and use log and event data
SOFTPEDIA
Stratfor Faces Lawsuit For Failing To Secure Customer Data
Lawsuit demands more than $50 million
ARBOR NETWORKS
DDoS Attacks In Russia Added To Protests
Political protests include cybersecurity exploits
ALERTSEC XPRESS
University Of North Carolina At Charlotte Is Latest Victim Of Data Breach
Authorities scrambling to figure out how much data has been compromised
THREAT POST
Bloody Valentine For Critical Infrastructure: EtherNet Exploit Could Crash Devices
A new batch of PLC exploits was released by researchers that includes one exploiting a bug in the implementation of the EtherNet/IP (Internet Protocol) used in many IP-enabled PLCs
THE HACKER NEWS
Anonymous Hackers Target Nasdaq Website
A DDoS attack against websites for Nasdaq and BATS temporarily caused disruptions to the those sites -- Nasdaq says no information was stolen and trading was not affected
REUTERS
Philips Investigates Possible Cyber Security Breach
Philips Electronics shut down one of its servers yesterday due to a possible attack under investigation there
ZDNET BLOG
Have You Uninstalled Java Yet? Here Are 14 New Reasons...
Oracle's new patch release included 14 new vulnerabilities in Java SE, some that let hackers remotely install malware on machines without authenticating to them
INFOWORLD
Mozilla Will Ask All Certificate Authorities To Revoke SSL-Spying Certificates
Mozilla will request that certificate authorities revoke certs that could be used by companies to inspect SSL traffic for domain names they don't control in response to Trustwave revealing that it had done so
REUTERS
Experts Say Iran Has 'Neutralized' Stuxnet Virus
Iranian engineers have cleaned up and neutralized Stuxnet from their countrys nuclear systems, European and U.S. officials and private experts say
Best Of Web Archive:
Most Recent | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173 | 174 | 175 | 176 | 177 | 178 | 179 | 180 | 181 | 182 | 183 | 184 | 185 | 186 | 187 | 188 | 189 | 190 | 191 | 192 | 193 | 194 | 195 | 196 | 197 | 198 | 199 | 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207 | 208 | 209 | 210 | 211 | 212 | 213 | 214 | 215 | 216
Free Research and Reports
Whitepapers
- Three Principles to Improve Data Security and Compliance
- Aligning IT with strategic business goals: A proactive approach to managing IT risk to your business
- Connecting the Dots: Are You Seeing the Complete Big Data Picture?
- How crowdsourced testing has changed the game for innovative software companies
- Ensuring Your Apps Work in the Real World
Upcoming Events
Dark Reading Digital Magazine
In This Issue
- The Future Of Web Authentication: Password technology is out of steam. We need safer ways to prove who's who online.
- Rethink ID Management: If the technology continues to improve, it might soon be OK for all of us to be one person on the Web.
Tech Insight
Bugs
Enterprise Vulnerabilities From DHS/US-CERT's National Vulnerability Database
CVE-2013-3661
The EPATHOBJ::bFlatten function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not check whether linked-list traversal is continually accessing the same list member, which allows local users to cause a denial of service (infinite traversal) via vectors that trigger a crafted PATHRECORD chain.
CVE-2013-3660
The EPATHOBJ::pprFlattenRec function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly initialize a pointer for the next object in a certain list, which allows local users to obtain write access to the PATHRECORD chain, and consequently gain privileges, by triggering excessive consumption of paged memory and then making many FlattenPa...
CVE-2013-3634
The SNMPv3 functionality on Siemens Scalance X200 IRT switches with firmware before X-200IRT 5.1.0 does not properly validate credentials, which allows remote attackers to execute arbitrary SNMP commands by leveraging knowledge of a username.
CVE-2013-3633
The web interface on Siemens Scalance X200 IRT switches with firmware before X-200IRT 5.1.0 relies on client-side privilege checks, which allows remote authenticated users to execute arbitrary commands via unspecified vectors.
CVE-2013-1022 (quicktime)
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted mvhd atoms in a movie file.