Best Of Web
Best Of The Web
THE GLOBE AND MAIL
Reported Hacking Of Nortel Fuels Concerns, Skepticism
Cyber security experts says it�s no surprise Nortel was hit by cyberspies, but the question is whether stolen intellectual property might have led to the company's downfall
NEW YORK TIMES BLOG
Senators Introduce Security Bill And Warn Of Hacker Threat
Senate Bill 2105 lets the feds regulate the security of privately owned critical infrastructure, including power grids, telecommunications networks, and nuclear power plants, and task DHS with creating security regulations for critical infrastructure companies and penalize companies that don't comply
SECURITY NEWS DAILY
Love And Theft: Online Dating Sites Put Daters' Privacy At Risk
Electronic Frontier Foundation report says participants may be exposing more data than they know
V3.CO.UK
Hackers Target TicketWeb Customers In Email Database Hack
Ticketmaster subsidiary admits it was the victim of a security breach last week
REUTERS
Philips Investigates Possible Cybersecurity Breach
Electronics firm says it shut down one of its servers Monday due to possible cyberattack
TWITTER
Securing Your Twitter Experience With HTTPS
HTTPS security will now be on by default for all users, social networking site says
WASHINGTON POST
Hackers Loyal To Anonymous Claim Attack On US Tear Gas Company, Website Taken Down
Hacktivists say they broke into Combined Systems' website and stole personal information belonging to clients and employees
SOFTPEDIA
6 GB NASA Database Leaked, Hackers Notify Agency
Two hacker groups say they exploited SQL injection vulnerability to steal data
INFOSEC ISLAND
Security Flaw In eBanking Affects Over 100 Million Users
CAPTCHA vulnerabilities could expose customers, researcher says
FEDERAL NEWS RADIO
Budget Request Sees DHS Increasing Cybersecurity Spending
Homeland Security would sharply raise cybersecurity spending under White House 2013 budget request
THE HACKER NEWS
Al Jazeera News Network Hacked By Syrian Hackers
Syrian hacktivist group targeted Al Jazeera's website in support of the government's actions in the country
CSO ONLINE
FBI Call Participants 'Made It Easy' For Anonymous To Break In
Investigators say it's likely that someone e-mailed to his or her private e-mail account the location number and password of the FBI-Scotland Yard conference call, and that private e-mail account was hacked by Anonymous, which was able to snoop on the call
CANADA.COM
Evil Shadow Team Hacks Microsoft India
Microsoft is investigating an attack by hackers on its Indian retail website, reportedly carried out by a Chinese group called the "Evil Shadow Team"
THE HUFFINGTON POST
Tunes Hack: Users Report Unauthorized Charges On Accounts
Global Mail investigation concludes iTunes may have been hacked as far back as 2010, but Apple is neither confirming nor denying this
GOOGLE BLOG
Protecting Your Payments With Google Wallet
Google warns Google Wallet users not to disable security functions to gain system-level "root" access to their phones, which would render Wallet's security features useless
THREAT POST
Mozilla Fixes Critical Flaw In Firefox
New version of Mozilla Firefox -- 10.0.1 -- includes a fix for a critical use-after-free bug in the browser
H ONLINE
Valve: Hackers May Have Gained Access To Steam Transactions
Valve Software says hackers accessed the database for its Steam game distribution platform in an attack late last year and may have stolen a copy of a backup file of customer transactions
THREAT POST
Hackers Hit Alabama, Mexican Government Websites
Hackers associated with Anonymous claim to be behind hacks of government websites in Alabama and Mexico, including the theft of personal information on more than 46,000 people
FSECURE BLOG
Cryptome Hacked
Cryptome.org, a site that posts items on freedom of speech, cryptography, spying, and surveillance, has been hacked and infused with malicious code based on the Blackhole crimeware kit
BANK INFORMATION SECURITY
PCI: New Focus On Mobile
Mike Mitchell, chair of the Payment Card Industry Security Standards Council, says mobile is among his top priorities the Council this year, as well as point-to-point encryption, tokenization, and more compliance training
NAKED SECURITY
Apple Supplier Foxconn Hacked Not For Bad Factory Conditions But For Kicks
Taiwanese manufacturer of iPhones and iPads for Apple Foxconn has been cited for alleged inhumane working conditions, and now the group was hacked by a group that goes by Swagg Security -- not for the working conditions there, but for the fun of the hack
BUSINESS WEEK
Tax Breaks Considered To Improve Cybersecurity On Vital Networks
Congressional members in the House are looking at tax breaks and liability protection to encourage banking, energy, and telecommunication companies to improve cybersecurity
TECHWORLD
Citadel Banking Virus Adopts 'Open Source' Development
A Trojan that targets online banking users is evolving and spreading rapidly in the wake of an 'open-source' development model used by its creators, researchers from Seculert say
THE HACKER NEWS
Iran Shutdown Google, Yahoo & Other Major Sites Using HTTPS Protocol
The Iranian government reportedly has blocked access to websites using HTTPS including Google, Yahoo, and Gmail on the eve of the anniversary of the revolution that overthrew the country's monarchy and replaced it with an Islamic republic
THE DAILY BEAST
Asperger's, Overdiagnosed, Ill Defined, May Not Be a Syndrome Much Longer
Psychiatrists working on the latest edition of the DSM are tightening the definition of autism and possibly eliminating the designation of Asperger�s altogether
COMPUTERWORLD
Microsoft To Issue More Critical Patches Next Week For Win7 Than XP
Microsoft plans to release nine security updates next week to patch 21 vulnerabilities, and researchers say to apply the Internet Explorer patch ASAP
HBGARY BLOG
APT And The Five Eyes Nations
APT is not just a U.S.-centric problem, according to HBGary, which has seen one APT group targeting U.K. and New Zealand defense industries
ATLANTIC WIRE
How Anonymous Could Destroy This Law Firm
Military law firm under fire from Anonymous after handling the defense in controversial case
INFOSEC ISLAND
Straight Talk About Compliance From A Security Viewpoint
In the end, compliance is a target that moves at the whim of the auditor
HAARETZ
'Anonymous' Hacker Group Threatens 'Reign Of Terror' Against Israel
Group uploads video blaming Israel for committing "crimes against humanity"
CYBER WAR NEWS
Insight Into The Foxconn.com Data Leak
Foxconn was storing users' passwords and information in clear text, researcher says
WASHINGTON POST
Path Deletes Contact Data, Updates App
Company behind journaling app says it has erased all the data that it obtained from users' address books
BBC
Hackers Vow New 'Anonymous' Attacks On Kremlin Groups
Members of hacktivist group in Russia say they will continue to target pro-Kremlin activists
THREAT POST
New Tool Will Automate Password Cracks On Common SCADA Product
New tools make it easy to test and exploit vulnerable programmable logic controllers
SEARCH SECURITY
Survey: Types Of DDoS Attacks On The Rise Due To Hacktivist Groups
Nearly all respondents say they experience at least one DDoS attack per month
NETWORK WORLD
FTC Warns Background Screening Mobile Apps May Be Unlawful
The Federal Trade Commission has warned six unidentified mobile applications developers, warning them that their background screening apps may be violating federal law
MCAFEE BLOG
Do You Have A False Sense of Cybersecurity For Mobile?
Close to three-quarters of Americans have never installed data protection applications or security software on their mobile devices
THE REGISTER
Marlinspike Asks Browser Vendors To Back SSL-Validator
Security researcher Moxie Marlinspike is urging browser developers to support his open-source Convergence project for ensuring trust -- it currently works as an add-on for Firefox
ZDNET
Malware's The Next Nuclear Bomb: Kaspersky
Eugene Kaspersky, CEO of Kaspersky Lab, says governments already are building malware in the form of cyberweapons
IT NEWS
Trustwave Admits Issuing Man-In-The-Middle Digital Certificate, Mozilla Debates Punishment
Security firm says issuing subordinate root certificates to companies so they can snoop on SSL-encrypted traffic is a common industry practice
Best Of Web Archive:
Most Recent | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173 | 174 | 175 | 176 | 177 | 178 | 179 | 180 | 181 | 182 | 183 | 184 | 185 | 186 | 187 | 188 | 189 | 190 | 191 | 192 | 193 | 194 | 195 | 196 | 197 | 198 | 199 | 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207 | 208 | 209 | 210 | 211 | 212 | 213 | 214 | 215 | 216
Free Research and Reports
Whitepapers
Upcoming Events
Dark Reading Digital Magazine
In This Issue
- How Hackers Fool Your Employees: People are your most vulnerable endpoint. Make sure your security strategy addresses that fact.
- Not All Or Nothing: Effective security doesn't mean stopping all attackers.
Tech Insight
Bugs
Enterprise Vulnerabilities From DHS/US-CERT's National Vulnerability Database
CVE-2013-3342 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 do not properly handle operating-system domain blacklists, which has unspecified impact and attack vectors.
CVE-2013-3341 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, and CVE-2013-3340.
CVE-2013-3340 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, and CVE-2013-3341.
CVE-2013-3339 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3340, and CVE-2013-3341.
CVE-2013-3338 (acrobat_reader)
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3339, CVE-2013-3340, and CVE-2013-3341.