Best Of Web
Best Of The Web
EWEEK
The New York Times Says It Was Not Hacked
Email from The New York Times asking recipients to reconsider cancelling their subscription was sent in error to many users
DIGITAL TRENDS
Anonymous Says It Breached Specialforces.com
Members of Anonymous say they accessed thousands of passwords and credit card numbers from military and law enforcement gear website
DES MOINES REGISTER
Video Calls For Shutting Down Iowa Caucuses; Anonymous Claims Responsibility
Hacktivist group calls for supporters to help shut down systems at presidential caucus
SYDNEY MORNING HERALD
Website Fraudsters Ready For Some Fun And Games At London Olympics
British crime unit identifies hundreds of websites that could be used to dupe visitors at 2012 Games
McGRATH GRACE
Burning Question In Latest UCLA Health System HIPAA Breach
Why did former employee have health records of more than 16,000 patients?
FEDERAL REGISTER
DHS Seeks Comments On Menlo Report
Report proposes ethical principles guiding information security research
CYBER WAR ZONE
Top Three Social Media Used By Cybercriminals
Facebook, LinkedIn, and Twitter are most popular among the bad guys, study says
FORBES
Cyber Threat To Power Grid Puts Utility Investors At Risk
Concerns about cyber threat cause investor-owned utilities to file cyberattack as a risk factor in filings with SEC
GOVERNMENT INFO SECURITY
Hannaford Legal Ruling May Re-Shape Breach Notification
Court ruling indicates that users don't have to suffer fraud to be considered victims
THE INDEPENDENT
Hackers Target Cyberattack Victims A Second Time
Stratfor victims who spoke to the media about attack by Anonymous are targeted again
ALBAWABA
Cybercrimes Cost United Arab Emirates More Than $600M Yearly, Experts Say
At Black Hat Abu Dhabi, experts say regional experts need to do a better job of keeping up
YAHOO! NEWS
Surveys Find Consumers Easily Duped By Online Prize Offers
Americans astonishingly willing to give up their personal information when lured with free offers, Ponemon study finds
TECH REPUBLIC
Top 10 Security Posts Of 2011
A look at some of the most-viewed security stories of 2011
YAHOO! NEWS
Automatic Updates Coming To Internet Explorer
Browser will get security updates automatically to help control the level of infection, Microsoft says
PC WORLD
2012 Will See Rise In Cyberespionage And Malware, Experts Say
Malware used will be increasingly sophisticated, researchers say
ITP.NET
Social Networking Slammed By Spam
LinkedIn, Habbo, Twitter targeted by spammers in november, according to Kaspersky Lab
FORBES
U.S. Headed For Cyberwar Showdown With China In 2012
U.S. prepares to sharpen its response to Chinese attacks on American government and critical systems
SOFTPEDIA
Amnesty International Hacked To Serve Malware And Spy On Activists
Website of human rights organization was compromised and served malware to visitors, Barracuda Labs researchers say
WIRED
2011 Is The Year Of The Hacktivist, Verizon Report Suggests
In this part of the world, China is the source of a lot of our crimes, but if you go to China, the U.S. is the No. 1 source of electronic crimes
BUSINESSWEEK
Big Brother Is Watching You Shop
Retailers such as T-Mobile and Family Dollar are linking security cameras with software to track consumer behavior
REUTERS
Ex-Hacker Testifies About Reporting US Army Leaks Suspect
Former hacker Adrian Lamo, who led authorities to Bradley Manning, detailed his online chats with Manning and how he came to turn him in
THE HILL
South Carolina Election Officials Take Steps To Protect Primary From Hackers
The state has locked down security of the electronic systems for its primary after reports that Anonymous might target the Iowa caucuses computers
ESECURITY PLANET
Anonymous Hackers Publish Info On U.S. Senators
Members of Anonymous recently leaked personal information on U.S. Senators who voted for the National Defense Authorization Act (NDAA)
THE HACKER NEWS
China Software Developer Network (CSDN) 6 Million Users' Data Leaked
One of the biggest networks of software developers in China was hacked and a text file with user info including user name, password, emails -- all in clear text -- was posted online
VIAFORENSICS BLOG
No-Permission Android App Gives Remote Shell
Proof-of-concept Android app demonstrates how Android apps can require no permissions but still provide an attacker with a remote shell to hack the smartphone
THE NEW YORK TIMES
Hacked Chamber Of Commerce Opposed Cybersecurity Law
The breach was an ironic twist of fate for the Chamber, which has been one of the more vocal critics of cybersecurity legislation
THE TIMES
Romania, FBI Team Up On Cybercrime
Romanian officials say more than 80 percent of online fraud out of its country targets U.S. nationals and cmopanies -- FBI is teaming up with officials there to catch cybercriminals
GOVINFOSECURITY
Bill Would Foster Cyber-Threat Info Sharing
House legislation creates National Information Sharing Organization, or NISO, a private-sector-controlled, nonprofit to create best practices, offer technical assistance, help critical infrastructure providers share cyberattack information
THE REGISTER
Mobiles Forced To Send Premium-Rate Texts In New Attack
A weakness in mobile technology could allow attackers to force handsets to send premium-rate SMS messages or prevent them from receiving messages
CIO
FBI Warns Hacktivists: You're Breaking The Law
Assistant Executive Director Shawn Henry discusses the challenges associated with investigating hactivists and how the FBI has disrupted some of their activities
KREBS ON SECURITY
Busy Signal Service Targets Cyberheist Victims
A new cybercrime service ties up the phone lines of targeted mobile or land lines as a diversionary tactic to assist e-thieves in robbing commercial customers of banks that routinely call customers to verify large financial transfers
JEFFREY CARR BLOGSPOT
Why I Oppose The 12 Chinese Hacker Groups Claim
No one has named the 12 hacker groups, which prevents independent analysis with no vested interest, and it fuels anti-China paranoia
INFOSEC ISLAND
Iran Invests Heavily In Developing Cyberwarfare Capabilities
The Jerusalem Post reports that Iran will invest up to $1 billion to increase both cyberdefensive and offensive capabilities
THREAT POST
USAA Warns Members Of Sophisticated Phishing Scam
USAA says an email campaign with the subject line "Deposit Posted" attempts to install a malicious banking Trojan on its members' computers
PAKISTAN OBSERVER
Pakistan Hacks Drone Technology
Pakistani officials say they have been able to hack drone technology and force it to land in Pakistan, according to a report in the Pakistan Observer
CSO ONLINE
Nation's Nuclear Power Watchdog Comes Up Short On FISMA Compliance
The Nuclear Regulatory Commission has compliance gaps in configuration and vulnerability management, according to an independent audit
SYMANTEC BLOG
Android Trojan Spreads Message Of Revolution
A new Trojan mass-mailer/downloader has been spotted embedded in a pirated Islamic compass app for Android
THE VERGE
SOPA Vote Delayed Until January
Tomorrow's committee vote on the controversial Stop Online Piracy Act has been postponed -- the second time in committee for SOPA
THREAT POST
Exploit Kits Now Updated With New Wares Before Patches Are Ready
Recent events indicate exploit kit developers are no longer just using exploits based on older vulnerabilities and already-patched bugs
SILICON REPUBLIC
No More Passwords In Five Years, IBM Predicts
IBM says within five years, biometrics will become the main mode of authentication
Best Of Web Archive:
Most Recent | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173 | 174 | 175 | 176 | 177 | 178 | 179 | 180 | 181 | 182 | 183 | 184 | 185 | 186 | 187 | 188 | 189 | 190 | 191 | 192 | 193 | 194 | 195 | 196 | 197 | 198 | 199 | 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207 | 208 | 209 | 210 | 211 | 212 | 213 | 214 | 215 | 216
Free Research and Reports
Whitepapers
Upcoming Events
Dark Reading Digital Magazine
In This Issue
- Endpoint Security: End user security requires layers of tools and training as employees use more devices and apps.
- Security Isn't A Piece Of Cake: It's time we rethink the conventional wisdom about security layering.
- BYOD Is Here To Stay: Trying to keep employees' devices off the network is futile.
Tech Insight
Bugs
Enterprise Vulnerabilities From DHS/US-CERT's National Vulnerability Database
CVE-2013-3744
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2400.
CVE-2013-3743
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 45 and earlier and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
CVE-2013-2473
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2464, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, and CVE-2013-2472.
CVE-2013-2472
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2464, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, and CVE-2013-2473.
CVE-2013-2471
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2464, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2472, and CVE-2013-2473.