Best Of Web
Best Of The Web
FEDERAL COMMUNICATIONS COMMISSION
Ten Cybersecurity Tips For Small Businesses
FCC issues helpful recommendations for SMBs seeking to protect themselves
SILICON.COM
Digital Crime Accounts For One In Four Business Frauds
Online crime now the third most common fraud suffered by British businesses, study says
APPSEC INC
Santa's Workshop Breached, Naughty/Nice List Exposed!
The Grinch, an insider elf who didn�t "fit in," and Anonymous lead suspect list of breach that threatens Santa's operations
FORBES
25 "Worst Passwords" Of 2011 Revealed
Some of the most obvious culprits: password, 123456, letmein, abc123, iloveyou, master, monkey, qwerty
THREAT POST
New Apache Reverse Proxy Issue Uncovered
Qualys engineer discovered the additional problem while writing a vulnerability signature for another reverse proxy issue, CVE-2011-3368
THREAT POST
Authorities Shut Down Carder Lab In Dominican Republic
One of the alleged leaders of a carding group has been arrested for his involvement in the group that produced phony credit cards, documents, and ID cards
ZDNET BLOG
UK Government Reneges On Censorship-Free Web Promise; Plans To Ban 'Cyber-Criminals' From The Web
The U.K.�s new cybersecurity strategy released on Friday calls for the increased use of sanctions for those who misuse the Internet for criminal means -- including banishment from social networks and other services
BANK INFOSECURITY
$1 Million ATM Fraud Scam Busted
Five people have been arrested in Westchester County, N.Y., for their alleged connection to a $1 million fraud scheme that skimmed ATM cards
NAKED SECURITY BLOG
Intuit Payroll Free Trial Email Launches Malware Attack
A Trojan is being spammed out posing as a message from the payroll software company Intuit
THE REGISTER
Feds Seize 130 Sites In Cyber Monday Crackdown
More than 130 websites were dismantled last week as part of a crackdown on counterfeit goods ahead of the Christmas shopping rush
MATASANO BLOG
Javascript Cryptography Considered Harmful
Implementing security features in browsers using cryptographic algorithms in whole or in part in Javascript are problematic
IMPERVA BLOG
Coach's Wife Caught Changing Grades Using Admin Password
A special education teacher and wife of head football coach at an Illinois high school allegedly used an administrative password to inflate grades for 64 students, 41 of whom are football players.
TECHWORLD
Asian Company Hit By Mega-DDoS Attack
Attack reached 45 Gbps at peak, equivalent to 69 million packets or 15,000 connections per second
PC ADVISOR
Microsoft Denies Xbox Live Has Been Hacked
Reports this week that online Xbox gaming users finding charges on their credit or debit cards for Microsoft Points
SOFTPEDIA
Facebook Deletes The Accounts Of Those Who Insult Other Members, Phishing Scam
Emails purporting to be from Facebook threaten to delete the recipients' account if they fail to confirm certain account details within 24 hours are a phishing scam
CNET
How SOPA Would Affect You: FAQ
Senate Judiciary committee has approved it and it now awaits a floor vote -- but Oregon Democratic senator has placed a hold on the bill
THE MOSCOW NEWS
Why Are Russians Excellent Cybercriminals?
Disproportionate number of Russians have high-end math and computers skills, but not legitimate job options
THE REGISTER
UK Has No Idea If It's Selling Spyware To Evil Regimes
U.K. government says it�s not overseeing control over the sale of surveillance software nor stopping it from getting to repressive regimes
REUTERS
Exclusive: Lax Security At Nasdaq Helped Hackers
Federal investigation finds surprisingly lax practices that made the exchange operator an easy target
KREBS ON SECURITY
DDoS Attack On KrebsOnSecurity.com
Site that publishes information on security threats becomes a target itself
FEDERAL NEWS RADIO
Cybersecurity Jobs More Varied, Numerous Than Most Think
Shortage of skilled workers presents many opportunities for security pros
ESET THREAT BLOG
Cyber Monday Safety: 10 Tips For Safer Holiday Shopping Online
Be wary of what you see online while you shop, expert says
FINEXTRA
Banks Warned Of Fraud Risks In Mobile Remote Deposits
Remote deposit capture technology could increase risk of fraud, study says
INFO SECURITY
Know Your Enemy: Staying One Step Ahead Of Cyberthreats
Advanced intelligence capabilities are becoming a crucial part of staying ahead of attackers, expert says
THE REGISTER
The Top Five Spam Subjects Sullying Inboxes
Bogus online orders, fake fines head list of offenders, Websense study says
THE REGISTER
Cyber-cop Trojan Used iTunes Flaw To Spy On Criminals
Law enforcement Trojan takes advantage of same vulnerability used by Ghost Click botnet
FORBES
China's Great Firewall Tests Mysterious Scans On Encrypted Connections
When users from China try to reach a server outside the country, a string of data hits the destination computer before he or she can connect, and sometimes the connection is dropped
COMPUTERWORLD
What The SOPA Soap Opera Is All About
The Stop Online Piracy Act has sparked protests from those who say the bill is Internet censorship regime, while supporters say it will help protect theft of hundreds of billions of dollars worth of U.S. IP annually
THE NEXT WEB
Siri Now Controls The House Temperature, Thanks To A Hacker's Proxy Server
Siri able to to interact with any standard thermostat with built-in Wi-Fi
THREAT POST
Hacker Says Texas Town Used Three Character Password To Secure Internet Facing SCADA System
The hacker who says he was the one who compromised a SCADA system used by South Houston, Texas, says the utility had software reachable from the Internet that used a three-character password
WIRED
Rogues Falsely Claim Copyright On YouTube Videos To Hijack Ad Dollars
Russian company recently hijacked a video in order to steal the ad revenue--a practice that is becoming more common
THE REGISTER
Scotland Yard E-Cops 'Fighting To Save Xmas'
U.K. authorities took down more than 2,000 phony shopping websites prior to the holiday shopping season
THE REGISTER
Boffins: SOPA Breaks DNSSEC, And Won't Work Anyway
Researchers dismiss concept of placing man-in-the-middle into an end-to-end protocol
CFO WORLD
The CFO's Role In The Data Breach War
Finance increasingly involved with risk management and incident response
FBI
Terrorists, Spies, And Hackers: The New National Security Landscape
Cyber threat is changing the country's approach to defense, says FBI chief Mueller
CNET
OpenDNS: Stop Online Piracy Act Will Be 'Extremely Disruptive' To The Internet
Legislation has the potential to create 'the great firewall of America,' expert says
ZDNET
Microsoft Slaps Lipstick On Windows Update Pig
Software giant has a long way to go to make Windows Update as easy and convenient as it should be, blogger says
THREAT POST
Citing Crisis, Senate Leader Puts Cybersecurity Bill On 2012 Agenda
Despite absence of a comprehensive Senate plan, Reid sets up showdown with House Republicans
CNN
Feds Investigating Illinois 'Pump Failure' As Possible Cyberattack
Water pump is brought down at public water district; officials dispute researcher's claim that other utilities may also be vulnerable
HEALTHCARE INFO SECURITY
Permanent HIPAA Audit Program Coming
Rodriguez says pilot project will lead to long-term effort
Best Of Web Archive:
Most Recent | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173 | 174 | 175 | 176 | 177 | 178 | 179 | 180 | 181 | 182 | 183 | 184 | 185 | 186 | 187 | 188 | 189 | 190 | 191 | 192 | 193 | 194 | 195 | 196 | 197 | 198 | 199 | 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207 | 208 | 209 | 210 | 211 | 212 | 213 | 214 | 215 | 216
Free Research and Reports
Whitepapers
Upcoming Events
Dark Reading Digital Magazine
In This Issue
- The Future Of Web Authentication: Password technology is out of steam. We need safer ways to prove who's who online.
- Rethink ID Management: If the technology continues to improve, it might soon be OK for all of us to be one person on the Web.
Tech Insight
Bugs
Enterprise Vulnerabilities From DHS/US-CERT's National Vulnerability Database
CVE-2013-2059
OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authentication token when deleting a user through the Keystone v2 API, which allows remote authenticated users to retain access via the token.
CVE-2013-2007
The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.
CVE-2013-2006
OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.
CVE-2013-1977
OpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to obtain sensitive information such as the LDAP password and admin_token secret by reading the file.
CVE-2013-1964
Xen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non-transitive grant, which allows local guest administrators to cause a denial of service (host crash), obtain sensitive information, or possible have other impacts via unspecified vectors.