Best Of Web
Best Of The Web
THREAT POST
Adobe Fixes 12 Critical Flaws In Flash
Adobe has released patches for 12 vulnerabilities in Flash, and all but one of the flaws could lead to remote code execution
RAPID 7 BLOG
Is Cyber Espionage Cheating?
Cyberespionage is not going away, so all organizations must establish security programs to protect themselves
GOVERNMENT INFO SECURITY
Seven Key Infosec Occupation Categories
Federal government drafts document offering job descriptions of security positions inside an organization
THREAT POST
Report: Phishing Domain Registrations Way Down
Trend could indicate a decrease in phishing scams, Anti-Phishing Working Group says
BANK INFO SECURITY
Educating Non-IT Executives On Security
Proper pitches to top management could help IT improve infosec spending
HUMAN EVENTS
China Cyber-Stealing Its Way To Superpower Status
Report to Congress suggests China is the world leader in economic espionage
MYCE
DARPA: Hackers Can Help Protect U.S. Cyber Infrastructure
Department of Defense hopes white hats will come work for the federal government
HELP NET SECURITY
The 12 Scams Of Christmas
Before you start shopping online, get a load of this dirty dozen
BBC
Cybercriminals "Should Get Tough Sentences," Say Police
Head of Scotland Yard's e-crime unit criticizes sentencing of cybercriminals
ESECURITY PLANET
Healthcare Organizations Increase Cybersecurity Spending
More than half of healthcare organizations have increased their infosec budgets over the past year, study says
BLOOMBERG
U.S. Charges Seven In Online Ad-Fraud Scam
Suspects allegedly used malware to manipulate online advertising and infect millions of computers in hundreds of countries
SECURITY WEEK
Application Security Firms Settle Patent Dispute
NTObjectives agreed to pay Cenzic an undisclosed amount in exchange for certain rights to two of Cenzic's patents
SC MAGAZINE
Cisco CSO: Infosec Pros Should Get Back To Basics
Cisco chief security officer John Stewart says security pros must fix simple vulnerabilities instead of focusing on the next big threat
ARS TECHNICA
OpCartel Gets Stranger As Anonymous "Spokesman" Links DA To Gang
North Carolina district attorney named in the new OpCartel "doxxing" campaign, and questions about Anonymous spokesperson�s motives
SC MAGAZINE
Part Two: Duqu: Father, Son, Or Unholy Ghost Of Stuxnet?
Duqu demonstrates that nation-states will launch powerful and anonymous cyberweapons
INFOSEC ISLAND
IEEE Addresses SCADA Security Standard Challenges
IEEE will revise the Secure Authentication (SA) protocols contained in its IEEE 1815 Distributed Network Protocol (DNP3) standard
NAKED SECURITY BLOG
Adobe Says Goodbye To Flash For Mobile Platforms
Good news security-wise: Adobe will no longer develop Adobe Flash player for mobile platforms, except for critical security and bug fixes
TEAM SHATTER BLOG
Does Software Security Suffer When The Customer Is No Longer Master?
Major software vendors regularly disclose and patch major vulnerabilities but their businesses still grow -- buy from vendors that put customers and security first and complain to those who don't
MICROSOFT
Microsoft Issues Four Security Updates On Light Patch Tuesday
Only one of the four is considered critical, software giant says
HELP NET SECURITY
One In Nine Users Surfing The Web Without Protection, Study Says
Nearly half of users rely on free security software, G Data Security research shows
HELP NET SECURITY
Hybrid Social Engineering Attacks
Data stolen via malware may be used to make fraudulent phone calls seem more credible, researchers say
M86 SECURITY LABS
TrueType But Not Truly Safe: The New Zero-Day Event
New vulnerability in Windows has already been exploited in the wild, researchers say
TELEGRAPH
Anonymous Hacktivists Claim Attack On Neo-Nazis
Links to website in Finland caused parliamentary aide to step down
FORBES
Apple Exiles A Security Researcher From Its Developer Program For Proof-Of-Concept Exploit App
Well-known Mac researcher Charlie Miller loses his license as an Apple developer in effort to demonstrate new vulnerability
COMPUTERWORLD
U.S. Cyber Chief Says Cloud Computing Can Manage Serious Cyberthreats
Cloud infrastructure makes it easier to secure data, Gen. Alexander says
CSO
Security Technology Or Staffing Gap: Which Is The Greater Enterprise Challenge?
Two recent surveys indicate that the answer could be both
FORBES
The Cybercrime Boom: It's A Good Time To Be A Hacker
Perfect storm for black-hat hackers with the ever-expanding digital footprint, mobile devices
NAKED SECURITY BLOG
Research Finds that Privacy Tools Don't Work
"Why Johnny Can't Opt Out" report from CyLab shows how online opt-out tools are difficult for users to understand and configure
INFOSEC ISLAND
Duqu And Stars: Proceed With Caution
Kaspersky Lab cites an analysis from Iran's Computer Emergency Response Team that Duqu is an upgraded version of the Stars malware, but there is little proof of a connection
PHYSORG
Mexican Hacker Group Drops Reprisal As Member Freed
Mexican arm of Anonymous said they discontinued a plan to expose information about the Zetas drug cartel after a kidnap victim was released
THREAT POST
Major DNS Cache Poisoning Attack Hits Brazilian ISPs
A widespread DNS cache-poisoning attack is underway in Brazil that forces users to install a malicious Java applet before they can reach web sites including Google, Gmail, and Hotmail
BBC
Adidas Websites Go Offline After Hacking Cyber-Attack
Adidas shuttered several of its websites after suffering what it described as a "sophisticated, criminal cyberattack"
COMPUTERWORLD
Israel Govt. Websites Down, After A Hacker Threat
Israeli government websites went offline two days after the hacker group Anonymous had threatened to attack the government -- Israeli officials say the outage was due to a server malfunction
REUTERS
Ex-U.S. General Urges Frank Talk On Cyber Weapons
James Cartwright, former vice chairman of the Joint Chiefs of Staff, said the U.S. should be forthcoming about its "offensive capabilities" in cyberspace
WIRED
DARPA's Plan To Trap The Next WikiLeaker: Decoy Documents
DARPA-funded researchers are creating a disinformation system that would plant phony documents in classified networks and program them to track the hackers' movements
THE UNOFFICIAL APPLE WEBLOG
Apple To Require Sandboxing In Mac App Store Apps As Of March 2012
As of March 2012, all apps submitted to the Mac App Store must implement sandboxing
CSO ONLINE
IPad 2 Smart Cover Security Flaw Fixed By IOS 5.0.1
Apple has fixed a security flaw affecting the Smart Cover for the iPad that would allow an attacker to bypass the iPad passcode screen
COMPUTERWORLD
Hacker Selling Access To Compromised Websites Gets Hacked
Hacker group d33ds broke into the operations of a rival hacker who sells unauthorized access to high-profile websites and data
BUSINESS INSIDER
Hackers Tried To Attack The German Stock Exchange, But Ended Up Taking Down A French Rugby Site Instead
French rugby team l'US Dax's website was crippled for two weeks last month after a German hacking group trying to hack the German Stock Exchange ended up inadvertently hacking the team�s site
EUGENE KASPERSKY BLOG
The Man Who Found Stuxnet -- Sergey Ulasen In The Spotlight
The researcher who last year first discovered Stuxnet is Sergey Ulasen, and he joined Kaspersky Lab in August
Best Of Web Archive:
Most Recent | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173 | 174 | 175 | 176 | 177 | 178 | 179 | 180 | 181 | 182 | 183 | 184 | 185 | 186 | 187 | 188 | 189 | 190 | 191 | 192 | 193 | 194 | 195 | 196 | 197 | 198 | 199 | 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207 | 208 | 209 | 210 | 211 | 212 | 213 | 214 | 215 | 216
Free Research and Reports
Whitepapers
Upcoming Events
Dark Reading Digital Magazine
In This Issue
- Endpoint Security: End user security requires layers of tools and training as employees use more devices and apps.
- Security Isn't A Piece Of Cake: It's time we rethink the conventional wisdom about security layering.
- BYOD Is Here To Stay: Trying to keep employees' devices off the network is futile.
Tech Insight
Bugs
Enterprise Vulnerabilities From DHS/US-CERT's National Vulnerability Database
CVE-2013-3744
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2400.
CVE-2013-3743
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 45 and earlier and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
CVE-2013-2473
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2464, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, and CVE-2013-2472.
CVE-2013-2472
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2464, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, and CVE-2013-2473.
CVE-2013-2471
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2464, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2472, and CVE-2013-2473.