Best Of Web
Best Of The Web
NAKED SECURITY BLOG
Malware Attack Poses As Bloody Photos Of Gaddafi's Death
Spam messages posing as photos from AFP news agency of Gaddafi's death are circulating
HELP NET SECURITY
Divorce Is Less Stressful Than Safeguarding Confidential Data
Stress of IT security job is worse than getting a divorce, managing personal debt, or being in a minor car accident, security pros say
CHINA DAILY
Virus Infection Expands On Mobile Terminals
Virus infection ratio declines in China, but rate of infection on mobile terminals is up
REUTERS
Nasdaq Hackers Spied On Company Boards
Attack last year was more serious than previously revealed, investigation shows
CHINA DAILY
U.S. Official Rules Out Chance Of Cyberwar With China
State Department official dismisses possibility of online war between China and the U.S.
INFO SECURITY
Nemours Loses Data On 1.6 Million Patients And Employees
Three unencrypted backup tapes have been lost, company says
THE REGISTER
Trusteer Scraps With Analysts Over "Bank Security Bypass"
Online banking security technology could be bypassed, researchers say
FOREIGN POLICY
The Case For Cyberwarfare
Ability to wage war at a lower human cost might be attractive to some, experts say
MASHABLE
Gruesome Photos Of Dead Gaddafi Circulate On Twitter: Beware Of Malware
Photo of dead body could lead to download of malicious software
F-SECURE BLOG
Mac Trojan Disables XProtect Updates
Trojan-Downloader:OSX/Flashback.C disables the automatic updater in XProtect, Apple's built-in OS X anti-malware application
FEROSS.ORG
HOW TO: Spy On The Webcams Of Your Website Visitors
A vulnerability in Adobe Flash lets any website to turn on your webcam and microphone without your knowing
KROLL CONSULTING
Internal Fraud Is On The Rise
The new Kroll Annual Global Fraud Report shows that 60 percent of frauds are committed by insiders, up from 55 percent last year
COMPUTERWORLD
Where's The Steve Jobs Of IT security?
IT security needs to get people to want security in their systems just as they want functionality
MOBILEDIA
One-In-Ten Leave Passwords In Wills
One in 10 U.K. residents leave Internet passwords in their wills
NAKED SECURITY BLOG
Has Siri Left Your IPhone 4S Unlocked?
Apple's new voice-activated personal assistant built into the iPhone 4S, Siri, leaves smartphones partially exposed
THE REGISTER
Oracle Updates Java To Stop SSL-Chewing BEAST
Mozilla won't keep Firefox from working with the Java software framework now that Oracle has a new patch that prevents it from being used to decrypt Web traffic
THE SUN
We'll Strike First In Cyber Warfare
British foreign secretary William Hague says England is prepared to strike first to defend against a cyberattack from an enemy state
COMPUTERWORLD AUSTRALIA
The Grill: Eugene Kaspersky
Kaspersky Labs co-founder discusses the future of security and how no one is safe online
NEW YORK TIMES
U.S. Debated Cyberwarfare In Attack Plan On Libya
Cyberoffensive was designed to disrupt or disable Qaddafi government�s air defense system
CSO
New SEC Security Breach Rules No Big Game Changer, Experts Say
While guidance is welcomed, don't expect a wave of new breach disclosures
THREAT POST
Attorney General: Massachusetts Won't Investigate iTunes Fraud
Despite reports of a number of fraudulent purchases, no investigation is under way, officials say
SOFTPEDIA
Metropolitan Police Inadvertently Share Confidential Information
Website of U.K. police unit is filled with data that should not be public, researcher says
GAWKER
Meet The Guy Who Snitched On Occupy Wall Street To The FBI And NYPD
Conservative computer security expert gained access to one of the group's internal mailing lists
BANK INFO SECURITY
$9 Million ID Theft Scheme Alleged
Duo charged in retail scam that spans 15 years
REUTERS
U.S. Crafting Framework For Cyberoffense, General Says
U.S. is still crafting a legal framework to guide any offensive moves in cyberspace, officials say
BBC
Sesame Street YouTube Channel Hit By Porn Hack
Sesame Street's YouTube channel was taken offline after hackers inserted pornographic videos in it
HELP NET SECURITY
How The German "Federal Trojan" Was Actually Used
Bavarian law enforcement agents used it in five different cases, including for an investigation into illicit pharmaceuticals
THE WASHINGTON POST
Iran�s Nuclear Program Suffering New Setbacks, Diplomats And Experts Say
More problems are dogging Iran�s nuclear program since the Stuxnet attack -- including malfunctioning equipment, shortages of parts and global sanctions, Western diplomats and nuclear experts say
THE YOMIURI SHIMBUN
One Culprit Likely In Cyber-Attacks
Law enforcement officials say the same attacker was behind recent hacks of Mitsubishi Heavy Industries Ltd. and Kawasaki Heavy Industries Ltd.
THE INQUIRER
DHS Assessed Anonymous Threat To Industrial Control Systems
The U.S. Department of Homeland Security has studied the potential for Anonymous to target industrial control systems in power plants, gas and oil refineries, and manufacturing plants, citing its attack against Monstanto and protest against the Alberta Tar Sands project as signs that the hacktivist group could set its sights on process control systems
TECH WORLD
US Defense Department Hit With $4.9 Billion Data Breach Lawsuit
A class action lawsuit has been filed against the DoD for damages resulting from the TRICARE data breach that exposed data on 4.9 million military and their family
CNET DOWNLOAD
NoScript Anywhere For Firefox Mobile For Android
A new version of the NoScript security add-on has been released for Firefox Mobile on Android and Maemeo smartphones and tablets, called NoScript Anywhere
FINEXTRA
Ex-Citadel Staffer Charged Over Code Theft
A former quantitative financial engineer has been arrested and faces up to 10 years in prison for the alleged theft of trading-related computer code
NETWORK WORLD
U.S. Commerce Dept Mum On Huawei Block, Citing Security
The U.S. Department of Commerce won't say why it won't allow Chinese firm Huawei from helping build a national wireless network, citing security reasons
THE REGISTER
Financial Company Heavies Researcher For Reporting Vulnerability
An Australian security researcher was questioned by police and threatened with legal action for his reporting a vulnerability to a financial firm
V3
Housewives, Students And Security Pros Among Anonymous Members
Anonymous has a diverse range of participants -- some politically motivated, some with no hacking skills, some with day jobs in information security, and a large number of students
CSO ONLINE
Former HBGary Federal CEO Barr Regroups After Anonymous
Aaron Barr is openly talking about his firsthand experience as a target of Anonymous but is bound by a lifelong nondisclosure agreement that limits what he can say
SOFTPEDIA
Anonymous Spills Banker Data In 'Occupy Wall Street' Operation
Personal data of the head of The New York Community Bank has been posted online by a faction of Anonymous
GOVERNMENT COMPUTER NEWS
Secure Android Kernel Could Make For 'Classified' Smart Phones
Researchers from Google, George Mason University, and the National Security Agency have built a hardened kernel for the Android 3.0 operating system aimed at military and emergency responders
NAKED SECURITY BLOG
Government Minister Dumps Documents In Park Bins
Cabinet minister Oliver Letwin was exposed for disposing of private correspondence and sensitive documents about Al-Qaeda activities and secret service operations into park bins near Downing Street
Best Of Web Archive:
Most Recent | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173 | 174 | 175 | 176 | 177 | 178 | 179 | 180 | 181 | 182 | 183 | 184 | 185 | 186 | 187 | 188 | 189 | 190 | 191 | 192 | 193 | 194 | 195 | 196 | 197 | 198 | 199 | 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207 | 208 | 209 | 210 | 211 | 212 | 213 | 214 | 215 | 216
Free Research and Reports
Whitepapers
- Remote Data Replication: Combat Disasters And Optimize Business Operations
- Riverbed vs Silver Peak: WAN Optimization Vendors Put to the Test
- Storage Infrastructure as a Service The Best of Cloud and On-premises Storage
- Putting Metaswitch's SBC Software to the Test
- When It Makes Sense to Move to Desktop Virtualization: Seven Key Indicators
Upcoming Events
Dark Reading Digital Magazine
In This Issue
- Endpoint Security: End user security requires layers of tools and training as employees use more devices and apps.
- Security Isn't A Piece Of Cake: It's time we rethink the conventional wisdom about security layering.
- BYOD Is Here To Stay: Trying to keep employees' devices off the network is futile.
Tech Insight
Bugs
Enterprise Vulnerabilities From DHS/US-CERT's National Vulnerability Database
CVE-2013-4612 (redcap)
Multiple cross-site scripting (XSS) vulnerabilities in REDCap before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving different modules.
CVE-2013-4611 (redcap)
Multiple unspecified vulnerabilities in REDCap before 5.1.1 allow remote attackers to have an unknown impact via vectors involving (1) the Online Designer page or (2) the Manage Survey Participants page.
CVE-2013-4610 (redcap)
Unspecified vulnerability in the Data Search utility in data-entry forms in REDCap before 5.0.3 and 5.1.x before 5.1.2 has unknown impact and remote attack vectors.
CVE-2013-4609 (redcap)
REDCap before 5.0.4 and 5.1.x before 5.1.3 does not reject certain undocumented syntax within branching logic and calculations, which allows remote authenticated users to bypass intended access restrictions via (1) the Online Designer or (2) the Data Dictionary upload, as demonstrated by an eval call.
CVE-2013-4608 (redcap)
Cross-site scripting (XSS) vulnerability in REDCap before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors involving the Graphical Data View & Descriptive Stats page.