Best Of Web
Best Of The Web
INFO SECURITY
Anonymous And Lulzsec Hackers Hit Italian Cybercrime Unit
Hacker groups begin releasing classified documents
THE SUNDAY MORNING HERALD
Kate, Family Likely Hacker Targets
The Duchess of Cambridge and her family might have been victims of the News Corp. phone hacking scandal
BLOOMBERG
Ex-Akamai Worker To Plead Guilty To Espionage For Disclosing Trade Secrets
Former Akamai Technologies employee Elliot Doxer, 42, of Brookline, Mass., will plead guilty to the charge of foreign economic espionage
NAKED SECURITY BLOG
Twitter Phishing Attack Spreads Via Direct Messages
Some Twitter users have been receiving phony direct messages from other members of the network using lures, such as photo, video, or blog mentions
PWNIE AWARDS
The Nominees For Pwnie Awards Announced
Sony has all five nominations for 'Epic Fail,' while the HBGary hack, Stuxnet, and LulzSec are among 'Epic Ownage' nominees
THE NEXT WEB
Google Is Learning Lessons From Google+ 'Fake Names' Debacle
Google over the weekend purged Google+ of accounts that appeared not to be using real names
PC MAGAZINE
Suspected LulzSec Hacker Released On Bail In U.K.
A British teenager known as "Tflow," who is reportedly a founding member of the hacker collective LulzSec, has been released on bail, and Dutch authorities have also released four individuals associated with LulzSec, according to reports
ZDNET
Anon Hackers To Expose Aussie Cybercops?
A preview leak from a hacking group associated with the AntiSec movement has threatened to expose communications between one of Europe's top cybercrime divisions and its global partners
TREND MICRO COUNTERMEASURES BLOG
Why Don't Cybercrime Rewards Work?
Microsoft Anti-Virus Reward program has been around since late 2003, and successes are outnumbered by cold cases
SCHNEIER ON SECURITY
Is There a Hacking Epidemic?
It's not that things are getting worse -- it's that things were always this bad
TECH EYE
Cisco Blasted For Arranging Arrest Of Whistleblower
A Canadian judge criticized Cisco for arranging for the criminal arrest of a whistleblower who was suing the company
COMPUTERWORLD
Adobe Recants Knock On Apple's OS X Lion
After saying earlier this week that Flash doesn't work on Apple OS X Lion's hardware acceleration, Adobe says a testing error led to an incorrect conclusion, and that Flash is hardware-accelerated in the OS
BUSINESS WEEK
China-Based Spies Said To Be Behind Hacking Of IMF Computers
Sources close to the investigation into the hacking of the International Monetary Fund say the attack was conducted by cyberspies connected to China
HELP NET SECURITY
New French eID Card To Tackle Identity Theft
The French National Assembly passed a new law on identity protection, but the government must find a way to effectively manage biometrics and personal information to support the program
THE REGISTER
Japanese Judge Jails Serial Malware Author
Masato Nakatsuji, 28, has been sent to jail for two-and-a-half years for writing malware that spreads via P2P file-sharing networks--and he wrote it while on probation for an earlier malware-writing incident
INFOSEC ISLAND
What To Do If Your Gmail Account Has Been Hacked
Be sure you have a secondary email address that can be used to recover an inaccessible Gmail account, and if you get hacked, check your Google Gmail settings to be sure your messages aren't being automatically forwarded to the hacker
THE CYPRESS TIMES
Cybersecurity Enhancement Act Passes Committee
The Cybersecurity Enhancement Act of 2011, which will force federal agencies to tighten their network security and help R&D and in building out the cyberworkforce, goes to the House floor
SOPHOS
Serial Virus Writer Jailed For Orange Cartoon Octopus Malware
For the first time, Japan applies property destruction laws to a virus creator
REUTERS
Sony Insurer Sues To Deny Data Breach Coverage
Zurich American might argue that general liability insurance doesn't cover digital attacks
ABC NEWS
Terror Warning Warns Of Insider Threat To Utilities
Sabotage could provide Al Qaeda or other groups their best chance at a Sept. 11-like attack, officials say
THE REGISTER
Major Overhaul Make OS X Lion King Of Security
Windows 7, Ubuntu meet their match, experts say
SEATTLE TIMES
20,000 Swedish Employees' Personal Data Breached
Data was inadvertently made accessible on the Internet for nine weeks
ELECTRONIC FRONTIER FOUNDATION
Fragmenting The Internet Is Not A Security Solution
"Separate, secure Internet" could create inequities, privacy concerns
THE REGISTER
LulzSec Says It Will Partner With The Media On Murdoch Emails
Hacker group says it will work with media on slow rollout of publisher's emails
WINDOW SECURITY
Security Issues When Connecting Computers To Cellular Networks
Cellular networks offer wider range of service locations, but are they safe? Here's a look
IDEA LAB
FBI Arrests College Students, Cashiers And A Landscaper For 'Anonymous' Hacks
Among those arrested are cashiers and college students and a Sears sales associate
THREAT POST
Microsoft Research Team Reports Bugs In Facebook, Google Picasa
Microsoft's Vulnerability Research team is keeping itself busy finding bugs in other vendors' products, with the two latest being a vulnerability in Google's Picasa photo editing and sharing application and a bug in Facebook that could lead to the compromise of a victim's account
WORLD NET DAILY
Look Who Obama's Hired For Cybersecurity Team
Ex-Clinton staffer 'lost' thousands of White House e-mails and booted by DHS for faking credentials
NEW YORK TIMES
U.S. To Close 800 Computer Data Centers
A shift to cloud computing by the federal government will result in the closure of 40 percent of its computer centers over the next four years to save money and modernize operations
THE VOICE OF RUSSIA
Russia Opts For Universal Anti-Cybercrime Convention
Russia has suggested drafting a UN convention to fight cybercime in order to update current doctrine
INFOSEC ISLAND
Jay Leno: Most Dangerous Celebrity In Cyberspace
American comedian and TV host Jay Leno is used most as a lure in spam runs, BitDefender says
CNN
Taliban: We Were Hacked
A Taliban spokesman says its phones and website were hacked, and that phony text messages were sent saying Afghan leader Mullah Mohammed Omar is dead
CANADA.COM
Quebec Hacker Arrested For Creating 'Zombie' Computers
Joseph Mercier, 24, was arrested by Canadian authorities for allegedly writing malware to build a botnet
BOSTON HERALD
Cambridge Man Accused Of Stealing 4M Documents In MIT Hack
Federal indictment says man physically broke into university network
FORBES
Rupert Murdoch: I'm Humbled Over Phone Hacking
Media mogul takes contrite tone after his company takes a financial beating
BOSTON.COM
Beth Israel Breach May Affect Over 2,000
Virus sent records to unknown location
TROY HUNT�S BLOG
The Science Of Password Selection
Microsoft security expert shows the numbers on how passwords are chosen -- and where users go wrong
FINEXTRA
Crooks Take Advantage Of Japan Earthquake To Steal Millions From ATMs
Some $5.4 million stolen so far, authorities says
DoD CYBERCRIME CONFERENCE
Department of Defense Cybercrime Conference Issues Call For Speakers
Submissions are due on Aug. 1
CNET
FBI Raids Alleged Anonymous Homes
Law enforcement searches homes in New York, California
Best Of Web Archive:
Most Recent | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173 | 174 | 175 | 176 | 177 | 178 | 179 | 180 | 181 | 182 | 183 | 184 | 185 | 186 | 187 | 188 | 189 | 190 | 191 | 192 | 193 | 194 | 195 | 196 | 197 | 198 | 199 | 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207 | 208 | 209 | 210 | 211 | 212 | 213 | 214 | 215 | 216
Free Research and Reports
Whitepapers
Upcoming Events
Dark Reading Digital Magazine
In This Issue
- The Future Of Web Authentication: Password technology is out of steam. We need safer ways to prove who's who online.
- Rethink ID Management: If the technology continues to improve, it might soon be OK for all of us to be one person on the Web.
Tech Insight
Bugs
Enterprise Vulnerabilities From DHS/US-CERT's National Vulnerability Database
CVE-2013-3496 (vipnet_client, vipnet_coordinator, vipnet_personal_firewall, vipnet_safedisk)
Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file.
CVE-2013-2849 (chrome)
Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome before 27.0.1453.93 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) drag-and-drop or (2) copy-and-paste operation.
CVE-2013-2848 (chrome)
The XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain sensitive information via unspecified vectors.
CVE-2013-2847 (chrome)
Race condition in the workers implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via unknown vectors.
CVE-2013-2846 (chrome)
Use-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2013-2840.