Best Of Web
Best Of The Web
KREBS ON SECURITY
Anonymous Splinter Group Implicated In Game Company Hack
Eidos Interactive is defaced and plundered
NETWORK WORLD
Smartphones Attract Organized, International, Profit-Driven Scammers
Department of Justice, FTC define mobile security, privacy threats
PARETO LOGIC
Hacked Chinese ".gov" Site Leads To Phishing And Banking Trojan
Vulnerability could cause trouble for banks and their customers, researcher says
TECH RADAR
Asia Is Now The Spam Continent Of The World
Asia has replaced Europe as the primary spam source, report says
CNET
Software Piracy Hits Record High Of $59 Billion
New figure is a 14 percent increase over 2009
THREAT POST
Google Fixes Two Chrome Bugs, Adds Flash 10.3 To Browser
Patches designed to shore up security holes, company says
ECONOMIC TIMES
Cyberscams Rife At Social Networks: Microsoft Security Report
Social nets are becoming "lucrative hot beds" for crime, according to report
SC MAGAZINE
More Than 30 Hospital Workers Fired For Snooping
Employees peeked at records belonging to Minnesota patients who overdosed at a house party
FEDERAL NEWS RADIO
Cyberwarfare Rules Included In Defense Bill
Legislation includes language outlining rules of engagement
BANK INFO SECURITY
Banking On .Bank For Security
Banks plan to become more involved in top-level domain naming
MICROSOFT
Microsoft Improves Exploitability Index
Rating system evolves to become more "clear and digestible" for customers
INFOWORLD
Everything Is Hackable--And Cybercriminals Can't Be Tracked
Cybercrime will be difficult to stop until fundamental changes are made to the Internet, expert says
TRUSTEER
Windows Malware Targets Financial Industry
Previously known malware adapts to new targets
THE TECH HERALD
The Fighting Continues As AnonOps Stages A Comeback
Hacker alleges that IRC operations team was giving orders to others for attacks
F-SECURE
Russian Newspaper Pravda Is Hacked
English-language version of Russia's major newspaper contains malicious exploits, researcher says
TECH RADAR
Limewire Did Break Copyright Law, Says Founder
Well duh, says the rest of the world
IT BUSINESS.CA
Canada's Phishing Activity Booming, Report Warns
Country has become No. 2 host for phishing sites, according to research
CNN
Yes, Microsoft Is Buying Skype
$8.5 billion buyout brings software giant new capabilities -- and maybe some security issues
CNET
DOJ Wants Wireless Providers To Store User Info
Request pits DOJ against privacy advocates and even other federal agencies
KREBS ON SECURITY
Breach At Michaels Stores Extends Nationwide
Compromise of point-of-sale devices in Chicago also occurred in other cities, retail craft chain says
THE REGISTER
Finnish Police Close Case On Phishing Trojan Gang
Seventeen people arrested in scam of Nordea Bank
NETWORK WORLD
WebGL Hit By Hard-To-Fix Browser Security Flaw
Graphics technology built into Firefox and Chrome could pose serious security risks, experts say
WALL STREET JOURNAL
Google And Apple Defend Data Privacy Controls
Companies defend practices in Senate hearing
ZDNET BLOG
Facebook Con Artist Steals $366,000 From Woman
A Malaysian woman recently lost $366,000 to a Facebook scammer who claimed he was a U.K. citizen who needed access to her bank account in order to cash in a contract he had with Malaysia�s national oil company
THE JURIST
U.S. Lawmakers Release Draft Online Child Privacy Act
Edward Markey (D-MA) and Joe Barton (R-TX) have drafted a bill that would restrict companies from tracking the Internet activity of minors without parental consent
APP RIVER
Threat & Spamscape Report
Asia surpassed Europe as the highest spam-yielding country in a new report, and India and Russia beat out the U.S.
WIRED
Battle Brews Over FBI's Warrantless GPS Tracking
A look inside the controversial GPS device the FBI uses for tracking individuals
BANK INFOSECURITY
Michaels Stores Are Fraudsters' Latest Targets
Some Chicago residents reported thefts from their bank accounts after debit cards were used in transactions at area Michaels stores, and account details might have been skimmed as far back as December 2010
THREAT POST
OpenID Warns Of Serious Bug In Some Implementations
A flaw in OpenID could allow an attacker to change some of the data exchanged between parties that use OpenID, and an update is now available that fixes the flaw
CNN
The Best Password Is A Sentence, Says Expert
Sophos security consultant offers up a method for creating strong passwords--and being able to remember them
NEXGOV.COM
U.S. And Estonia Forge New Cyber Relationship
Estonia is sharing its cyberdefense know-how with law enforcement agencies throughout NATO, including the FBI
THE REGISTER
Fake Certificate Attack Targets Facebook Users In Syria
A man-in-the-middle attack is targeting HTTPS users of Facebook in Syria
HELP NET SECURITY
Multiplatform Java Botnet Spotted In The Wild
Rare cross-platform malware that attacks both Windows and Mac OS users "named" IncognitoRAT seen in the wild
COMPUTERWORLD
Sony Creates CISO Position In Wake Of Network Hack
Sony Network Entertainment International (SNEI) is adding a CISO position to add "expertise in and accountability for customer data protection and supplement existing security personnel"
CNET
Exclusive: Third Attack Against Sony Planned
Sony is in the crosshairs again as a group of hackers plans another attack, this time leaking information on Sony's servers they claim to still control
THE DAILY KOS
Anonymous Says It Did Not Hack Sony
Whoever broke into Sony's servers to steal the credit card info and left a document blaming Anonymous tried to frame the hacktivist group, it says
REUTERS
Experts Skeptical On New Iran "Cyber Attack" Claim
No evidence to back up Iran's claim of another cyberattack
WORKPLACE PRIVACY REPORT
California And Massachusetts Legislatures Push Data Breach And Security Bills
California Senate approved a bill requiring breach notification if more than 500 California residents are affected, and a Massachusetts House bill under debate includes addressing photocopiers that store data and pose a security risk
YAHOO!
FBI Warns Of Email With Bin Laden 'Death' Video
Email could contain identity-stealing malware, agency says
BUSINESSWEEK
Sony Said To Be Subpoenaed By New York Over Data Breaches
Attorney General reportedly seeks information on what PlayStation Network operator told customers
Best Of Web Archive:
Most Recent | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173 | 174 | 175 | 176 | 177 | 178 | 179 | 180 | 181 | 182 | 183 | 184 | 185 | 186 | 187 | 188 | 189 | 190 | 191 | 192 | 193 | 194 | 195 | 196 | 197 | 198 | 199 | 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207 | 208 | 209 | 210 | 211 | 212 | 213 | 214 | 215 | 216
Free Research and Reports
Whitepapers
Upcoming Events
Dark Reading Digital Magazine
In This Issue
- The Future Of Web Authentication: Password technology is out of steam. We need safer ways to prove who's who online.
- Rethink ID Management: If the technology continues to improve, it might soon be OK for all of us to be one person on the Web.
Tech Insight
Bugs
Enterprise Vulnerabilities From DHS/US-CERT's National Vulnerability Database
CVE-2013-2059
OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authentication token when deleting a user through the Keystone v2 API, which allows remote authenticated users to retain access via the token.
CVE-2013-2007
The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.
CVE-2013-2006
OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.
CVE-2013-1977
OpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to obtain sensitive information such as the LDAP password and admin_token secret by reading the file.
CVE-2013-1964
Xen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non-transitive grant, which allows local guest administrators to cause a denial of service (host crash), obtain sensitive information, or possible have other impacts via unspecified vectors.