Best Of Web
Best Of The Web
BUSINESS INSIDER
RIM CEO Abruptly Ends An Interview After Getting Annoyed About Security Questions
RIM CEO Mike Lazaridis stopped his interview with a BBC journalist after getting upset with the line of questioning about BlackBerry security
TECHWORLD
US Police Increasingly Peeping At E-Mail, Instant Messages
Law enforcement officials have made tens of thousands of requests for private electronic information from Sprint, Facebook, and AOL, among others, researchers find
STOREFRONT TALKBACK
Epsilon's Cross-Connected Nightmare
Thieves who hit Epsilon may have a cross-connected database with sophisticated and comprehensive CRM profiles a retail chain would crave
GLOBAL VOICES ONLINE
Malaysia: Cyber Attacks Shut Down Independent News Website
Independent news portal in Malaysia has been inaccessible since Tuesday after being hit with a DDoS attack
REUTERS
Special Report: In Cyberspy Vs. Cyberspy, China Has The Edge
U.S. investigators say China has stolen terabytes of sensitive data, incluyding usernames and passwords for State Department computers to designs for multibillion dollar weapons systems
ANONLAW
Judge Sanctions Plaintiffs $29,000 For Discovery Fishing Expedition Against John Doe Defendants
Ligatt Security's suit has been dismissed and the judge awarded the defendant $29,000 in attorney fees
SOFTPEDIA
French Hacker Arrested After Bragging On TV
A French man who boasted on TV that he had hacked into the network of a defense contractor was arrested and charged with unauthorized access to a computer system, data theft, and organized fraud
CSO ONLINE
Microsoft Delivers Monster Security Update For Windows, IE
Microsoft yesterday issued patches for a record 64 vulnerabilities in Windows, Office, and Internet Explorer, as well as 30 bugs in the Windows kernel device driver
INFOSECURITY
Researcher Cracks Two-Factor iPhone Authentication
An Australian researcher showed how to crack the iPhone's two-factor authentication with malware and a remote telnet app
TECH REPUBLIC
Guns, Babes, And Rootkits: A Windows Guru Writes A Thriller
Microsoft's Mark Russinovich published his first novel, which is a thriller based on a zero-day attack
BANK INFOSECURITY
Bill Aims To Safeguard Personal Information
Senators John Kerry, D-Mass., and John McCain, R-Ariz. yesterday introduced legislation that aims to balance consumer privacy and business' ability to collect information for marketing purposes
IT BUSINESS EDGE
Google's Alleged Fraud Put Company And Advocates at Risk
Microsoft's general counsel says Google intentionally misrepresented Google Docs for Government as FISMA-compliant
TREND MICRO BLOG
Another Adobe Flash Zero-Day Found, Embedded In Word Documents
An exploit for another zero-day vulnerability in Adobe Flash Player has been seen in the wild in the form of an .SWF file embedded in a Microsoft Word document
TORRENT FREAK
Proposal Suggests Browsers Should Block Users From BitTorrent Sites
After continued failure, authorities look for new methods to stop illegal filesharing
BANK INFO SECURITY
Phishing Season: How To Avoid Fraud
What should users do to avoid phishing following Epsilon breach: expert offers some advice
COMPUTERWORLD
Epsilon: A Watershed For An Industry Under Siege
Attacks on third-party service providers continue to pay dividends for the bad guys
CRI
Cybercrime Rises Rapidly In Pakistan
Authorities see five times as many crimes over the past four years
THREATPOST
Microsoft Pushes Out Two New Security Tools
New tools are designed to make common exploitation scenarios more difficult for attackers
TECHNOLOGY REVIEW
Busting The Botnets
Unusual activity generated by zombie networks can lead security experts right to them
M86 SECURITY
New Facebook Scam Spreading
Social engineering attack is titled "everyone do check what she did on cam"
PC WORLD
UK Police Arrest Three Men Over "SpyEye" Malware
Malicious code was used to steal online banking details, authorities say
SC MAGAZINE
Education Dept. Proposes New Privacy, Data Sharing Rules
The U.S. Department of Education has proposed clarifications to its Family Educational Rights and Privacy Act (FERPA) and hired its first-ever chief privacy officer
COMPUTERWORLD
Windows 7 Share Tops XP For First Time In U.S.
Windows 7 for the first time passed Windows XP in U.S. usage share, according to data from an Irish Web analytics company
IT NEWS
Microsoft To Crack Open Rustock's Servers
Microsoft will petition for permission to look into the servers it seized in raids on the Rustock botnet, which still has 1.7 million IP addresses "calling home"
FORBES
Hackers Attack Websites Of Russian Paper, Blog
The website of a popular Russian independent newspaper was knocked down by a distributed denial-of-service attack just days after similar attacks crippled Russia's most popular blogging site
THE REGISTER
Hack Attack Spills Web Security Firm's Confidential Data
An anonymous post says Barracuda Networks' website has sustained an attack that appears to have exposed sensitive data concerning the company's partners and employee login credentials via a SQL injection attack
PC WORLD
UK Police Arrest Three Men Over 'SpyEye' Malware
A Lithuanian and Latvian were charged in connection with using the SpyEye Trojan, while a third man whose nationality wasn't revealed was released on bail
THREAT POST
Microsoft Planning 17 Bulletins To Fix 64 Bugs In April Patch Tuesday
Microsoft will release 17 bulletins tomorrow, fixing 64 vulnerabilities
THOUGHTCRIME BLOG
SSL And The Future Of Authenticity
Be careful about jumping on board with DNSSEC
WASHINGTON POST
Blumenthal Asks For Epsilon Investigation
Senator says he has asked Attorney General to look into the breach
STAR TRIBUNE
Target's Email Addresses Stolen, Too
Department store adds name to Epsilon list
GOVERNMENT INFO SECURITY
Health Net Breach Tops Federal List
Data confirms that Health Net compromise affected 1.9 million
BBC
Russia's President Medvedev Denounces Cyberattack
Leader criticizes attack on social network that carries his blog
TeamSHATTER
Has The Sun Set On LizaMoon?
Breaches at LizaMoon, Epsilon could have far-reaching impact
IT SECURITY PORTAL
Companies Not Doing Enough To Assure The Security Of Their Service Providers
Third parties may leave companies open to attack, experts say
WIRED
In Surprise Appeal, TJX Hacker Claims U.S. Authorized His Crimes
Albert Gonzalez asks judge to lift his 20-year sentence
TECHNORATI
Google Announces New Anti-Malware Warning For Chrome Browser
New release will warn users when it detects possible malicious code
ZSCALER
USPS.gov Website Infected With Blackhole Exploit Kit
Commercial exploit kit is being seen in an increasing number of hacks, researchers say
COMPUTERWORLD
U.S. Can Conduct Offsite Searches Of Computers Seized At Borders, Court Rules
Appeals court reaffirms government's authority
GOVERNMENT INFO SECURITY
Will A Federal Government Shutdown Affect IT Security?
Furlough of 800,000 requires employees to give up their BlackBerrys; overall system security could be affected
Best Of Web Archive:
Most Recent | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173 | 174 | 175 | 176 | 177 | 178 | 179 | 180 | 181 | 182 | 183 | 184 | 185 | 186 | 187 | 188 | 189 | 190 | 191 | 192 | 193 | 194 | 195 | 196 | 197 | 198 | 199 | 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207 | 208 | 209 | 210 | 211 | 212 | 213 | 214 | 215 | 216
Free Research and Reports
Whitepapers
Upcoming Events
Dark Reading Digital Magazine
In This Issue
- The Future Of Web Authentication: Password technology is out of steam. We need safer ways to prove who's who online.
- Rethink ID Management: If the technology continues to improve, it might soon be OK for all of us to be one person on the Web.
Tech Insight
Bugs
Enterprise Vulnerabilities From DHS/US-CERT's National Vulnerability Database
CVE-2013-3562
Multiple integer signedness errors in the tvb_unmasked function in epan/dissectors/packet-websocket.c in the Websocket dissector in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (application crash) via a malformed packet.
CVE-2013-3561
Multiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of service (loop or application crash) via a malformed packet, related to a crash of the Websocket dissector, an infinite loop in the MySQL dissector, and a large loop in the ETCH dissector.
CVE-2013-3560
The dissect_dsmcc_un_download function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.
CVE-2013-3559
epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x before 1.8.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (integer overflow, and heap memory corruption or NULL pointer dereference, and application crash) via a malformed packet.
CVE-2013-3558
The dissect_ccp_bsdcomp_opt function in epan/dissectors/packet-ppp.c in the PPP CCP dissector in Wireshark 1.8.x before 1.8.7 does not terminate a bit-field list, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.