http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com 2013-04-16 21:33:30 - threatpost The First Stop for Security News : BOSTON Downstream is where you live today as a security person If Gene Kim has his way, you ll be inline soon enough Kim s keynote today at Source Boston 2013 took listeners on a deep dive of the integration of development and IT operations and helped map out how organizations may be able to wedge security into the conversation and help security practitioners escape a system that pre-ordains failure one they are for the most part powerless to avoid today read more http://www.secuobs.com/revue/news/439840.shtmlhttp://www.secuobs.com/revue/news/439840.shtml Secuobs.com : 2013-04-16 19:54:30 - threatpost The First Stop for Security News - Podcast and Downloadsaudio mpeg iconthreatpost_schneier_4_16_2013mp3 Bruce SchneierDennis Fisher talks with Bruce Schneier about the effects of the Boston Marathon bombing, how the psychology of fear plays into people's reactions to these events and what the political aftermath could be You are missing some Flash content that should appear here Perhaps your browser cannot display it, or maybe it did not initialize correctly read more http://www.secuobs.com/revue/news/439812.shtmlhttp://www.secuobs.com/revue/news/439812.shtml Secuobs.com : 2013-04-16 19:04:34 - threatpost The First Stop for Security News - Throw another log onto the proverbial Android malware fire According to mobile security firm NQ Mobile, infections targeting devices running the Google-based operating system doubled in 2012 That translates to a 163 percent increase from 2011 and accounts for over 65,000 different types of malware discovered, up 30,000 from 25,000 the year before read more http://www.secuobs.com/revue/news/439796.shtmlhttp://www.secuobs.com/revue/news/439796.shtml Secuobs.com : 2013-04-16 17:27:12 - threatpost The First Stop for Security News - The attackers who compromised Web hosting provider Linode used a zero day vulnerability in Adobe ColdFusion and were able to access the company's database, source code and customers' credit card numbers and passwords The company said that the customer credit card numbers were encrypted, as were the passwords, but it forced a system-wide password reset after the attack was discovered read more http://www.secuobs.com/revue/news/439762.shtmlhttp://www.secuobs.com/revue/news/439762.shtml Secuobs.com : 2013-04-15 21:04:41 - threatpost The First Stop for Security News - Google has fixed a series of serious vulnerabilities in its Chrome OS, including three high-risk bugs that could be used for code execution on vulnerable machines As part of its reward program, Google paid out more than 30,000 to a researcher who found three of the vulnerabilities read more http://www.secuobs.com/revue/news/439600.shtmlhttp://www.secuobs.com/revue/news/439600.shtml Secuobs.com : 2013-04-15 17:53:57 - threatpost The First Stop for Security News - Months of distributed denial of service attacks against major US banks have evolved in magnitude and ferocity causing service disruptions for online banking customers They ve also shown the way for other attackers to adapt and evolve techniques used in those attacks read more http://www.secuobs.com/revue/news/439552.shtmlhttp://www.secuobs.com/revue/news/439552.shtml Secuobs.com : 2013-04-15 17:07:49 - threatpost The First Stop for Security News - Podcast and Downloadsaudio mpeg icon04_gary_mcgrawmp3 Gary McGrawDennis Fisher talks with Gary McGraw, CTO of Cigital, about his childhood as a violin prodigy, his early introduction to personal computers with the Apple II, his start in software security and the state of the discipline today You are missing some Flash content that should appear here Perhaps your browser cannot display it, or maybe it did not initialize correctly read more http://www.secuobs.com/revue/news/439542.shtmlhttp://www.secuobs.com/revue/news/439542.shtml Secuobs.com : 2013-04-15 15:33:52 - threatpost The First Stop for Security News - In the lucrative world of online gambling, many poker rooms especially those that rely on the user to download a client to play are marred by insecurities read more http://www.secuobs.com/revue/news/439520.shtmlhttp://www.secuobs.com/revue/news/439520.shtml Secuobs.com : 2013-04-12 20:31:55 - threatpost The First Stop for Security News - MIAMI BEACH--Stephen Watt was involved in a series of attacks on retailers and restaurants that federal prosecutors called the largest identity theft in US history He wrote the sniffer used by some of his friends to steal millions of credit card numbers After federal agents raided his apartment, confiscated all of his computer equipment, he eventually was indicted on a series of charges related to the attacks on TJX, Dave Buster's and others and was facing several years in prison So he took a plea deal, hoping to reduce his prison time and the financial burden on his family In all of that, what he regrets most is taking the plea read more http://www.secuobs.com/revue/news/439212.shtmlhttp://www.secuobs.com/revue/news/439212.shtml Secuobs.com : 2013-04-12 17:54:02 - threatpost The First Stop for Security News - The assault against Free Tibet and Uyghur supporters is unrelenting as another watering hole attack has been uncovered, this time against a caregiver site supporting Tibetan refugee children read more http://www.secuobs.com/revue/news/439180.shtmlhttp://www.secuobs.com/revue/news/439180.shtml Secuobs.com : 2013-04-12 15:18:48 - threatpost The First Stop for Security News - Microsoft announced last night that it has stopped pushing a security update originally released on Patch Tuesday because the fix is causing some PCs to blue screen Microsoft recommends users uninstall the patch, which is also causing compatibility with some endpoint security software read more http://www.secuobs.com/revue/news/439152.shtmlhttp://www.secuobs.com/revue/news/439152.shtml Secuobs.com : 2013-04-12 04:56:50 - threatpost The First Stop for Security News - A German security company spent 18 months analyzing malware among millions of Web sites ranked by the world's most popular search engines and concluded Google was safer than Bing read more http://www.secuobs.com/revue/news/439065.shtmlhttp://www.secuobs.com/revue/news/439065.shtml Secuobs.com : 2013-04-11 22:46:29 - threatpost The First Stop for Security News - A form of spyware first seen in 2008 and known for siphoning away users bank account credentials, emails, screenshots and various other bits of information has surfaced again this time targeting computer users in India read more http://www.secuobs.com/revue/news/439035.shtmlhttp://www.secuobs.com/revue/news/439035.shtml Secuobs.com : 2013-04-11 21:53:00 - threatpost The First Stop for Security News - As if hurtling through the air at 500 miles per hour in an enormous meshing of metal and wires wasn t terrifying enough, security researcher Hugo Teso presented a practical demonstration of a remote airline attack in which he took complete control of a virtual aircraft s flight management system FMS at the Hack-in-the-Box security conference in Amsterdam yesterday read more http://www.secuobs.com/revue/news/439020.shtmlhttp://www.secuobs.com/revue/news/439020.shtml Secuobs.com : 2013-04-11 21:53:00 - threatpost The First Stop for Security News - MIAMI BEACH--The security teams that have to defend enterprise networks are faced with a broad and deep threat landscape populated with all manner of malware and targeted attacks Those teams often have to react quickly to new threats, well before vendors respond with new technologies By the look of things on the offensive side of the ball, much of which is on display at the Infiltrate conference here, things are not likely to get any easier for network defenders anytime soon read more http://www.secuobs.com/revue/news/439019.shtmlhttp://www.secuobs.com/revue/news/439019.shtml Secuobs.com : 2013-04-11 21:02:34 - threatpost The First Stop for Security News - LinksysCisco clarified today that its Linksys EA2700 home routers running the new Smart Wi-Fi firmware released last June are immune to vulnerabilities disclosed this week by a researcher EA2700 routers, however, that are still running on the classic EA2700 configuration remain vulnerable to a host of flaws and more than 2,000 vulnerable to an authentication bypass exploit can be found on the Shodan search engine read more http://www.secuobs.com/revue/news/439004.shtmlhttp://www.secuobs.com/revue/news/439004.shtml Secuobs.com : 2013-04-11 17:41:24 - threatpost The First Stop for Security News - MIAMI BEACH--The US military has been attempting to build up the offensive cybersecurity capabilities in its various services for several years now, but is running into the same obstacles and challenges that private sector firms in the same space are a shortage of skilled workers and not enough money to hire the ones who have the skills Those deficits could portend a reevaluation in the way that the military handles cyber operations and who is involved in them read more http://www.secuobs.com/revue/news/438929.shtmlhttp://www.secuobs.com/revue/news/438929.shtml Secuobs.com : 2013-04-11 15:54:23 - threatpost The First Stop for Security News - A cybercrime gang has been running roughshod over the gaming industry for years using malware signed with valid digital certificates to steal source code and valuable in-game currency for a number of popular online games read more http://www.secuobs.com/revue/news/438904.shtmlhttp://www.secuobs.com/revue/news/438904.shtml Secuobs.com : 2013-04-10 22:34:54 - threatpost The First Stop for Security News - Officials from the Republic of Korea are saying North Korea s military intelligence agency was responsible for the mid-March malware attacks that knocked several prominent South Korean banks and broadcasters offline, according to a Dow Jones Newswire report read more http://www.secuobs.com/revue/news/438758.shtmlhttp://www.secuobs.com/revue/news/438758.shtml Secuobs.com : 2013-04-10 21:34:47 - threatpost The First Stop for Security News - Microsoft reportedly will implement two-factor authentication on users accounts at some point down the line, according to reports this week read more http://www.secuobs.com/revue/news/438735.shtmlhttp://www.secuobs.com/revue/news/438735.shtml Secuobs.com : 2013-04-10 18:15:56 - threatpost The First Stop for Security News - Attackers targeting Tibetan freedom supporters aren t holding back when it comes to using all avenues to infect activists with malware In a relatively short amount of time, we ve seen Tibetan nationals in China and in exile around the world targeted with spear phishing campaigns, watering hole attacks, hacks against Android mobile devices and now the latest vector social media sites read more http://www.secuobs.com/revue/news/438664.shtmlhttp://www.secuobs.com/revue/news/438664.shtml Secuobs.com : 2013-04-10 04:03:09 - threatpost The First Stop for Security News - The streaming video service Vudu on Tuesday began resetting its customers' passwords after theives broke into the company's Santa Clara, Calif headquarters and stole a number of items, including hard drives holding customer data read more http://www.secuobs.com/revue/news/438545.shtmlhttp://www.secuobs.com/revue/news/438545.shtml Secuobs.com : 2013-04-09 22:46:52 - threatpost The First Stop for Security News - UPDATE - In an unexpected turn, Microsoft s monthly Patch Tuesday security updates released today did not include patches for Internet Explorer vulnerabilities used during the Pwn2Own contest one month ago read more http://www.secuobs.com/revue/news/438487.shtmlhttp://www.secuobs.com/revue/news/438487.shtml Secuobs.com : 2013-04-09 22:46:52 - threatpost The First Stop for Security News - Mozilla has pushed out the second beta version of its Persona authentication system The move is the latest step in the company s campaign to rid the Web of passwords and make it easier for consumers to log on to sites regardless of the browser they re using read more http://www.secuobs.com/revue/news/438486.shtmlhttp://www.secuobs.com/revue/news/438486.shtml Secuobs.com : 2013-04-09 21:52:09 - threatpost The First Stop for Security News - Adobe published its monthly security bulletins today, pushing out updates that address issues in the company s ColdFusion platform as well as its Flash and Shockwave Players read more http://www.secuobs.com/revue/news/438479.shtmlhttp://www.secuobs.com/revue/news/438479.shtml Secuobs.com : 2013-04-09 20:03:06 - threatpost The First Stop for Security News - A researcher looking for a way to jailbreak locked down Motorola Android devices found a loophole in hardware-embedded security system to do just that read more http://www.secuobs.com/revue/news/438458.shtmlhttp://www.secuobs.com/revue/news/438458.shtml Secuobs.com : 2013-04-09 16:46:05 - threatpost The First Stop for Security News - The United States government for years has been developing and deploying offensive cyber capabilities, most of it done without much in the way of public notice That's been changing of late, as government and military officials have become more open in discussing these capabilities and under what circumstances they might be used Now, the US Air Force has said that it has classified six unnamed tools as weapons, mainly as a way to improve the chances of those tools receiving the funding they need read more http://www.secuobs.com/revue/news/438394.shtmlhttp://www.secuobs.com/revue/news/438394.shtml Secuobs.com : 2013-04-09 03:33:44 - threatpost The First Stop for Security News - Lawmakers today announced a new version of the controversial Cyber Intelligence Sharing and Protection Act CISPA will be introduced in a House committee this week This CISPA, they claim, addresses concerns from privacy advocates who slammed the legislation for how users' private data and browsing histories might be handled in the name of Internet security read more http://www.secuobs.com/revue/news/438280.shtmlhttp://www.secuobs.com/revue/news/438280.shtml Secuobs.com : 2013-04-08 19:50:16 - threatpost The First Stop for Security News - Hackers love to attack Java Why Well, not only because it is full of holes, but because it s everywhere, embedded on endpoints, Web browsers, mobile devices and more The same goes for attacking wireless routers they re buggy and they re everywhere read more http://www.secuobs.com/revue/news/438231.shtmlhttp://www.secuobs.com/revue/news/438231.shtml Secuobs.com : 2013-04-08 19:50:16 - threatpost The First Stop for Security News - Airdroid XSSA cross-site scripting XSS vulnerability exists in the browser version of AirDroid, a cloud management application for Google s Android phones According to an alert from the US-Computer Emergency Readiness Team US-CERT , at the current time, there is no patch planned and there is no logical workaround read more http://www.secuobs.com/revue/news/438230.shtmlhttp://www.secuobs.com/revue/news/438230.shtml Secuobs.com : 2013-04-08 15:41:25 - threatpost The First Stop for Security News - Paul JudgeDennis Fisher talks with Paul Judge, the CTO of Barracuda Labs, about his roots in the security industry, his near-miss with organic chemistry, the start-up and security community in Atlanta and what his next venture might be You are missing some Flash content that should appear here Perhaps your browser cannot display it, or maybe it did not initialize correctly read more http://www.secuobs.com/revue/news/438158.shtmlhttp://www.secuobs.com/revue/news/438158.shtml Secuobs.com : 2013-04-05 20:24:41 - threatpost The First Stop for Security News - The prolific, credential-stealing Shylock banking Trojan is growing increasingly sophisticated as its creators continue adding new modules and functionalities to the man-in-the-browser malware, according to a Symantec report read more http://www.secuobs.com/revue/news/437911.shtmlhttp://www.secuobs.com/revue/news/437911.shtml Secuobs.com : 2013-04-05 19:36:33 - threatpost The First Stop for Security News - Source code and a private signing key for firmware manufactured by a popular PC hardware maker American Megatrends Inc AMI have been found on an open FTP server hosted in Taiwan read more http://www.secuobs.com/revue/news/437893.shtmlhttp://www.secuobs.com/revue/news/437893.shtml Secuobs.com : 2013-04-05 18:49:44 - threatpost The First Stop for Security News - Document-sharing website Scribd announced this week it was hacked, the victim of what it s calling a deliberate attempt to access the email addresses and passwords of registered Scribd users read more http://www.secuobs.com/revue/news/437887.shtmlhttp://www.secuobs.com/revue/news/437887.shtml Secuobs.com : 2013-04-05 16:30:15 - threatpost The First Stop for Security News - Bitcoin may still be a virtual unknown quantity for most people, but the digital currency has not escaped the notice of attackers, many of whom are turning their attention to finding ways to use the system for their own gains The attacks against Bitcoin exchange Mt Gox and hack of Instawallet this week are the latest evidence, but now there is a piece of malware in circulation that is using Skype as a spreading mechanism and then using infected machines' processing power to mine Bitcoins read more http://www.secuobs.com/revue/news/437853.shtmlhttp://www.secuobs.com/revue/news/437853.shtml Secuobs.com : 2013-04-04 21:10:23 - threatpost The First Stop for Security News - Popular applications Skype and Dropbox fixed holes in their websites this week that could have allowed an attacker to gain control of users Facebook accounts In what s technically being referred to as an open direct vulnerability, both applications failed to validate sites before sending users and their access tokens to them read more http://www.secuobs.com/revue/news/437686.shtmlhttp://www.secuobs.com/revue/news/437686.shtml Secuobs.com : 2013-04-04 21:10:23 - threatpost The First Stop for Security News - Appropriately enough for the start of the baseball season, Microsoft is going to go 4-for-4 and release another set of critical Internet Explorer patches on Tuesday, the fourth consecutive month in which serious vulnerabilities in the browser are being addressed in Microsoft s Patch Tuesday monthly security updates read more http://www.secuobs.com/revue/news/437685.shtmlhttp://www.secuobs.com/revue/news/437685.shtml Secuobs.com : 2013-04-04 17:05:07 - threatpost The First Stop for Security News - As with any asset of monetary value, once said asset reaches a noteworthy level, cybercriminals interest is going to pique Such is the current situation with virtual currency Bitcoin, which hit a high of 142 yesterday and the value of all Bitcoins in circulation has soared to more than 1 billion read more http://www.secuobs.com/revue/news/437625.shtmlhttp://www.secuobs.com/revue/news/437625.shtml Secuobs.com : 2013-04-04 17:05:07 - threatpost The First Stop for Security News - The maintainers of the PostgreSQL database software have patched a security vulnerability, which, in some very limited circumstances, could be used to run arbitrary code on vulnerable servers The vulnerability, which affects versions 90, 91 and 92, also can be used to cause a denial-of-service by any remote attacker read more http://www.secuobs.com/revue/news/437624.shtmlhttp://www.secuobs.com/revue/news/437624.shtml Secuobs.com : 2013-04-04 04:23:45 - threatpost The First Stop for Security News - A report released Wednesday indicates an organization on average experiences a malware-related event every three minutes, often involving business-related spear phishing and targeting technology companies Those findings were included in a new report on advanced persistent threats released by researchers at the FireEye Malware Intelligence Lab and drawn from 89 million events the company's appliances gathered worldwide during the second half of 2012 read more http://www.secuobs.com/revue/news/437521.shtmlhttp://www.secuobs.com/revue/news/437521.shtml Secuobs.com : 2013-04-03 20:00:35 - threatpost The First Stop for Security News - Nearly a year since the Flashback Trojan surfaced and ultimately infected more than 600,000 Apple OS X computers, the author of the malware may haven been discovered read more http://www.secuobs.com/revue/news/437458.shtmlhttp://www.secuobs.com/revue/news/437458.shtml Secuobs.com : 2013-04-03 20:00:35 - threatpost The First Stop for Security News - Security-related policy or legislation is enacted and then enforced to protect corporate, government or military interests Civil organizations are often left flailing in the wind, fending for themselves with fewer IT resources and experience than a Middle America mom-and-pop operation Yet these non-governmental and not-for-profit organizations have tasked themselves with helping those targeted by lethal adversaries who aren t just after corporate secrets, but are out to deny people their freedom or, in some cases, their lives read more http://www.secuobs.com/revue/news/437457.shtmlhttp://www.secuobs.com/revue/news/437457.shtml Secuobs.com : 2013-04-03 17:42:11 - threatpost The First Stop for Security News - Hackers compromised the forum and game database of the massively multiplayer online game, The War Z, forcing the game s producer OP Productions to temporarily take the game and its forum offline read more http://www.secuobs.com/revue/news/437406.shtmlhttp://www.secuobs.com/revue/news/437406.shtml Secuobs.com : 2013-04-03 03:50:53 - threatpost The First Stop for Security News - California, which set the standard for data breach notifications nationwide, is again seeking to set a precedent by becoming the first state in the nation to require companies upon request disclose to California consumers the data they've collected and to whom it was shared during the past year They would be required to respond within 30 days and provide the report for free read more http://www.secuobs.com/revue/news/437276.shtmlhttp://www.secuobs.com/revue/news/437276.shtml Secuobs.com : 2013-04-02 22:27:21 - threatpost The First Stop for Security News - BaneChantMuch like malware that was discovered last year, a new Trojan has been reported that relies on detecting mouse clicks to evade sandbox analysis BaneChant masquerades as a Word document and incorporates advanced evasion techniques making it stealthier than its predecessor read more http://www.secuobs.com/revue/news/437228.shtmlhttp://www.secuobs.com/revue/news/437228.shtml Secuobs.com : 2013-04-02 21:27:31 - threatpost The First Stop for Security News - Mozilla has added a new privacy feature to Firefox that enables users to begin a new private browsing session in a separate tab while still running a normal session in other tabs Firefox 20 also includes patches for 11 critical security vulnerabilities read more http://www.secuobs.com/revue/news/437219.shtmlhttp://www.secuobs.com/revue/news/437219.shtml Secuobs.com : 2013-04-02 20:31:54 - threatpost The First Stop for Security News - Tibetan activists in China as well as those living in exile around the world are being targeted by dangerous malware that not only steals data from infected computers, but also has graduated to reporting location data from mobile devices for surveillance purposes read more http://www.secuobs.com/revue/news/437212.shtmlhttp://www.secuobs.com/revue/news/437212.shtml Secuobs.com : 2013-04-02 17:07:01 - threatpost The First Stop for Security News - The CIO of the US Army failed to put in place a comprehensive security program capable of protecting data stored on commercial mobile devices such as iPhones and Androids, leaving sensitive information in key Army installations exposed The Inspector General of the Department of Defense took the Army CIO to task in a new report, saying that the CIO did not implement an effective cybersecurity program for commercial mobile devices read more http://www.secuobs.com/revue/news/437151.shtmlhttp://www.secuobs.com/revue/news/437151.shtml Secuobs.com : 2013-04-01 21:13:18 - threatpost The First Stop for Security News - A handful of Apple developers have found their iMessage accounts the victim of what s being loosely referred to as a series of denial-of-service attacks Using rapid-fire AppleScript texts, attackers have been sending many messages at a time to about half a dozen iOS developers over the last week read more http://www.secuobs.com/revue/news/437006.shtmlhttp://www.secuobs.com/revue/news/437006.shtml Secuobs.com : 2013-04-01 20:20:41 - threatpost The First Stop for Security News - The call-center equivalent of network-based denial-of-service attacks, known as telephony denial-of-service TDoS , have targeted emergency services among other industries, enough to garner attention from the Department of Homeland Security, Federal Bureau of Investigation, Federal Communications Commission and others in an confidential alert memo, Krebs on Security reported read more http://www.secuobs.com/revue/news/436994.shtmlhttp://www.secuobs.com/revue/news/436994.shtml Secuobs.com : 2013-04-01 19:30:59 - threatpost The First Stop for Security News - Alma Whitten, the director of privacy at Google, is stepping down from that role and leaves behind her a complicated legacy in regards to user privacy Whitten has been the company's top product and engineering privacy official since 2010 and was at the helm as the company navigated a number of serious privacy scandals and controversies read more http://www.secuobs.com/revue/news/436982.shtmlhttp://www.secuobs.com/revue/news/436982.shtml Secuobs.com : 2013-04-01 15:21:04 - threatpost The First Stop for Security News - It s the ultimate what-if scenario What if an attacker could own all the customer premises equipment CPE doled out by ISPs such as routers and modems Would it be trivial with available scanning equipment and other tools to find vulnerable gear, and then modify and re-upload the firmware to be able do anything such as control Web traffic, launch DDoS attacks, or even disconnect large blocks of machines from the Internet read more http://www.secuobs.com/revue/news/436941.shtmlhttp://www.secuobs.com/revue/news/436941.shtml Secuobs.com : 2013-03-29 17:42:07 - threatpost The First Stop for Security News - Look out for email attachments offering better sex tips and news about newly developed Chinese stealth frigates, because they are loaded with malware, according to a Securelist report written by Kaspersky Lab expert, Ben Godwood read more http://www.secuobs.com/revue/news/436666.shtmlhttp://www.secuobs.com/revue/news/436666.shtml Secuobs.com : 2013-03-29 15:23:30 - threatpost The First Stop for Security News - Microsoft said it has received 70,000 reports this week of a new Trojan disguised as an Adobe Flash Player update that will change your browser s home page and redirect a Web session to an attacker s page There are several clues something is amiss, namely part of the GUI for the supposed Flash 11 update is written in Turkish, and there is no scroll bar on the EULA read more http://www.secuobs.com/revue/news/436635.shtmlhttp://www.secuobs.com/revue/news/436635.shtml Secuobs.com : 2013-03-28 21:16:35 - threatpost The First Stop for Security News - At least one group of cybercriminals has taken to Evernote, the popular cloud-based note-taking and data-sharing service, as a base of operations for a data stealing Trojan, according to TrendMicro threat response engineer Nikko Tamana read more http://www.secuobs.com/revue/news/436484.shtmlhttp://www.secuobs.com/revue/news/436484.shtml Secuobs.com : 2013-03-28 21:16:35 - threatpost The First Stop for Security News - Some spammers, looking to launder the dirty links they email you, are relying on the positive reputation of Google Translate to redirect victims to rogue websites Researchers at Barracuda Labs who maintain the company s spam honeypots have spotted a rash of illicit messages trying to beat reputation filters by using this tactic read more http://www.secuobs.com/revue/news/436483.shtmlhttp://www.secuobs.com/revue/news/436483.shtml Secuobs.com : 2013-03-28 19:39:55 - threatpost The First Stop for Security News - For some perspective on what 300 Gbps of traffic represents, let s just pretend that your company, as a potential customer, put this massive volume of bits and bytes in front of 20 of the leading Internet service providers Chances are, all but three or four will tell you Thanks, but no thanks, we can t handle your business read more http://www.secuobs.com/revue/news/436467.shtmlhttp://www.secuobs.com/revue/news/436467.shtml Secuobs.com : 2013-03-28 17:14:15 - threatpost The First Stop for Security News - Cisco Systems issued seven security updates yesterday, all of which patched vulnerabilities in the networking giant s internetwork operating system IOS , the software it deploys on the majority of its routers and network switches read more http://www.secuobs.com/revue/news/436397.shtmlhttp://www.secuobs.com/revue/news/436397.shtml Secuobs.com : 2013-03-28 17:14:15 - threatpost The First Stop for Security News - Chris WysopalDennis Fisher talks with Chris Wysopal of Veracode about his journey from teenage BBS junkie to member of the L0pht to respected security researcher Known as Weld Pond since his days at the L0pht, Chris also discussed his time at stake and how the L0pht's road trip to DC to testify before Congress almost went very wrong You are missing some Flash content that should appear here Perhaps your browser cannot display it, or maybe it did not initialize correctly read more http://www.secuobs.com/revue/news/436396.shtmlhttp://www.secuobs.com/revue/news/436396.shtml Secuobs.com : 2013-03-28 15:37:51 - threatpost The First Stop for Security News - There is a critical vulnerability in several current versions of the BIND nameserver software that could allow an attacker to knock vulnerable DNS servers offline or compromise other applications running on those machines The bug is present in several versions of the ubiquitous BIND software and the maintainers of the application have released a patch for it that they recommend users install as soon as possible read more http://www.secuobs.com/revue/news/436376.shtmlhttp://www.secuobs.com/revue/news/436376.shtml Secuobs.com : 2013-03-27 22:06:32 - threatpost The First Stop for Security News - So you thought the 100 Gbps distributed denial-of-service attacks against US banks were big Ongoing attacks against Spamhaus have three times the fury and have affected unrelated online services as collateral damage read more http://www.secuobs.com/revue/news/436206.shtmlhttp://www.secuobs.com/revue/news/436206.shtml Secuobs.com : 2013-03-27 20:15:31 - threatpost The First Stop for Security News - The Government Communications Headquarters GCHQ , one of Britain s top intelligence agencies, has admitted it sometimes emails passwords in plain text to those who apply for jobs on its site It was revealed in the last week that those who apply for jobs through the GCHQ s recruitment portal are emailed their password in plain text after filling out the forgotten password feature on the site read more http://www.secuobs.com/revue/news/436181.shtmlhttp://www.secuobs.com/revue/news/436181.shtml Secuobs.com : 2013-03-27 18:31:37 - threatpost The First Stop for Security News - With companies flocking to cloud services such as Amazon Simple Storage Service S3 to store and serve static content on the cheap, naturally they re making simple mistakes in doing so and naturally, a savvy attacker is able to cash in read more http://www.secuobs.com/revue/news/436152.shtmlhttp://www.secuobs.com/revue/news/436152.shtml Secuobs.com : 2013-03-27 15:59:09 - threatpost The First Stop for Security News - China has become the go-to bogeyman behind every cyber attack or malware campaign, but if you're looking for the most malicious hosting providers on the Web, you won't find any of the top 10 in China In fact, the United States and Russia have many more bad hosting providers in the top 20 than China does read more http://www.secuobs.com/revue/news/436100.shtmlhttp://www.secuobs.com/revue/news/436100.shtml Secuobs.com : 2013-03-27 14:20:24 - threatpost The First Stop for Security News - The bulk of unknown malware is being delivered to systems via Web-based attacks, proxies and FTP sessions, according to a study released by Palo Alto Networks this week read more http://www.secuobs.com/revue/news/436072.shtmlhttp://www.secuobs.com/revue/news/436072.shtml Secuobs.com : 2013-03-26 20:43:25 - threatpost The First Stop for Security News - Draped across the automobile s front license plate is a printout, attached like it came off a roll of Scotch Tape On the printout is a SQL statement probably the last thing anyone would expect to see as a hood ornament No one knows where the photograph came from or whether someone was trying to be funny, or legitimately trying to compromise the backend system controlling the traffic camera in the same photo But one thing is for sure, this clever stunt has helped shed light on the insecurity of control systems read more http://www.secuobs.com/revue/news/435947.shtmlhttp://www.secuobs.com/revue/news/435947.shtml Secuobs.com : 2013-03-26 19:52:34 - threatpost The First Stop for Security News - Google Chrome 26, the latest version of the company's browser, is out and it contains a number of security patches, most notably a fix for a high-priority use-after-free vulnerability in the Web Audio component of the browser read more http://www.secuobs.com/revue/news/435938.shtmlhttp://www.secuobs.com/revue/news/435938.shtml Secuobs.com : 2013-03-26 19:01:37 - threatpost The First Stop for Security News - LinkedIn has patched a number of exploitable vulnerabilities that could have led to phishing attacks, malware infections and the loss of credentials for users of the social network for business professionals read more http://www.secuobs.com/revue/news/435925.shtmlhttp://www.secuobs.com/revue/news/435925.shtml Secuobs.com : 2013-03-26 15:42:04 - threatpost The First Stop for Security News - Android attacks have become all the rage in the last year or two, and targeted attacks against political activists in Tibet, Iran and other countries also have been bubbling up to the surface more and more often lately Now those two trends have converged with the discovery of a targeted attack campaign that's going after Tibetan and Uyghur activists with a spear-phishing message containing a malicious APK file Researchers say the attack appears to be coming from Chinese sources read more http://www.secuobs.com/revue/news/435862.shtmlhttp://www.secuobs.com/revue/news/435862.shtml Secuobs.com : 2013-03-26 03:53:37 - threatpost The First Stop for Security News - A new variant of AndroidEnesoluty, the Android data-stealing Trojan that spreads through spam messages, has recently surfaced in Japan This time the malware is reportedly being spread through a malicious app, Lime Pop, that disguises itself as a popular game read more http://www.secuobs.com/revue/news/435777.shtmlhttp://www.secuobs.com/revue/news/435777.shtml Secuobs.com : 2013-03-25 21:52:03 - threatpost The First Stop for Security News - It appears that a spear phishing campaign was the genesis for the wiper malware infections that ultimately knocked several prominent South Korean banks and broadcasters offline last week, according to a malware analysis performed by researchers from the Finnish cybersecurity firm F-Secure read more http://www.secuobs.com/revue/news/435729.shtmlhttp://www.secuobs.com/revue/news/435729.shtml Secuobs.com : 2013-03-25 21:00:43 - threatpost The First Stop for Security News - When nations eventually adopt ground rules for conflict in cyberspace as they apply in an actual kinetic war, the Tallinn Manual on the International Law Applicable to Cyber Warfare, is likely to be their key reference material in doing so read more http://www.secuobs.com/revue/news/435725.shtmlhttp://www.secuobs.com/revue/news/435725.shtml Secuobs.com : 2013-03-25 20:10:36 - threatpost The First Stop for Security News - With less than three full months gone in 2013, Facebook, Apple and Microsoft all have admitted publicly to serious security breaches, something that would have seemed like an elaborate practical joke just a couple of years ago But the times and the climate have changed, and if you needed more evidence of these facts, it arrived last week in the form of the first Microsoft Transparency Report read more http://www.secuobs.com/revue/news/435713.shtmlhttp://www.secuobs.com/revue/news/435713.shtml Secuobs.com : 2013-03-25 20:10:36 - threatpost The First Stop for Security News - A new variant of AndroidEnesolutely, the Android data-stealing Trojan that spreads through spam messages, has recently surfaced in Japan This time the malware is reportedly being spread through a malicious app, Lime Pop, that disguises itself as a popular game read more http://www.secuobs.com/revue/news/435712.shtmlhttp://www.secuobs.com/revue/news/435712.shtml Secuobs.com : 2013-03-25 16:06:25 - threatpost The First Stop for Security News - Hardly a week goes by without some new vulnerability in WordPress or one of its components showing up on a mailing list or in a security advisory This week's first entrant is a newly disclosed flaw in a plugin that displays ad banners on WordPress sites, a bug that enables an attacker to inject malicious Javascript or HTML code on any vulnerable site read more http://www.secuobs.com/revue/news/435667.shtmlhttp://www.secuobs.com/revue/news/435667.shtml Secuobs.com : 2013-03-25 14:29:19 - threatpost The First Stop for Security News - Dino Dai ZoviDennis Fisher talks with security researcher Dino Dai Zovi about how he got his start in security, the value of learning by doing, how he got root on his high school's server and why his shellcode for a Windows vulnerability ended up in one of the more infamous Internet worms of the last 10 years You are missing some Flash content that should appear here Perhaps your browser cannot display it, or maybe it did not initialize correctly read more http://www.secuobs.com/revue/news/435645.shtmlhttp://www.secuobs.com/revue/news/435645.shtml Secuobs.com : 2013-03-23 02:58:52 - threatpost The First Stop for Security News - Less than a day after Apple announced a new two-factor authentication to better protect Apple ID and iCloud accounts, the company was scrambling to fix another major security hole with its own password reset tool read more http://www.secuobs.com/revue/news/435413.shtmlhttp://www.secuobs.com/revue/news/435413.shtml Secuobs.com : 2013-03-22 17:51:06 - threatpost The First Stop for Security News - Apple has implemented a deadline for when it will reject apps that access devices unique device identifier numbers, or UDIDs Apple has been phasing out the 40-character string of letters and numbers over the last year, yet according to a post on Apple s Developers site yesterday, this appears to be the final word Any new apps or app updates that access UDIDs will not be accepted beginning May 1 read more http://www.secuobs.com/revue/news/435308.shtmlhttp://www.secuobs.com/revue/news/435308.shtml Secuobs.com : 2013-03-22 16:58:24 - threatpost The First Stop for Security News - Two message boards used by the Sanny malware as a command-and-control channel have been shut down by the Korea Information Security Agency in conjunction with security company FireEye read more http://www.secuobs.com/revue/news/435296.shtmlhttp://www.secuobs.com/revue/news/435296.shtml Secuobs.com : 2013-03-22 15:20:41 - threatpost The First Stop for Security News - Apple has introduced a new two-factor authentication system designed to help protect users' iTunes and App Store accounts and prevent attackers or unauthorized users from taking over users' accounts The system is similar to the one that Google has implemented for Gmail, utilizing verification codes sent via SMS read more http://www.secuobs.com/revue/news/435271.shtmlhttp://www.secuobs.com/revue/news/435271.shtml Secuobs.com : 2013-03-21 22:11:16 - threatpost The First Stop for Security News - The House Foreign Affairs Subcommittee on Europe, Eurasia, and Emerging Threats typically is more concerned with economics and political issues than cyber attacks, but the members spent this morning in a hearing trying to come up with an answer to a fairly straightforward, but thorny question What consequences are serious and meaningful enough that they will deter US enemies from infiltrating the country's networks read more http://www.secuobs.com/revue/news/435163.shtmlhttp://www.secuobs.com/revue/news/435163.shtml Secuobs.com : 2013-03-21 21:16:16 - threatpost The First Stop for Security News - The Department of Homeland Security and the ICS-CERT issued an advisory yesterday warning of serious vulnerabilities in Siemens industrial control software deployed in a number of industries including water, gas and oil, and chemical read more http://www.secuobs.com/revue/news/435154.shtmlhttp://www.secuobs.com/revue/news/435154.shtml Secuobs.com : 2013-03-21 18:40:08 - threatpost The First Stop for Security News - Disruptions to businesses in South Korea continue today after hackers used wiper malware to take a number of banks and television networks offline yesterday A number of financial systems at a half-dozen banks and production systems inside South Korea s major television networks remain down, kicking off speculation as to who is behind the attacks and how they got in read more http://www.secuobs.com/revue/news/435094.shtmlhttp://www.secuobs.com/revue/news/435094.shtml Secuobs.com : 2013-03-21 16:57:16 - threatpost The First Stop for Security News - Microsoft received more than 11,000 requests for user information or content data from law enforcement agencies in the United States last year and supplied some user content in more than 1,500 of those cases Overall, the company received more than 70,000 requests from law enforcement agencies worldwide and gave up some user content in 22 percent of those cases read more http://www.secuobs.com/revue/news/435057.shtmlhttp://www.secuobs.com/revue/news/435057.shtml Secuobs.com : 2013-03-21 16:04:50 - threatpost The First Stop for Security News - Wade WilliamsonDennis Fisher talks with Wade Williamson of Palo Alto Networks about the use of compromised FTP accounts in targeted attacks and malware campaigns, and how attackers are adapting their techniques You are missing some Flash content that should appear here Perhaps your browser cannot display it, or maybe it did not initialize correctly read more http://www.secuobs.com/revue/news/435038.shtmlhttp://www.secuobs.com/revue/news/435038.shtml Secuobs.com : 2013-03-21 02:00:25 - threatpost The First Stop for Security News - The Chameleon botnet continues to steal millions of dollars from online advertisers through fraudulent clicks made by malware read more http://www.secuobs.com/revue/news/434923.shtmlhttp://www.secuobs.com/revue/news/434923.shtml Secuobs.com : 2013-03-20 23:40:38 - threatpost The First Stop for Security News - Google s announcement that its Google Public DNS resolution service now supports DNSSEC is being applauded, but experts caution that despite Google s high profile, this only puts a slight dent in a larger issue I think it s great that Google is getting involved and supporting validation for DNSSEC it s a terrific move forward, said Ram Mohan, CTO at Afilias, a managed DNS provider and registry service It further establishes DNSSEC going mainstream It used to be a technology running the risk of becoming isolated Now it s much more of a mainstream technology read more http://www.secuobs.com/revue/news/434900.shtmlhttp://www.secuobs.com/revue/news/434900.shtml Secuobs.com : 2013-03-20 21:58:41 - threatpost The First Stop for Security News - The other Korea s specter loomed large among speculators and fingers pointers Wednesday morning when reports surfaced that the networks of several prominent South Korean banks and broadcasters dropped offline read more http://www.secuobs.com/revue/news/434885.shtmlhttp://www.secuobs.com/revue/news/434885.shtml Secuobs.com : 2013-03-20 21:07:07 - threatpost The First Stop for Security News - Attackers have long had an affinity for having their way with Android phones, but the hammer seems to have really come down over the last few months when it comes to devices manufactured by Samsung read more http://www.secuobs.com/revue/news/434880.shtmlhttp://www.secuobs.com/revue/news/434880.shtml Secuobs.com : 2013-03-20 20:16:33 - threatpost The First Stop for Security News - Information security is littered with bad analogies And none sounds sillier than a watering hole attack, which plays off the tactic that dominant animals use when stalking food by loitering at a watering hole Rather than chase their prey, a lion will wait for prey to come to it Hackers are doing the same thing to a great degree of success Rather than using a spear phishing email campaign to lure prey to them, hackers are infecting vulnerable sites of a common interest to their targets, and then redirecting them to malware and more badness read more http://www.secuobs.com/revue/news/434858.shtmlhttp://www.secuobs.com/revue/news/434858.shtml Secuobs.com : 2013-03-20 19:25:56 - threatpost The First Stop for Security News - Researchers have uncovered a long-term cyber-espionage campaign that used a combination of legitimate software packages and commodity malware tools to target a variety of heavy industry, government intelligence agencies and political activists Known as the TeamSpy crew because of its affinity for using the legitimate TeamViewer application as part of its toolset, the attackers may have been active for as long as 10 years, researchers say read more http://www.secuobs.com/revue/news/434847.shtmlhttp://www.secuobs.com/revue/news/434847.shtml Secuobs.com : 2013-03-20 17:44:10 - threatpost The First Stop for Security News - UPDATE The default Wi-Fi Calling feature on T-Mobile devices that lets milllions of Android users make phone calls over a wireless Internet connection contained a vulnerability that could have been exploited to perform man-in-the-middle MiTM attacks read more http://www.secuobs.com/revue/news/434802.shtmlhttp://www.secuobs.com/revue/news/434802.shtml Secuobs.com : 2013-03-20 15:17:33 - threatpost The First Stop for Security News - A controversial Internet scanning project has come under fire for illegally accessing and running code on remote machines The Internet Census 2012 project, revealed Sunday in a post to Seclistsorg, discovered 420,000 embedded devices accessible using default credentials The unnamed researcher behind the project then used the devices as a botnet to scan most of the IPv4 address space read more http://www.secuobs.com/revue/news/434769.shtmlhttp://www.secuobs.com/revue/news/434769.shtml Secuobs.com : 2013-03-20 03:31:04 - threatpost The First Stop for Security News - The US Justice Department on Tuesday joined a chorus of privacy advocates supporting changes to a 1986 law that currently allows the government to review some emails without a warrant The Electronic Communications Privacy Act was created before commercial e-mail existed, let alone became a primary form of communications As currently written, the ECPA allows US law enforcement to read someone's emails with just a subpeona from a federal prosecutor if the email is older than six months or is already opened All others require a warrant from a judge read more http://www.secuobs.com/revue/news/434676.shtmlhttp://www.secuobs.com/revue/news/434676.shtml Secuobs.com : 2013-03-19 21:45:56 - threatpost The First Stop for Security News - With antiquated gear running the country s industrial control systems that oversee critical infrastructure, it s no shock attackers targeting SCADA networks do their fair share of reconnaissance looking for weak spots in that equipment read more http://www.secuobs.com/revue/news/434633.shtmlhttp://www.secuobs.com/revue/news/434633.shtml Secuobs.com : 2013-03-19 20:49:21 - threatpost The First Stop for Security News - PwniumDepending upon your perspective, the third iteration of Google Pwnium at this year's CanSecWest conference was either a mild failure or a huge success No researchers were able to come up with a full compromise of the Chrome OS, the target in this year's contest, but Google said this week that it did receive a partial qualifying entry from one researcher and awarded him 40,000 for his efforts read more http://www.secuobs.com/revue/news/434571.shtmlhttp://www.secuobs.com/revue/news/434571.shtml Secuobs.com : 2013-03-19 20:49:21 - threatpost The First Stop for Security News - Ruby on Rails The developers of Ruby on Rails, the popular web app framework, released four new versions of the product yesterday, complete with fixes for a series of vulnerabilities that could have lead to denial of service attacks and XSS injections Four vulnerabilities in total are addressed in versions 3213, 3112 and 2318 of Rails, according to a post to the company s blog on Monday All versions are impacted by one or more of these security issues, according to the post read more http://www.secuobs.com/revue/news/434570.shtmlhttp://www.secuobs.com/revue/news/434570.shtml Secuobs.com : 2013-03-19 20:49:21 - threatpost The First Stop for Security News - The default Wi-Fi Calling feature on T-Mobile devices that lets milllions of Android users make phone calls over a wireless Internet connection contains a vulnerability that could be exploited to perform man-in-the-middle MiTM attacks read more http://www.secuobs.com/revue/news/434569.shtmlhttp://www.secuobs.com/revue/news/434569.shtml Secuobs.com : 2013-03-19 20:49:21 - threatpost The First Stop for Security News - Apple has patched a handful of security vulnerabilities in iOS, including a bug that was used for the latest iPhone jailbreak tool, called Evasion Apple iOS 613 has patches for six vulnerabilities, including the screen lock bypass bug and a flaw in WebKit that can be used to execute arbitrary code read more http://www.secuobs.com/revue/news/434568.shtmlhttp://www.secuobs.com/revue/news/434568.shtml Secuobs.com : 2013-03-18 21:52:04 - threatpost The First Stop for Security News - Researchers and attackers alike are quickly discovering you don t need a fancy Java or Flash exploit to beat application sandboxes Exploiting an unpatched kernel vulnerability in the underlying operating system, one that s likely to stay unpatched for a long time, will do just fine read more http://www.secuobs.com/revue/news/434344.shtmlhttp://www.secuobs.com/revue/news/434344.shtml Secuobs.com : 2013-03-18 21:00:26 - threatpost The First Stop for Security News - The United States Government Accountability Office GAO believes that serious weaknesses remain in the ways that the Internal Revenue Service handles its internal network, problems that could directly implicate taxpayer data according to a report the regulatory group released on Friday read more http://www.secuobs.com/revue/news/434338.shtmlhttp://www.secuobs.com/revue/news/434338.shtml Secuobs.com : 2013-03-18 18:25:20 - threatpost The First Stop for Security News - The Web browser is the primary portal through which the vast majority of connected users access and interact with the Internet Each browser has its own security and privacy settings and those settings have an enormous impact on the nature of the relationship between users data and the services they encounter online Google s Chrome browser has extensive, easy to navigate privacy settings that let users manage everything from digital certificates to location tracking to Do Not Track requests read more http://www.secuobs.com/revue/news/434293.shtmlhttp://www.secuobs.com/revue/news/434293.shtml Secuobs.com : 2013-03-18 17:33:23 - threatpost The First Stop for Security News - Additional details and code demonstrating a possible security vulnerability in Java were released this morning by a Polish security research company, bringing to a head a three-week long debate between the researcher and Oracle over whether the issue is indeed a vulnerability or an allowed behavior in Java read more http://www.secuobs.com/revue/news/434279.shtmlhttp://www.secuobs.com/revue/news/434279.shtml Secuobs.com : 2013-03-18 17:33:23 - threatpost The First Stop for Security News - Five years ago, a pair of security researchers write a book called Exploiting Online Games in which they described a number of ways in which attackers could take advantage of weaknesses in the protection systems for various gaming platforms Now, with online gaming having emerged as a massive business, other researchers have picked up the ball and begun finding serious flaws The latest vulnerability to be disclosed is in EA's Origin online game-delivery system, which researchers from ReVuln have shown can be exploited remotely to run malicious code on users' machines read more http://www.secuobs.com/revue/news/434278.shtmlhttp://www.secuobs.com/revue/news/434278.shtml Secuobs.com : 2013-03-15 20:47:16 - threatpost The First Stop for Security News - Third-party applications accounted for a whopping percentage of vulnerabilities last year, many more than security flaws found in Microsoft programs according to a report released this week by Danish vulnerability research firm Secunia read more http://www.secuobs.com/revue/news/433869.shtmlhttp://www.secuobs.com/revue/news/433869.shtml Secuobs.com : 2013-03-15 19:08:10 - threatpost The First Stop for Security News - The Ramnit malware family has been given a facelift with new anti-detection capabilities, a troubleshooting module, as well as enhanced encryption and malicious payloads read more http://www.secuobs.com/revue/news/433852.shtmlhttp://www.secuobs.com/revue/news/433852.shtml Secuobs.com : 2013-03-15 16:01:20 - threatpost The First Stop for Security News - Apple on Thursday released a large batch of security fixes for its OS X operating system, one of which patches a flaw that allowed Java Web Start applications to run even when users had Java disabled in the browser OS X 1083 fixes 21 total vulnerabilities, and also includes a new version of the malware removal tool for Apple machines read more http://www.secuobs.com/revue/news/433806.shtmlhttp://www.secuobs.com/revue/news/433806.shtml Secuobs.com : 2013-03-15 15:11:36 - threatpost The First Stop for Security News - A Reuters social media editor on Thursday was charged with helping hackers break into the Tribune Co's network shortly after he was fired from a Sacramento television station in Fall 2010 A US Eastern District grand jury in Sacramento handed down a three-count indictment against Matthew Keys, 26, of Secaucas, NJ, for conspiracy to transmit information to damage a protected computer and transmitting or attempting to transmit that information The combined counts carry a potential penalty of 25 years' imprisonment and 750,000 in fines read more http://www.secuobs.com/revue/news/433785.shtmlhttp://www.secuobs.com/revue/news/433785.shtml Secuobs.com : 2013-03-15 03:39:20 - threatpost The First Stop for Security News - A Reuters social media editor on Thursday was charged with helping hackers break into the Tribune Co's network shortly after he was fired from a Sacramento television station in Fall 2010 A US Eastern District grand jury in Sacramento handed down a three-count indictment against Matthew Keys, 26, of Secaucas, NJ, for conspiracy to transmit information to damage a protected computer and transmitting or attempting to transmit that information The combined counts carry a potential penalty of 25 years' imprisonment and 750,000 in fines read more http://www.secuobs.com/revue/news/433679.shtmlhttp://www.secuobs.com/revue/news/433679.shtml Secuobs.com : 2013-03-14 22:11:37 - threatpost The First Stop for Security News - It's been more than 25 years since Ron Rivest invented his RC4 stream cipher, and after all that time it's still being used widely, which is something of an achievement in the crypto world However, for more than 15 years researchers have known about a weakness in RC4 that could enable an attacker to decrypt the keystream Now, a cryptographer has published an attack that exploits that vulnerability and causes serious problems with TLS implementations read more http://www.secuobs.com/revue/news/433635.shtmlhttp://www.secuobs.com/revue/news/433635.shtml Secuobs.com : 2013-03-14 18:52:36 - threatpost The First Stop for Security News - Attackers with a control infrastructure based in China are leveraging the same vulnerability exploited by Miniduke to attack Uyghur and Tibetan activists with new exploits read more http://www.secuobs.com/revue/news/433593.shtmlhttp://www.secuobs.com/revue/news/433593.shtml Secuobs.com : 2013-03-14 18:03:09 - threatpost The First Stop for Security News - The website of the National Vulnerability Database NVD remains down today, six days after malware was reportedly found on its servers read more http://www.secuobs.com/revue/news/433570.shtmlhttp://www.secuobs.com/revue/news/433570.shtml Secuobs.com : 2013-03-14 17:15:14 - threatpost The First Stop for Security News - Google, which has been a favorite target of privacy advocates for the last few years, has taken another step that's unlikely to endear the company to that crowd or Android users The company has begun removing ad-blocking apps from the Google Play Android app market, apparently for violating the terms of service read more http://www.secuobs.com/revue/news/433548.shtmlhttp://www.secuobs.com/revue/news/433548.shtml Secuobs.com : 2013-03-14 15:41:14 - threatpost The First Stop for Security News - More rhetoric is coming out of Washington regarding the use of malware as an auxiliary weapon to bombs and bullets National Security Agency leader Gen Keith Alexander told a House Armed Services Committee yesterday that his new Cyber Command will be ready to retaliate should the United States critical infrastructure come under cyberattack read more http://www.secuobs.com/revue/news/433511.shtmlhttp://www.secuobs.com/revue/news/433511.shtml Secuobs.com : 2013-03-14 02:35:56 - threatpost The First Stop for Security News - The top credit bureaus have admitted someone accessed prominent Americans' private data by filling out bogus requests via a Web site used by millions of consumers to access free annual credit reports read more http://www.secuobs.com/revue/news/433396.shtmlhttp://www.secuobs.com/revue/news/433396.shtml Secuobs.com : 2013-03-13 21:43:28 - threatpost The First Stop for Security News - Search giant Google has posted a set of new informational videos and articles to help website owners recover their sites after they ve been hacked read more http://www.secuobs.com/revue/news/433352.shtmlhttp://www.secuobs.com/revue/news/433352.shtml Secuobs.com : 2013-03-13 19:57:18 - threatpost The First Stop for Security News - A new watering hole attack has been reported, this one targeting two government-related websites based in Israel that have been injected with malware exploiting a six-month-old vulnerability in Internet Explorer read more http://www.secuobs.com/revue/news/433331.shtmlhttp://www.secuobs.com/revue/news/433331.shtml Secuobs.com : 2013-03-13 19:57:18 - threatpost The First Stop for Security News - Google has agreed to pay a 7 million settlement to several dozen US states as part of an agreement of charges that the company was collecting private user data from WiFi hotspots while its Street View cars were driving around taking photos in various locations read more http://www.secuobs.com/revue/news/433330.shtmlhttp://www.secuobs.com/revue/news/433330.shtml Secuobs.com : 2013-03-13 02:31:36 - threatpost The First Stop for Security News - A Tennessee-based footwear and apparel company has filed a 13 million lawsuit against Visa for what it considers random, subjective penalties for being out of compliance with the Payment Card Industry PCI standard the credit card company regulates Last week Nashville-based Genesco, which operates 2,440 retail stores such as Journeys and Lids Locker Room throughout the North America and Europe, sued Visa USA Inc, Visa Inc and Visa International Service Association to recoup almost 133 million levied against them following a 2010 data breach read more http://www.secuobs.com/revue/news/433162.shtmlhttp://www.secuobs.com/revue/news/433162.shtml Secuobs.com : 2013-03-12 21:25:28 - threatpost The First Stop for Security News - Many versions of SWFUpload an applet that combines Flash and JavaScript that s used in millions of websites, including WordPress sites are vulnerable to content spoofing and a cross-site scripting vulnerability that could lead to the takeover of accounts, according to reports this week read more http://www.secuobs.com/revue/news/433078.shtmlhttp://www.secuobs.com/revue/news/433078.shtml Secuobs.com : 2013-03-12 20:24:02 - threatpost The First Stop for Security News - For the second month in a row, Microsoft has released a cumulative update for Internet Explorer, patching a number of critical remote code execution vulnerabilities in the browser, including one being exploited in the wild It also patched a serious kernel mode driver vulnerability that could enable attackers to gain root access to a machine using a malicious USB drive, a la Stuxnet read more http://www.secuobs.com/revue/news/433061.shtmlhttp://www.secuobs.com/revue/news/433061.shtml Secuobs.com : 2013-03-12 20:24:02 - threatpost The First Stop for Security News - Adobe on Tuesday fixed four critical vulnerabilities in its Flash software, all of which could be used by attackers to execute code on vulnerable machines read more http://www.secuobs.com/revue/news/433060.shtmlhttp://www.secuobs.com/revue/news/433060.shtml Secuobs.com : 2013-03-12 16:47:28 - threatpost The First Stop for Security News - Politicians, security researchers and others involved in the fight against cybercrime often compare the situation to efforts to combat traditional organized crime Some of the tricks and tactics are comparable, and so are the motives, but there s one major difference between the two groups Cybercriminals have virtually no fear of being caught The chances of a cybercriminal being caught, prosecuted and actually serving time in prison are incredibly small, especially in relation to the volume of cybercrime activity occurring today read more http://www.secuobs.com/revue/news/432984.shtmlhttp://www.secuobs.com/revue/news/432984.shtml Secuobs.com : 2013-03-11 20:21:23 - threatpost The First Stop for Security News - Homeland Security s Computer Emergency Response Team is warning today that some printers manufactured by Hewlett-Packard, including 10 of its LaserJet Professional printers, have a security vulnerability that could allow an attacker to remotely access data read more http://www.secuobs.com/revue/news/432808.shtmlhttp://www.secuobs.com/revue/news/432808.shtml Secuobs.com : 2013-03-11 20:21:23 - threatpost The First Stop for Security News - Metasploit today released an exploit module for a serious vulnerability in Honeywell industrial control system software used to manage everything from HVAC and building access systems, to energy and facilities management processes read more http://www.secuobs.com/revue/news/432807.shtmlhttp://www.secuobs.com/revue/news/432807.shtml Secuobs.com : 2013-03-11 18:40:40 - threatpost The First Stop for Security News - Researchers at Kaspersky Lab and CrySys Lab have discovered files buried inside a MiniDuke command and control server that indicate the presence of a Web-based facet of the campaign that initially targeted government agencies, primarily in Europe read more http://www.secuobs.com/revue/news/432786.shtmlhttp://www.secuobs.com/revue/news/432786.shtml Secuobs.com : 2013-03-11 16:20:24 - threatpost The First Stop for Security News - Scenes from CanSecWest 2013 VIEW SLIDESHOW Scenes from CanSecWest 2013 The CanSecWest security conference in Vancouver last week included technical presentations on bypassing ASLR and DEP and the intricacies of Android research, as well as a fascinating talk on the red team exercises Facebook's security team runs We put together some scenes from the show and Vancouver itself read more http://www.secuobs.com/revue/news/432744.shtmlhttp://www.secuobs.com/revue/news/432744.shtml Secuobs.com : 2013-03-09 04:55:49 - threatpost The First Stop for Security News - Apple has fixed several App Store security issues that first arose last summer, but it hasn't explained why it took so long to start encrypting communications using public Wi-Fi networks A Google researcher working on his own time discovered in July 2012 that Apple was serving up data over an unencrypted HTTP connection, leaving its Apple App Store customers open to attacks from anyone using the same public network Six months later, the company finally flipped on the encryption read more http://www.secuobs.com/revue/news/432481.shtmlhttp://www.secuobs.com/revue/news/432481.shtml Secuobs.com : 2013-03-08 22:39:20 - threatpost The First Stop for Security News - The resumption this week of distributed denial of service attacks against major US banks brought not only more cost and disruption to financial institutions trying keep online services available, but it also raised new questions about the funding and true motives behind the attacks read more http://www.secuobs.com/revue/news/432440.shtmlhttp://www.secuobs.com/revue/news/432440.shtml Secuobs.com : 2013-03-08 20:57:32 - threatpost The First Stop for Security News - VANCOUVER--Within less than 24 hours of the vulnerabilities being used and disclosed to them, both Mozilla and Google have issued patches for flaws employed by participants in this week's Pwn2Own contest at CanSecWest here read more http://www.secuobs.com/revue/news/432416.shtmlhttp://www.secuobs.com/revue/news/432416.shtml Secuobs.com : 2013-03-08 20:08:29 - threatpost The First Stop for Security News - In late February, Facebook forged a partnership with four of its most prolific data brokers in order to more accurately target users with relevant advertisements read more http://www.secuobs.com/revue/news/432403.shtmlhttp://www.secuobs.com/revue/news/432403.shtml Secuobs.com : 2013-03-08 19:20:51 - threatpost The First Stop for Security News - Two bills introduced in Texas this week could refine mobile privacy in the state and tweak how law enforcement can request sensitive information from cell phones going forward read more http://www.secuobs.com/revue/news/432394.shtmlhttp://www.secuobs.com/revue/news/432394.shtml Secuobs.com : 2013-03-08 17:39:49 - threatpost The First Stop for Security News - Adrian StoneDennis Fisher talks with Adrian Stone, the head of security response at BlackBerry, about the new security model in BlackBerry 10, the partition between private and work data and the challenges of dealing with app developers who might not know a whole lot about security or privacy You are missing some Flash content that should appear here Perhaps your browser cannot display it, or maybe it did not initialize correctly read more http://www.secuobs.com/revue/news/432360.shtmlhttp://www.secuobs.com/revue/news/432360.shtml Secuobs.com : 2013-03-08 12:54:45 - threatpost The First Stop for Security News - VANCOUVER--When Facebook announced last month that its corporate infrastructure had been compromised through a watering-hole attack against several of its employees, it was major news, both because of the attack itself and because the company had come out and owned up to it The interesting thing, however, is that this was not the first major problem that the Facebook incident response team had handled In fact it was the third one in less than a year read more http://www.secuobs.com/revue/news/432297.shtmlhttp://www.secuobs.com/revue/news/432297.shtml Secuobs.com : 2013-03-08 03:00:41 - threatpost The First Stop for Security News - Patch TuesdaySoftware giant Microsoft plans to ship seven bulletins in the March 2013 edition of Patch Tuesday Four of the bulletins are receiving high-severity, critical ratings Three of the four critically rated bulletins that affect Microsoft Windows, Internet Explorer, Silverlight, Office, and Server Software could lead to remote code execution while the final critically rated bulletin could allow for privilege elevations read more http://www.secuobs.com/revue/news/432238.shtmlhttp://www.secuobs.com/revue/news/432238.shtml Secuobs.com : 2013-03-07 22:13:06 - threatpost The First Stop for Security News - No real surprise that F-Secure s fourth quarter threat report further accentuated the all-but-definite-reality that there is a direct correlation between a platform s market share and the volume of threats targeting it read more http://www.secuobs.com/revue/news/432206.shtmlhttp://www.secuobs.com/revue/news/432206.shtml Secuobs.com : 2013-03-07 22:13:06 - threatpost The First Stop for Security News - Patch TuesdaySoftware giant Microsoft plans to ship seven bulletins in the March 2013 edition of Patch Tuesday Four of the bulletins are receiving high-severity, critical ratings Three of the four critically rated bulletins that affect Microsoft Windows, Internet Explorer, Silverlight, Office, and Server Software could lead to remote code execution while the final critically rated bulletin could allow for privilege elevations read more http://www.secuobs.com/revue/news/432205.shtmlhttp://www.secuobs.com/revue/news/432205.shtml Secuobs.com : 2013-03-07 22:13:06 - threatpost The First Stop for Security News - VANCOUVER--Finding and exploiting new vulnerabilities in the major browsers has become a difficult exercise for security researchers, thanks to the exploit mitigations, sandboxes and other protections that Microsoft, Google and Mozilla have added in the last few years The same has become true of Adobe Flash, but difficult is not the same as impossible, as the contestants at the Pwn2Own contest here have shown read more http://www.secuobs.com/revue/news/432204.shtmlhttp://www.secuobs.com/revue/news/432204.shtml Secuobs.com : 2013-03-07 18:45:42 - threatpost The First Stop for Security News - The OAuth keys and secrets that official Twitter applications use to access users Twitter accounts have been leaked in a post to Github this morning read more http://www.secuobs.com/revue/news/432124.shtmlhttp://www.secuobs.com/revue/news/432124.shtml Secuobs.com : 2013-03-07 03:25:33 - threatpost The First Stop for Security News - VANCOUVER--The Pwn2Own contest has evolved in many ways over the years, from new rules to new targets to larger prizes, but perhaps the one thing that has changed the most is that the researchers who show up here every year hoping to go home with a bag full of money are having to spend more and more time finding and exploiting vulnerabilities in the browsers and plug-ins in play The research team at VUPEN, which successfully compromised Internet Explorer 10 on Windows 8 spent several months finding the flaws they used and writing the expoits read more http://www.secuobs.com/revue/news/431983.shtmlhttp://www.secuobs.com/revue/news/431983.shtml Secuobs.com : 2013-03-07 01:58:52 - threatpost The First Stop for Security News - The professional networking site LinkedIn won a class-action lawsuit before it even went to trial after a judge this week dismissed claims from two premium users who maintained the company failed to provide the level of data security outlined in its privacy policy read more http://www.secuobs.com/revue/news/431972.shtmlhttp://www.secuobs.com/revue/news/431972.shtml Secuobs.com : 2013-03-06 22:50:29 - threatpost The First Stop for Security News - A number of US banks are dealing with online service disruptions as hacktivists reportedly have launched another round of distributed denial of service DDoS attacks against financial institutions read more http://www.secuobs.com/revue/news/431874.shtmlhttp://www.secuobs.com/revue/news/431874.shtml Secuobs.com : 2013-03-06 22:50:29 - threatpost The First Stop for Security News - On the one year anniversary of Google Play comes news that a new botkit is making the rounds that leverages actual verified accounts from that marketplace to trick users into downloading phony banking applications read more http://www.secuobs.com/revue/news/431873.shtmlhttp://www.secuobs.com/revue/news/431873.shtml Secuobs.com : 2013-03-06 22:50:29 - threatpost The First Stop for Security News - VANCOUVER--When Peiter Zatko, the security researcher and pioneering hacker known as Mudge, joined the federal government several years ago to help run a DARPA research program, some in the security industry wondered what effect someone with his background could have in an organization as famously change-resistant and slow as the Department of Defense As it turns out, the Cyber Fast Track program he started has been a huge success and though the CFT is ending in less than a month, the program may well serve as a model for other agile research programs inside the US government read more http://www.secuobs.com/revue/news/431872.shtmlhttp://www.secuobs.com/revue/news/431872.shtml Secuobs.com : 2013-03-06 17:55:33 - threatpost The First Stop for Security News - Facebook users are sharing less information publicly, yet continue to share countless bits of information with what one group of researchers has dubbed silent listeners read more http://www.secuobs.com/revue/news/431788.shtmlhttp://www.secuobs.com/revue/news/431788.shtml Secuobs.com : 2013-03-06 17:55:33 - threatpost The First Stop for Security News - Researchers at Seculert have discovered a link between spear phishing campaigns targeting Japanese and Chinese journalists, post-Mandiant s APT1 report, and domains connected to the Aurora attacks on Google and the Shady RAT campaign read more http://www.secuobs.com/revue/news/431787.shtmlhttp://www.secuobs.com/revue/news/431787.shtml Secuobs.com : 2013-03-06 03:42:42 - threatpost The First Stop for Security News - Google today revealed - if in vague terms - it last year received less than 1,000 national Security letters from the Federal Bureau of Investigation seeking financial and communications data on up to almost 2,000 individuals The disclosure of such government requests marks a first for a major Internet service provider read more http://www.secuobs.com/revue/news/431658.shtmlhttp://www.secuobs.com/revue/news/431658.shtml Secuobs.com : 2013-03-05 20:49:14 - threatpost The First Stop for Security News - Google raised the degree of difficulty for Pwn2Own and Pwnium hacking contestants by patching 10 vulnerabilities in its Web browser last night read more http://www.secuobs.com/revue/news/431569.shtmlhttp://www.secuobs.com/revue/news/431569.shtml Secuobs.com : 2013-03-05 20:00:28 - threatpost The First Stop for Security News - A vulnerability in sudo a program that manages user privileges on certain types of systems could allow an unauthenticated user to execute commands for about five minutes, without entering a password read more http://www.secuobs.com/revue/news/431563.shtmlhttp://www.secuobs.com/revue/news/431563.shtml Secuobs.com : 2013-03-05 19:10:42 - threatpost The First Stop for Security News - Oracle s new security model for Java, in place since the release of Java 7 update 11, is under serious fire now that attackers have demonstrated in the wild how to bypass the updated controls with the help of social engineering read more http://www.secuobs.com/revue/news/431550.shtmlhttp://www.secuobs.com/revue/news/431550.shtml Secuobs.com : 2013-03-05 12:31:39 - threatpost The First Stop for Security News - The new year is barely two months old and it's already been a brutal one for the disclosure of new vulnerabilities Java, Adobe Reader, Flash, Google Chrome and a number of other widely deployed applications have all been hit with a slew of serious bugs in just the last few weeks And that's likely to get worse this week as researchers convene in Vancouver for the Pwn2Own and Pwnium hacking contests read more http://www.secuobs.com/revue/news/431444.shtmlhttp://www.secuobs.com/revue/news/431444.shtml Secuobs.com : 2013-03-05 03:44:17 - threatpost The First Stop for Security News - Researchers have found an earlier version of the MiniDuke espionage malware that dates to June 2011 - almost a year ahead of the previously oldest variant designed to spy on NATO, European governments and US research and think tanks Unlike the cyberspyware discovered last week, this one embedded a US Navy clock, not one running on Chinese time read more http://www.secuobs.com/revue/news/431383.shtmlhttp://www.secuobs.com/revue/news/431383.shtml Secuobs.com : 2013-03-05 00:06:09 - threatpost The First Stop for Security News - Oracle has once again released an emergency Java update to patch zero-day vulnerabilities in the browser plug-in, the fifth time it has updated the platform this year Today s update patches CVE-2013-1493 and CVE-2013-0809, the former was discovered last week being exploited in the wild for Java 6 update 41 through Java 7 update 15 read more http://www.secuobs.com/revue/news/431343.shtmlhttp://www.secuobs.com/revue/news/431343.shtml Secuobs.com : 2013-03-04 21:41:18 - threatpost The First Stop for Security News - Mozilla chief privacy officer Alex Fowler relayed a vivid anecdote last week during RSA Conference 2013 that illustrates the lengths third parties such as advertisers, data brokers and others who traffic in users online behavior will go to track you once you land on a website read more http://www.secuobs.com/revue/news/431330.shtmlhttp://www.secuobs.com/revue/news/431330.shtml Secuobs.com : 2013-03-04 20:00:49 - threatpost The First Stop for Security News - Similar to what Mozilla did in its Firefox browser earlier this year, Apple has elected to block old, out-of-date versions of Adobe s Flash Player product in Safari in hopes of getting users to update their systems read more http://www.secuobs.com/revue/news/431308.shtmlhttp://www.secuobs.com/revue/news/431308.shtml Secuobs.com : 2013-03-04 19:13:18 - threatpost The First Stop for Security News - A vulnerability exists in Samsung devices running Android version 412 that could give unauthenticated users the ability to circumvent the screen lock and view the home screen, run apps, and reach out to contacts without successfully completing Android s pattern lock, PIN, password or Face Unlock mechanisms read more http://www.secuobs.com/revue/news/431293.shtmlhttp://www.secuobs.com/revue/news/431293.shtml Secuobs.com : 2013-03-04 17:37:18 - threatpost The First Stop for Security News - Giving a prolific bug hunter an excuse to go poking deeper into a potential security issue generally doesn t end well or the vendor in question in this case Oracle Polish security firm Security Explorations, noteworthy for its Java security research, said today it reported five new vulnerabilities in Java SE 7 to Oracle If combined, researcher Adam Gowdiak said, they can be used to gain a complete bypass of the Java sandbox read more http://www.secuobs.com/revue/news/431258.shtmlhttp://www.secuobs.com/revue/news/431258.shtml Secuobs.com : 2013-03-03 22:35:35 - threatpost The First Stop for Security News - Evernote, the online service that enables users to store and sync all kinds of data across multiple devices, has become the latest major Web property to suffer a serious intrusion The company said on Saturday that attackers had compromised some user information, including email addresses and hashed passwords read more http://www.secuobs.com/revue/news/431155.shtmlhttp://www.secuobs.com/revue/news/431155.shtml Secuobs.com : 2013-03-01 19:31:07 - threatpost The First Stop for Security News - Costin RaiuWith Dennis Fisher out of pocket at the RSA Conference in San Francisco, Ryan Naraine hijacks the Digital Underground podcast and gets on the phone with Kaspersky Lab research guru Costin Raiu to talk about the intricacies of the miniDuke malware campaign You are missing some Flash content that should appear here Perhaps your browser cannot display it, or maybe it did not initialize correctly read more http://www.secuobs.com/revue/news/430941.shtmlhttp://www.secuobs.com/revue/news/430941.shtml Secuobs.com : 2013-03-01 17:55:33 - threatpost The First Stop for Security News - After a glorious 72-hour stretch without one, security researchers confirmed yesterday that they found yet another zero-day vulnerability in Oracle s thoroughly troubled Java platform read more http://www.secuobs.com/revue/news/430920.shtmlhttp://www.secuobs.com/revue/news/430920.shtml Secuobs.com : 2013-03-01 17:55:33 - threatpost The First Stop for Security News - It appears the breach of cloud-based storage service Dropbox last year has spurned another wave of spam over the last week or so Users began posting complaints on the service s Bugs and Troubleshooting forum yesterday claiming that their Dropbox-specific accounts started receiving spam again last weekend read more http://www.secuobs.com/revue/news/430919.shtmlhttp://www.secuobs.com/revue/news/430919.shtml Secuobs.com : 2013-03-01 02:57:34 - threatpost The First Stop for Security News - On Thursday the Chinese government, long considered the aggressor in highly publicized US cyberattacks, publicly spoke about being the victim Two of its military Web sites were attacked an average of 144,000 per month and two-thirds of those strikes came from the United States, according to a ministry spokesman read more http://www.secuobs.com/revue/news/430811.shtmlhttp://www.secuobs.com/revue/news/430811.shtml Secuobs.com : 2013-02-28 18:29:37 - threatpost The First Stop for Security News - BotnetsThe cost of a botnet is contingent largely upon the physical location of the malware-infected computers inside of it Therefore, a botnet containing only American or European machines is worth more than one with machines from less prosperous nations read more http://www.secuobs.com/revue/news/430729.shtmlhttp://www.secuobs.com/revue/news/430729.shtml Secuobs.com : 2013-02-28 00:00:54 - threatpost The First Stop for Security News - SAN FRANCISCO People who interact with online services have mounting privacy expectations that run in parallel with their need for a full experience with the functionality central to those services But can users have their privacy cake and eat it too read more http://www.secuobs.com/revue/news/430523.shtmlhttp://www.secuobs.com/revue/news/430523.shtml Secuobs.com : 2013-02-27 22:20:27 - threatpost The First Stop for Security News - A series of targeted attacks are continuing to bully a signed Nvidia application into dropping a backdoor that lets attackers root their way through the systems of Tibetan sympathizers read more http://www.secuobs.com/revue/news/430488.shtmlhttp://www.secuobs.com/revue/news/430488.shtml Secuobs.com : 2013-02-27 20:35:59 - threatpost The First Stop for Security News - SAN FRANCISCO--The discipline of software security has been gaining traction in a lot of organizations both large and small in recent years, thanks in part to the success that vendors such as Microsoft, Adobe and others have had with it However, for many companies, the time and money spent on software security initiatives could be put to better use simply fixing flaws after products ship or are deployed, an expert said read more http://www.secuobs.com/revue/news/430466.shtmlhttp://www.secuobs.com/revue/news/430466.shtml Secuobs.com : 2013-02-27 19:45:41 - threatpost The First Stop for Security News - New espionage malware has been discovered that targets a patched sandbox-bypass vulnerability in Adobe Reader The attacks have hit a relatively small number of government victims in 23 countries, primarily in Europe, and rely on a string of unusual tactics, including the use of steganography to hide backdoor code, as well as the capability to reach out to Twitter accounts created by the attackers for links to command and control servers read more http://www.secuobs.com/revue/news/430448.shtmlhttp://www.secuobs.com/revue/news/430448.shtml Secuobs.com : 2013-02-27 04:11:18 - threatpost The First Stop for Security News - Researchers on Tuesday said they have proof the Stuxnet worm used to cripple Iran's nuclear program has been in the wild two years longer than first believed There's now evidence the military-grade malware's origins date back to 2005, and possibly earlier read more http://www.secuobs.com/revue/news/430258.shtmlhttp://www.secuobs.com/revue/news/430258.shtml Secuobs.com : 2013-02-27 03:27:09 - threatpost The First Stop for Security News - SAN FRANCISCO Down goes Kelihos again The third version of the prolific peer-to-peer botnet responsible for volumes of pharmaceutical spam, Bitcoin wallet theft and credential harvesting was shut down before a live audience today at RSA Conference 2013 read more http://www.secuobs.com/revue/news/430248.shtmlhttp://www.secuobs.com/revue/news/430248.shtml Secuobs.com : 2013-02-26 22:58:17 - threatpost The First Stop for Security News - Flash patchAdobe released yet another security update for its Flash Player product, it s third this month, earlier today The emergency update patches three vulnerabilities, including two critical CVE-2013-0643 and CVE-2013-0648 that are targeting Flash Player in Mozilla s Firefox browser and could let an attacker crash and compromise affected systems read more http://www.secuobs.com/revue/news/430188.shtmlhttp://www.secuobs.com/revue/news/430188.shtml Secuobs.com : 2013-02-26 21:21:51 - threatpost The First Stop for Security News - Facebook patchSocial media supersite Facebook has fixed a vulnerability that could have allowed a hacker to access a user s account simply by getting them to click through to a specially crafted website The flaw essentially mimicked the functionality of an authentic Facebook application without actually installing an application to their profile read more http://www.secuobs.com/revue/news/430163.shtmlhttp://www.secuobs.com/revue/news/430163.shtml Secuobs.com : 2013-02-26 21:21:51 - threatpost The First Stop for Security News - cPanelWebsite hosting provider cPanel is calling on some users to change their passwords after it informed them on Friday that hackers compromised one of its technical support department s servers The hosting provider does not know for certain the extent of the hack or what, if any, information was stolen during the compromise read more http://www.secuobs.com/revue/news/430162.shtmlhttp://www.secuobs.com/revue/news/430162.shtml Secuobs.com : 2013-02-26 21:21:51 - threatpost The First Stop for Security News - RSASAN FRANCISCO--In the current climate of continuous attacks and intrusions by APT crews, government-sponsored groups and others organizations, cryptography is becoming less and less important and defenders need to start thinking about new ways to protect data on systems that they assume are compromised, one of the fathers of public-key cryptography said Tuesday Adi Shamir, who helped design the original RSA algorithm, said that security experts should be preparing for a post-cryptography world read more http://www.secuobs.com/revue/news/430161.shtmlhttp://www.secuobs.com/revue/news/430161.shtml Secuobs.com : 2013-02-26 05:59:56 - threatpost The First Stop for Security News - The entertainment industry is teaming with five major Internet service providers to this week launch a new Copyright Alert System that will first warn online pirates and then start to strangle bandwidth of repeat offenders Dubbed Six Strikes, the new system began roll out Monday, putting consumers on notice that content owners would be monitoring for illegal downloading or uploading of copyrighted movies, music and televsion shows and notifying participating ISPs such actvitity is detected read more http://www.secuobs.com/revue/news/429999.shtmlhttp://www.secuobs.com/revue/news/429999.shtml Secuobs.com : 2013-02-26 04:30:30 - threatpost The First Stop for Security News - The entertainment industry is teaming with five major Internet service providers to this week launch a new Copyright Alert System that will first warn online pirates and then start to strangle bandwidth of repeat offenders Dubbed Six Strikes, the new system began roll out Monday, putting consumers on notice that content owners would be monitoring for illegal downloading or uploading of copyrighted movies, music and televsion shows and notifying participating ISPs such actvitity is detected read more http://www.secuobs.com/revue/news/429992.shtmlhttp://www.secuobs.com/revue/news/429992.shtml Secuobs.com : 2013-02-25 22:17:17 - threatpost The First Stop for Security News - The seemingly endless list of critical zero day bugs found in Java grew longer today with news that one of the flaws fixed in Oracle s recent patches for the product is under attack and when that bug is paired with another, separate vulnerability, the sandbox in the latest build of Java can be bypassed read more http://www.secuobs.com/revue/news/429949.shtmlhttp://www.secuobs.com/revue/news/429949.shtml Secuobs.com : 2013-02-25 22:17:17 - threatpost The First Stop for Security News - For some time, attackers had the ability to bypass Google's two-step authentication system through access to users' app-specific passwords, giving them full access to victims' Google accounts, including Gmail The vulnerability that enables this attack, discovered by researchers from DuoSecurity, has been patched by Google read more http://www.secuobs.com/revue/news/429948.shtmlhttp://www.secuobs.com/revue/news/429948.shtml Secuobs.com : 2013-02-25 16:15:40 - threatpost The First Stop for Security News - Anup GhoshDennis Fisher talks with Anup Ghosh of Invincea about the recent wave of companies admitting to being hacked by APT groups, the difference between cyberespionage and cyberwar, what the government can do to encourage more intelligence sharing and whether compromised companies are spending enough time on attribution You are missing some Flash content that should appear here Perhaps your browser cannot display it, or maybe it did not initialize correctly read more http://www.secuobs.com/revue/news/429834.shtmlhttp://www.secuobs.com/revue/news/429834.shtml Secuobs.com : 2013-02-25 13:58:56 - threatpost The First Stop for Security News - HTC America s settlement with the US Federal Trade Commission on Friday has the potential to revamp not only how hardware manufacturers handle the security and privacy of mobile devices, but how carriers do so, as well read more http://www.secuobs.com/revue/news/429802.shtmlhttp://www.secuobs.com/revue/news/429802.shtml Secuobs.com : 2013-02-25 13:58:56 - threatpost The First Stop for Security News - It s getting hard to keep track of all the bugs piling up for Apple s iPhone Now it seems a glitch in the iOS kernel of Apple s much maligned iOS 61 is responsible for yet another passcode bypass vulnerability, the second to surface this month Attackers can apparently access users' photos, contacts and more by following a series of steps on an iPhone running iOS 61 read more http://www.secuobs.com/revue/news/429801.shtmlhttp://www.secuobs.com/revue/news/429801.shtml Secuobs.com : 2013-02-23 04:49:55 - threatpost The First Stop for Security News - Various news outlets reported late Friday that Microsoft's public cloud storage service suffered a global outage due to a lapsed security certificate Beginning around 4 pm EST, developers and other Azure customers began being blocked from accessing files read more http://www.secuobs.com/revue/news/429528.shtmlhttp://www.secuobs.com/revue/news/429528.shtml Secuobs.com : 2013-02-22 16:46:56 - threatpost The First Stop for Security News - Google has fixed nine high-severity vulnerabilities in its Chrome browser, as well as a dozen other flaws with the release of Chrome 25 This release is one of the few for which the company did not pay out much in the way of bug bounties, only giving out 3,500 read more http://www.secuobs.com/revue/news/429411.shtmlhttp://www.secuobs.com/revue/news/429411.shtml Secuobs.com : 2013-02-22 16:00:16 - threatpost The First Stop for Security News - In the wake of high-profile compromises of companies such as Facebook, the New York Times, Apple and others, officials at Zendesk, an online customer support provider, said that the company also had been compromised and the attackers had made off with the email addresses of customers of Twitter, Tumblr and Pinterest, all of which use Zendesk's services read more http://www.secuobs.com/revue/news/429399.shtmlhttp://www.secuobs.com/revue/news/429399.shtml Secuobs.com : 2013-02-21 22:30:43 - threatpost The First Stop for Security News - Another day, another media company hacked This time it s NBC which has fallen to victim hackers on the heels of compromises of the New York Times and Wall Street Journal websites Various experts have confirmed that NBC s website is compromised and leading visitors to the dangerous Citadel banking Trojan The site is reportedly hosting an iframe that is redirecting visitors to sites hosting the RedKit Exploit Kit which is serving up the Citadel malware read more http://www.secuobs.com/revue/news/429248.shtmlhttp://www.secuobs.com/revue/news/429248.shtml Secuobs.com : 2013-02-21 21:41:05 - threatpost The First Stop for Security News - People looking to download and read the Mandiant report on Chinese government attacks on US infrastructure should look carefully at the name of the file before opening it Researchers say that there are at least two different spear-phishing attacks going on right now that are using rigged copies of the China APT1 report as lures read more http://www.secuobs.com/revue/news/429235.shtmlhttp://www.secuobs.com/revue/news/429235.shtml Secuobs.com : 2013-02-21 18:23:06 - threatpost The First Stop for Security News - Plenty has been written this month about attack attribution, but, really, if your network is under siege, how often does the who matter as much as the how, what, and where It seems that knowing who the actor is behind a network intrusion matters little to a bank, restaurant or retail chain You just want them off your gear, and you want your stuff put back where it belongs read more http://www.secuobs.com/revue/news/429165.shtmlhttp://www.secuobs.com/revue/news/429165.shtml Secuobs.com : 2013-02-21 18:23:06 - threatpost The First Stop for Security News - Representative Ed Markey D-MA is urging the Chairman of the House Committee on Energy and Commerce, Fred Upton R-MI , to take immediate action toward passing the Grid Reliability and Infrastructure Defense GRID Act, which Markey calls a bipartisan bill aimed at hardening the nation s electrical grid and critical infrastructure against cyberattacks read more http://www.secuobs.com/revue/news/429164.shtmlhttp://www.secuobs.com/revue/news/429164.shtml Secuobs.com : 2013-02-21 03:45:25 - threatpost The First Stop for Security News - A study released Wednesday shows one in four consumers who receive a data breach letter become the victim of identity fraud That statistic represented 126 million victims last year -- one million more than the year before, according to the 2013 Identity Fraud Report released by Javelin Strategy Research read more http://www.secuobs.com/revue/news/429013.shtmlhttp://www.secuobs.com/revue/news/429013.shtml Secuobs.com : 2013-02-20 22:00:27 - threatpost The First Stop for Security News - Adobe today released a patch for two vulnerabilities being exploited in the wild that enabled attackers to pull off the first confirmed sandbox escape against Adobe Reader read more http://www.secuobs.com/revue/news/428935.shtmlhttp://www.secuobs.com/revue/news/428935.shtml Secuobs.com : 2013-02-20 20:12:38 - threatpost The First Stop for Security News - An enterprising cybercriminal has opened an underground shop that peddles access to American PayPal accounts which are then accessible through an anonymous proxy service read more http://www.secuobs.com/revue/news/428879.shtmlhttp://www.secuobs.com/revue/news/428879.shtml Secuobs.com : 2013-02-20 17:48:10 - threatpost The First Stop for Security News - The missing link connecting the attacks against Apple, Facebook and possibly Twitter is a popular iOS mobile developers forum called iphonedevsdk which was discovered hosting malware in an apparent watering hole attack that has likely snared victims at hundreds of organizations beyond the big three read more http://www.secuobs.com/revue/news/428846.shtmlhttp://www.secuobs.com/revue/news/428846.shtml Secuobs.com : 2013-02-20 16:15:00 - threatpost The First Stop for Security News - FirefoxMozilla has released Firefox 19, the latest version of its flagship browser, which includes not only fixes for a number of serious security vulnerabilities but also a built-in PDF viewer The native PDF viewer in Firefox could help protect against some of the ongoing attacks that use vulnerabilities in Adobe Reader and other PDF readers as infection vectors read more http://www.secuobs.com/revue/news/428832.shtmlhttp://www.secuobs.com/revue/news/428832.shtml Secuobs.com : 2013-02-20 02:31:36 - threatpost The First Stop for Security News - A non-profit association for IT professionals in higher education announced Tuesday its server had been breached Educause, which has 1,800 college and 300 corporate members, issued a warning that it had discovered a security breach sometime in February that may have compromised the hashed passwords of edu domain holders and urged impacted administrative, billing or technical contacts to change their passwords read more http://www.secuobs.com/revue/news/428713.shtmlhttp://www.secuobs.com/revue/news/428713.shtml Secuobs.com : 2013-02-20 00:13:46 - threatpost The First Stop for Security News - On a day when Java zero day exploits were fingered in attacks against Apple, Facebook and Twitter, Oracle released the remainder of its quarterly security patch updates for the Java platform Five vulnerabilities were patched in Java 7 Update 15 today, all of them remotely exploitable, and three of them rated of the highest criticality by Oracle read more http://www.secuobs.com/revue/news/428673.shtmlhttp://www.secuobs.com/revue/news/428673.shtml Secuobs.com : 2013-02-19 23:26:10 - threatpost The First Stop for Security News - W32 Autorunwormaaeb-h is an evolved, virtual machine-aware AutoRun worm that makes use of obfuscation and polymorphic techniques in order to evade detection and infect removable media and mounted network shares, according to McAfee read more http://www.secuobs.com/revue/news/428670.shtmlhttp://www.secuobs.com/revue/news/428670.shtml Secuobs.com : 2013-02-19 22:34:58 - threatpost The First Stop for Security News - Apple is the latest major American company to enter the security confessional and disclose it has been breached The company told Reuters today it was attacked by the same crew that hit Facebook, which disclosed its breach last Friday, and that like the social media giant, no data had been stolen read more http://www.secuobs.com/revue/news/428648.shtmlhttp://www.secuobs.com/revue/news/428648.shtml Secuobs.com : 2013-02-19 21:45:47 - threatpost The First Stop for Security News - Gmail securityGmail accounts are high-priority targets for attackers of all stripes, particularly spam crews and state-sponsored attackers who use them to monitor the activities of activists and journalists Hijacking those accounts can be quite useful for spammers and malware gangs as well, but Google said that it has put security measures in place that have greatly reduced the number of successful hijack attempts read more http://www.secuobs.com/revue/news/428634.shtmlhttp://www.secuobs.com/revue/news/428634.shtml Secuobs.com : 2013-02-19 20:56:31 - threatpost The First Stop for Security News - A vulnerability exists in some components of BlackBerry mobi le devices that could grant attackers access to instances of the company s Enterprise Server BES , according to Research in Motion RIM , which issued an alert and released a patch for the vulnerability last week via its Knowledge Base support site BES, the software implicated by the vulnerability, helps companies deploy BlackBerry devices read more http://www.secuobs.com/revue/news/428622.shtmlhttp://www.secuobs.com/revue/news/428622.shtml Secuobs.com : 2013-02-19 19:15:12 - threatpost The First Stop for Security News - China has been blamed for cyberattacks on every major industrial base in the United States and even in some corners for the Super Bowl blackout But most of it has been rampant speculation coupled with the lacing together of a number of loose ends Examples of the kind of direct attribution to the People s Liberation Army PLA presented in a report today by security company Mandiant have been rare read more http://www.secuobs.com/revue/news/428589.shtmlhttp://www.secuobs.com/revue/news/428589.shtml Secuobs.com : 2013-02-16 00:16:41 - threatpost The First Stop for Security News - Hackers and data recovery specialists alike could soon be turning to a new technique that under the right conditions can allow for the harvesting of personal information from phones, even after they ve been frozen read more http://www.secuobs.com/revue/news/428123.shtmlhttp://www.secuobs.com/revue/news/428123.shtml