October, 2011
One In 100 Tweets And One In 60 Facebook Posts Are Malicious – Dark Reading
LinkedIn users feel safest, according to new social networking data gathered by Barracuda networks — but not for long. Here’s what social networking looks like on the dark side: one in 100 tweets today are malicious, and one in 60 Facebook posts are as well. Facebook users are the least confident in social network security, [...]
Duqu Trojan found in Indian Server – The Hacker News
Last week we update you about Duqu when Symantec said it had found a mysterious computer virus that contained code similar to Stuxnet, a piece of malware believed to have wreaked havoc on Iran’s nuclear program. Two workers at a web-hosting company called Web Werks told Reuters that officials from India’s Department of Information Technology [...]
Insulin pump hack delivers fatal dosage over the air – The Register
In a hack fitting of a James Bond movie, a security researcher has devised an attack that hijacks nearby insulin pumps so he can surreptitiously deliver fatal doses to diabetic patients who rely on them. The attack on wireless insulin pumps made by medical devices giant Medtronic was demonstrated Tuesday at the Hacker Halted conference [...]
DevilRobber Mac OS X Trojan horse spies on you, uses GPU for Bitcoin mining – Naked Security
Yesterday, users of Sophos’s security products (including our free anti-virus for Mac home users) had their protection automatically updated to protect against a new Mac OS X Trojan horse that has been distributed via torrent sites such as PirateBay. Copies of the legitimate Mac OS X image editing app GraphicConverter version 7.4 were uploaded to [...]
Cyber crooks migrate to “ce.ms†free domains – Help Net Security
Online scammers and malware peddlers often exhibit locust-like behavior as they migrate from one type of free domains to another in order to evade detection by spam filters and to keep users’ suspicions at bay. As the recent blacklisting of the .co.cc and the .cz.cc domains by Google has shown, the scammers just begin using [...]
Facebook Flaw Allows Users to Send Executables – threatpost
A security researcher has discovered a vulnerability in Facebook’s messaging system that could allow an attacker to send executable attachments to anyone on the popular social network. The vulnerability is such that an attacker doesn’t necessarily need to be friends with the person to whom he sends the message. Facebook’s operators, to their credit, thought [...]
Combating Halloween malware threats – Help Net Security
GFI Software released tips for spotting and combating malware attacks and threats in the run up to Halloween. Halloween has now become firmly established as a family event in the UK as it has for so long in the US, with practices such as Trick-or-Treating, costumes and spooky decorations. In line with its increased popularity, [...]
Chinese Military Suspected in Hacker Attacks on U.S. Satellites – Bloomerg
Computer hackers, possibly from the Chinese military, interfered with two U.S. government satellites four times in 2007 and 2008 through a ground station in Norway, according to a congressional commission. The intrusions on the satellites, used for earth climate and terrain observation, underscore the potential danger posed by hackers, according to excerpts from the final [...]
How secure is HTTPS today? How often is it attacked? – EFF
The EFF, through the use of its SSL Observatory, has taken a look at the data from certificate revocation lists for SSL certificates in recent months, and found that there were four separate CAs compromisedin the last four months. The data that the EFF looked at was a summary of the reasons that specific certificates [...]
Hackers could have TAKEN OVER Amazon Web Services – The Register
All Your Clouds are Belong to us. Security researchers have unearthed a flaw in Amazon Web Services that created a possible mechanism for hackers to take over control of cloud-based systems and run administrative tasks. The flaw, which affected Amazon’s EC2 cloud and has already been plugged, could have been abused to start and stop [...]
Biggest Hack in Swedish History Affects Politicians, Journalists Among Others – threatpost
Login credentials for nearly 200,000 individuals, most Swedish citizens, have been exposed in what experts are calling the largest data breach in that country’s history. According to a report from The Local, a Sweden-based, English language news publication, a popular Swedish blogging platform, Bloggtoppen, was hacked with login information for around 60 Web sites hosted [...]
Spam gang uses own URL shorteners – Help Net Security
URL shortening services are deservedly popular with Internet users, but unfortunately they are loved by cyber crooks and spammers as well. While regular users appreciate having their links shortened so that they can include them in tweets, the malicious ones mostly use them to conceal the fact that the offered links look suspicious to both [...]
Google Expands Real Time Analytics Beta, Spills Hundreds Of E-mail Addresses In The Process – TechCrunch
If you’re waiting in the queue for Google’s Real Time Analytics Beta, we’ve got good news… and we’ve got bad news. The good news: Google has just let in another big round of participants, so odds aren’t too shabby that you’re in. The bad news: they mixed up their “To:†field and their “BCC:†field [...]
MyBB downloads were infected – The H Security
In a blog posting, the MyBB development team has confirmedthat the download package for version 1.6.4 of MyBB had been modified to include malicious code. Unknown attackers were able to exploit a vulnerability in the MyBB web site’s CMS (content management system) to inject and execute PHP code. The attackers placed a contaminated version of [...]
Computer scientist cracks centuries old, secret society code – TechEye
Copiale Cipher translated. A computer scientist has cracked a mysterious code dating back to the 18th century, a bizarre 75,000 character, 105-page handwritten message made up of abstract symbols and Roman characters, the “Copiale Cipher”. Uppsala University colleagues Beáta Megyesi and Christiane Schaefer hunted for the original manuscript, first found after the Cold War in [...]
