RSA Conference Friday Five – April 13, 2012
The first reported case of malware dates back all the way to 1986. Remember Brain? It’s known as the world’s first PC virus. Malware has come a long way since then. We now face 3.5 new threats per...
View Article9 Tips for CSOs to Get a Fresh Start this Spring
With the hectic travel schedule of first quarter wrapping up I had some spare time to think about advocating a fresh approach to security for the spring. I know it’s not the beginning of the year, but...
View ArticleCommunication And Coordination Should Be The Cornerstone Of Your BC Plan
In a recent Forrester/DRJ joint survey on BC preparedness, of organizations that have invoked a BC plan in the last five years, 37% said that their BC plans had not adequately addressed communication....
View ArticleCVE-2012-1182: Samba root remote exploit
Update immediately to Samba 3.6.4, Samba 3.5.14 and 3.4.16, although patches even have been made available for versions out of support. == Subject: "root" credential remote code execution. == == CVE...
View ArticleOrganizations Need To Adopt New Strategy To Protect Against Cybercrime
With an eye to the threat horizon several years out, organizations can no longer afford to leave responsibility for managing security risks at the door of the information security department. Instead,...
View ArticleOracle CPU April 2012 – Pre-release
Oracle has pre-released its quarterly Critical Patch Update (CPU) coming on April 17. There will be 88 security patches covering over 30 product lines, including its Oracle database servers and the...
View ArticleSBN Sponsor Post
Submit a session proposal to present at RSA Conference Europe 2012 – Call for Speakers opens April 10th.http://bit.ly/fcI5QA
View ArticleJS:Cruzer-B, JS/Obfuscated, JS/Cruzer.C.gen, JS/TrojanDownloader.Agent.NKW
A malicious and encoded javascript file was found inside the site content and is being used to distribute malware (from newportalse.com and other domains). Any user visiting the infected site could be...
View ArticleIs Apple the New Adobe?
A security weakness in Apple Quicktime Java Extensions was reported to Apple today (along with proof of concept code) by Adam Gowdiak, a resarcher with Security Explorations in Poland. The issue...
View ArticleTop 3 NoVA Infosec Blog Posts of the Week
It’s that time of the week again: the time where we take a look at what local security bloggers have been up to. You can take a look at what local security bloggers have been up to but if you can’t...
View ArticleMcAfee Warns Of Android Video Malware; 70K Users Affected
Malicious applications are designed for Japanese users
View ArticleEmail with notification that parcel can not be delivered by FedEx contains...
MX Lab, http://www.mxlab.eu, started to intercept a new trojan distribution campaign by email with the subjects ike: You need to get a parcel number 9998 Your parcel needs to be confirmed Postal...
View ArticleDrive-by downloads: exploiting cross-site scripting vulnerabilities
Engineering manager at Twitter (co-founder of Dasient) Neil Daswani and CTO at Cenzic Lars Ewe have a discussion of today’s Internet safety challenges at RSA 2011 Conference – ‘Drive-by downloads: How...
View ArticleBSides Austin – Verizon DBIR, cloud security and the importance of randomness
A summary of talks from BSides Austin including the Verizon Data Breach Investigation Report, the state of cloud security and the importance of high quality random numbers in cryptography.
View ArticleFlashback, Java, and SabPab
I’m guessing from the continuing high volume of hits on this blog even while I was happily disconnected from the Internet that people are still looking for information on Flashback, , and related...
View ArticleSabpab, new Mac OS X backdoor Trojan horse discovered
More Mac malware has been discovered, capable of giving remote hackers access to your Apple Mac. Isn't it time you ran anti-virus software on your Mac?
View ArticleFighting the OSX/Flashback Hydra
The biggest Mac botnet ever encountered, the OSX/Flashback botnet, is being hit hard. On April 12th, Apple released a third Java update (http://support.apple.com/kb/HT5247) since the Flashback...
View Article