* eBay Web attack hops from other sites * Hackers target MLB, NHL sites , and other interesting reading
Apple issues Panther security patch Mac OS X 10.3.9 Panther users also came in for a software update from Apple Wednesday night, in the form of the latest security update for the systems.
Today’s bug patches and security alerts:
Apple issues Panther security patch
Mac OS X 10.3.9 Panther users also came in for a software update from Apple Wednesday night, in the form of the latest security update for the systems.
**********
Three new updates from Ubuntu:
**********
Six new patches from Mandriva:
pdftohtml (denial of service, code execution)
**********
Today’s malware news:
eBay Web attack hops from other sites
Yet another sophisticated Web-based attack against eBay and its users is being investigated by a Tel Aviv-based security vendor that discovered a similar attack two months ago involving a custom-made bot designed to steal accounts. Network World, 11/16/07.
Danger – The subject says it all
The trick used this time is that of a hired sleuth who is watching and listening in on your personal activities. The email sender claims to be hired to watch you and just like the hired assassin we have seen before, this super sleuth turncoat is offering you a chance to know who hire him and perhaps a chance to stop the spying. Symantec Security Response blog, 11/17/07.
**********
From the interesting reading department:
Microsoft DNS bug long-known, familiar to researchers
The DNS cache poisoning bug that Microsoft patched last Tuesday stems from a flaw that has been known to researchers for 10 years or more, the two security firms credited with reporting the vulnerability said this week. Computerworld, 11/17/07.
Hackers target MLB, NHL sites
Hackers targeted the Major League Baseball and National Hockey League Web sites last week with an exploit that convinces users they need to scan their computer for viruses and tricks them into downloading a malicious program. Network World, 11/14/07.
Researchers eye open proxy attacks
Advertising and click-through fraud is currently topping the list of malicious activity funneled through open proxy servers, followed by junk e-mail, according to a research project deploying fake open proxies to catch crooks. TechWorld, 11/15/07.
LAN switch security: what the hackers know that you don’t
Author experts explain how to thwart ARP spoofing, ARP poisoning, P2P traffic, wireless LAN threats and more during a live Network World Chat. Network World, 11/15/07.
With Web 2.0, a new breed of malware evolves
Web 2.0 technologies may be laying the groundwork for a new generation of hacker tools, a noted security researcher said Wednesday. IDG News Service, 11/14/07.
Expect a rocky road for mobile data security, experts say
You’re in for a nasty surprise if you think mobile broadband devices will be free of the security problems that long have plagued PCs, said a panel of security experts at this week’s Mobile Internet World conference. Network World, 11/15/07.
Virtualization, online games, Web 2.0 top security risks, McAfee says
In its “Top Ten Security Predictions for 2008,” McAfee foresees the growth of virtualization opening up a huge attack surface. On the good-news side, the security vendor expects there will be less adware on the Internet to worry about. Network World, 11/15/07.
Telcos lack security plans for next-gen networks, says IBM survey
While a majority of carriers plan on rolling out next-generation network architecture in the next five years, less than half of them say they have strategies in place to protect their NGNs, according to a new IBM survey. Network World, 11/15/07.
Virtual Theft at the Habbo Hotel
Habbo Hotel is a virtual community aimed at teenagers that’s part chat room and part online game. It’s the property of Helsinki based Sulake Corporation. The BBC is reporting that six Dutch teenagers are allegedly involved in the theft of 4000 euros worth of virtual furniture. F-Secure Antivirus Research blog, 11/15/07.
Montana State University reports three data breaches in single day
Think disclosing one data breach is hard enough? Try having to disclose three at the same time. That’s precisely what the State University of Montana had to do recently when it discovered three separate incidents involving the potential compromise of personal data on the same day. Computerworld, 11/15/07.
