Vulnerabilities

Information overload: Finding signals in the noise

EBay flaw could be used to hijack accounts, researcher says

The auction site hasn't patched the flaw after four days, so the researcher decided to go public

DDoS attacks using SNMP amplification on the rise

After using open DNS and NTP servers for DDoS amplification, attackers are also abusing the SNMP protocol

Microsoft will patch IE zero day but doesn’t give timeline

Attackers are probably trying to develop exploit code, the CTO of Qualys says

Safari 6.1.4 and 7.0.4 address critical flaws, iOS patches missing

Apple patched 22 vulnerabilities in Safari, the majority of which could allow remote code execution

Five new threats to your mobile device security

DuckDuckGo redesigns search to include auto-suggest, local results

The privacy-themed search engine got a slew of new tools

Silverlight malvertising exploits on the rise

The Angler exploit kit favors Silverlight and Flash exploits over Java, researchers from Cisco said

DOJ’s charges against China reframe security, surveillance debate

The charges against five alleged members of the Chinese army refocus a debate dominated by NSA disclosures, some experts say

DOJ charges five members of Chinese army with hacking US groups

The defendants stole trade secrets from Westinghouse Electric, United States Steel and other companies, the DOJ says