Security in the News

Cisco VPN flaw unpatchable / Lost laptop found / Mozilla issues Firefox fix

Posted by Jesper Stein Sandal @ 8:34 AM

More than 95 % of email is 'junk'
Less than 4 percent of all emails are legitimate. The rest i spam, viruses and error messages, monitoring firms report. - BBC News

Majority of phishing attacks target PayPal, eBay users
Due to their worldwide popularity among users, PayPal and eBay are the two most targeted brands by phishers. - Computer Weekly

Flaw in Cisco VPN 3000 kit cannot be patched
A flaw found in Cisco VPN 3000 series equipment making it vulnerable to denial-of-service attacks is caused by the protocol used and cannot be patched. - Computer Weekly

Firefox trojan steals banking details
A trojan that poses as an extension for open-source webbrowser Firefox attempts to steal users' banking information. - Computer Weekly

Missing laptop with data on 540,000 N.Y. state workers found
The missing laptop containing the personal information of 540,000 injured New York workers has been recovered. - Computerworld

Mozilla fires off security update for Firefox browser
Mozilla has released an important security update for Firefox containing essential fixes for security and stability. - eWEEK

Army to require built-in security
The U.S. will make hardware-based security a requirement for future computer systems, using new security features of Microsoft's Windows Vista. - Federal Computer Week

Firefox 1.5.0.5 fixes JavaScript flaws
Mozilla has issued a patch for Firefox fixing seven vulnerabilities involving JavaScript. - Internetnews.com

Exploits fish for unpatched PCs
Malware writers are targeting PC users who have yet to install the latest updates from Microsoft with a number of new exploits. - Internetnews.com

Cisco VPNs open to denial-of-service attacks
A protocol flaw has left Ciscos VPN equipment open to denial-of-service attacks. - InternetWeek.com

Laptop with Armstrong worker data stolen
A laptop containing identity information of 12,000 Armstrong World Industries has been stolen from a payroll auditor. - AP/MSNBC

Researchers target DDoS at the edge
European researchers are trying to build a system that will let an internet service provider stop denial-of-service attacks at the edge of its network. - NewsFactor

Misdirected bounce attacks on the rise
Spammers are increasingly using mail bouncing to circumvent some anti-spam solutions. - SC Magazine UK/US

OS X still safer, but not perfect
While Apple's OS X is still relatively safe, the number of vulnerabilities in OS X applications is a rising cause for concern. - SC Magazine UK/US

MySpace targeted by cyber criminals
Cyber criminals are targeting users of the popular social networking site MySpace with various frauds and spyware threats. - Silicon.com

Navy computers with personal data stolen
Two laptops containing personal information about 31,000 U.S. Navy recruiters have been stolen. - AP/Washington Post

How bot those nets?
Bruce Schneier comments on botnets and the linking of a large number of PCs to do good or evil. - Wired News

Security experts voice IE7 push concerns
Microsoft's use of its Automatic Updates to push new software like Internet Explorer 7 could undermine users' confidence in the channel to deliver security updates. - ZDNet UK

Permanent link