SB13-133: Vulnerability Summary for the Week of May 6, 2013

Posts Tagged ‘symantec’

SB13-133: Vulnerability Summary for the Week of May 6, 2013

By Perry Varanoid on Monday, May 13th, 2013 | No Comments

Original release date: May 13, 2013 The US-CERT Cyber Security Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. The NVD is sponsored by the Department of Homeland Security (DHS) National Cybersecurity and Communications Integration Center (NCCIC) / United States Computer Emergency Readiness Team (US-CERT).

More massive malicious spam! This time claiming to be from Almacenes Exito, (Fri, Apr 12th)

By Perry Varanoid on Friday, April 12th, 2013 | No Comments

—————————— BEGIN OF WARNING SECTION —————————— This diary have live malware links, so be careful if you decide to access them. —————————— END OF WARNING SECTION —————————— Spammers are busy this week in my Country! Today april 11 2013 I received a spam claiming to be a promotion from the biggest retail company in the country and statng that they are giving for free debit cards for US$274.54

Spear Phishing Goes Mobile – New Attack Targets Android; Other Devices at Risk

By Perry Varanoid on Monday, April 8th, 2013 | No Comments

“Kaspersky Lab has identified a new spear-phishing attack involving a Trojan designed to target Android devices. Researcher Kurt Baumgartner says organizations need to be prepared for more mobile malware attacks

Pandemic Cyber Security Failures Open An Historic Opportunity For Investors

By Perry Varanoid on Monday, April 8th, 2013 | No Comments

“Cyber Security failures in the Western World have reached a pandemic stage. Research conducted by the National Security Agency (NSA), in conjunction with the Department of Defense, FBI, Department of State, local law enforcement, civilian security agencies, and large security providers such as Mandiant and McAfee have shown that government and industry alike suffer from poor security practices. The result of the research, published by the Center for Strategic and International Studies at the request of Congress, led to the establishment of the Top 20 Critical Security Controls for government and private networks alike….”

Shylock Trojan Going Global with New Features, Resilient Infrastructure

By Perry Varanoid on Saturday, April 6th, 2013 | No Comments

“The prolific, credential-stealing Shylock banking Trojan is growing increasingly sophisticated as its creators continue adding new modules and functionalities to the man-in-the-browser malware, according to a Symantec report. To this point, Shylock has made its money via man-in-the-browser attacks designed to pilfer banking login credentials from a predetermined list of target organizations

New Android Malware Targets Tibetan Activists

By Perry Varanoid on Saturday, April 6th, 2013 | No Comments

“According to Citizen Lab researchers, a compromised version of the KakaoTalk Android mobile messaging client was recently delivered in a highly targeted e-mail to a prominent Tibetan political figure (h/t TechHive).”Members of the Tibetan community have used KakaoTalk and other applications as alternatives to WeChat (a chat client rapidly rising in popularity) after concerns were raised regarding that applications general security and the potential for Tencent (the Chinese company that provides the application) to monitor users at the behest of the Chinese government,” the researchers note….”

Diversifying Facebook Home could broaden its appeal, analysts say

By Perry Varanoid on Friday, April 5th, 2013 | No Comments

“Facebook's Home mobile software for Android-equipped smartphones might only appeal to the most active Facebook users at first, but the company's plan to integrate third-party social services into it could broaden its appeal. Home, which was unveiled Thursday, is a software service initially available for Android devices and designed to give people faster access to their Facebook content and messaging with friends.

Privacy group calls for changes in CISPA cyberthreat sharing bill

By Perry Varanoid on Thursday, April 4th, 2013 | No Comments

“U.S. lawmakers need to make significant changes to a controversial cyberthreat information sharing bill because the legislation could be used to give federal intelligence agencies backdoor wiretapping powers, the Center for Democracy and Technology said

Google Puts 'You' In Charge of Data Privacy

By Perry Varanoid on Wednesday, April 3rd, 2013 | No Comments

“Google's getting a brand new director of privacy. The fact that Google even has a privacy director suggests it's paying close attention to the privacy implications of products that employ sensitive user data. But that doesn't mean Google's actually looking out for its customers, according to CIO….”

16-31 March 2013 Cyber Attacks Timeline

By Perry Varanoid on Wednesday, April 3rd, 2013 | No Comments

“March is gone and hence it is time to analyze the events that characterized the past month. Two events in particular gained the first pages of the magazines: the wiper malware in Korea and the DDoS attack against Spamhaus that, maybe exaggerating, has been defined the biggest attack in history. But these were not the only noticeable attacks in this second part of the month: the Operation Ababil of the Izz ad-din al-Qassam Cyber Fighters against U.S

Posts Tagged ‘symantec’