Security Trends: Archive: December 2009

Net Privacy 2010: How Far Will the Needle Move?

Are privacy advocates' hopes for a new set of rules and laws in the coming year misplaced?

Lawsuit Says Facebook, MySpace App Failed to Protect User Data

An Indiana man has filed a class action lawsuit against RockYou, alleging it failed to protect the personal data of more than 32 million customers.

New Malware Tactics, Targets Expected in 2010

Security software vendor predicts Adobe apps will eclipse Microsoft as most prominent targets for hacking.

Twitter's 370 Passwords You Can't Use on the Internet

No stranger to hacking attacks, the social networking site has banned new users from selecting 370 passwords that it says are too easy for hacking scripts to unlock.

Microsoft: No Hole in IIS 6

After testing claims by a hacker who claims IIS 6 is vulnerable to a zero-day attack, Microsoft says it's a wild goose chase.

2010: A Malware Odyssey

Socially engineered scams, poorly protected databases and the arrival of Windows 7 will keep security software vendors and their clients busy in the new year.

Intel Patches Trusted Execution

Intel patches for a critical flaw that could have made trusted execution less than trustworthy.

Obama Taps Former Microsoft Exec to Head Cybersecurity

Prolonged search for White House cybersecurity coordinator leads to a former Bush official.

Hacker Taps Into College Library Server

North Carolina community colleges fess up to security breach that exposed Social Security and driver's license numbers of more than 51,000 people

Twitter Defaced By 'Iranian Cyber Army'

Short-lived attack is the latest in a string of security incidents at popular microblogging site.

Microsoft Helps Root Out Child Exploitation Images Online

Even resizing or compressing images doesn't stop Microsoft Research-designed PhotoDNA from spotting illegal images.

Adobe Delays Patch Release for PDF Vulnerability

Company officials acknowledge serious security problem in its PDF viewing and editing applications but won't provide the patch for almost a month.

House Panel Seeks Answers on TSA Web Gaffe

Acting head of agency tells lawmakers that extent of breach was minimal and a thorough security review is well underway.

Tips and Tricks for Using 802.1X in Windows

Securely set 802.1X settings to prevent man-in-the-middle attacks; get a review of the new advanced settings for 802.1X in Windows 7; and learn tips for enabling 802.1X for wired networks and for removing cached login credentials.

Mozilla Updates Firefox 3.5.6 for Three Critical Flaws

New version of open source browser tackles memory corruption and spoofing issues.

Adobe PDF at Risk From Zero-Day Vulnerability

New attack on Adobe products is out in the wild and there is no patch.

CA Predicts More Malvertising, Mac Attacks in 2010

The software developer's security team also thinks another big computer worm outbreak like Conficker is possible.

U.S. Still a Haven for Spammers

McAfee's December spam report finds spammers are still operating with relative impunity despite looming six-year anniversary of FTC's Can-Spam Act.

Akamai Brings Web App Firewall to Its Cloud

Thought that just an IPS was enough? Nope -- Akamai says you need a WAF, and the CDN giant thinks it has just the solution.

FTC Warns of Child Safety Risks on Virtual Worlds

Agency releases report detailing shortcomings in online child safety mechanisms.

Understanding the Wi-Fi Security Guidelines of PCI DSS

Even organizations that don’t maintain WLANs must still satisfy some wireless-specific requirements. Learn the rules here.

Microsoft Opts to Block, Not Patch, Vulnerable Codec

A move to limit the execution of a 17-year-old video codec aims to protect users from hack attacks.

Hackers Break Into University's Admissions Server

More than nine years worth of student data was exposed last month when hackers managed to access the admissions server at Eastern Illinois University.

Facebook Privacy Fracas Just Won't Die

Advocates warn that new privacy controls will lead to inadvertent sharing of information.

Bah Humbug: Koobface Worm Hits Facebook, Again

Latest version of the Koobface worm is being spread through a bogus Christmas greeting card video on the social networking site.

125,000-Plus Sites Tagged by SQL Injection Attack

Security researchers say the sophisticated malware is likely being used for credit card or other banking-related thefts.

Facebook Begins Site-Wide Privacy Revamp

Social networking giant to require all 350 million-plus users to edit and confirm privacy controls.

DHS Taking Action in TSA Breach

Homeland Security secretary tells Senate panel that the security threat from an errant Web posting is minor, but that an internal review is underway.

5 Advanced Wi-Fi Network Security Tips

Get enterprise-level protection for your SMB or SOHO Wi-Fi network.

Cisco: U.S. No Longer the Spam Leader

State of Internet Security 2009 report finds zero days are down, but social networking threats are up.

Microsoft Patch Tuesday Fixes Two Zero-Day Vulnerabilities

Update to Internet Explorer addresses threat to older versions.

Yahoo! Offers Ad-Targeting Privacy Controls

Web giant is the latest to roll out more transparent privacy tools as regulators examine the sector.

FTC Considers Privacy Rules for Online Ads

Head of consumer protection agency hints at action to protect users online.

HSBC Accidentally Exposes Bankruptcy Data

Bank says a bug in its imaging software inadvertently revealed sensitive data about customers going through bankruptcy proceedings.

Software Lobby Keeping Tabs on U.S. Cybersecurity

BSA offers a mixed report card evaluating federal cybersecurity efforts.

Swine Flu Scam Infecting Users With Spam

A bogus e-mail purportedly from the CDC is using the swine flu outbreak to infect users' machines with spam.

Stolen Laptop Puts Wisconsin Patients at Risk

Another stolen laptop has exposed the SSNs, birth dates, and other personal information of 6,400 patients in the Badger state.

Security Should Be Priority for Remote Workers

Cisco survey findings indicate that companies aren’t prepared for natural disasters--or flu outbreaks--and that smartphones are presenting an increasing challenge to enterprise security.

Security Hole Could Affect All iPhones

The good news is a white-hat hacker uncovered the vulnerability and has passed on information about the problem. But how soon will it be fixed?

Microsoft to Target 12 Flaws, IE Zero-Day in Patch Tuesday

Redmond clamps down on a problem that surfaced last month in older editions of Internet Explorer.

Privacy Advocates Aim to Shape Upcoming Legislation

Center for Democracy and Technology launches grassroots campaign as policymakers mull action on Internet privacy.

Facebook Revamps Privacy Approach Yet Again

Social networking leader moves away from network-based approach to privacy, gives users more precise control over what's shared.

Metasploit, NeXpose Integrate for Enterprise Security Testing

Rapid 7 is now integrating popular open source exploit framework into a more enterprise-friendly suite for vulnerability scanning.

Group Finds Privacy Holes in Digital Health Records

Patient Privacy Rights group issues report card showing wide variations in privacy safeguards in electronic health offerings.

McAfee Locks Down Removable Devices

Security software-maker serves up unified, end-to-end security options for the enterprise.

Security Trends: Archive: December 2009

Topic Centers

Articles by Type

Contact Us

More Security