Geolocators a Privacy Problem

Posted on July 6, 2010 
Filed Under Online Security News | Leave a Comment

Although the Foursquare check-in service was only supposed to divulge users’ locations to their friends, it was possible to trace users movements by using scripts to permanently monitor locations.

Source: The H Security

Phishing under the name of Wikipedia

Posted on July 6, 2010 
Filed Under Online Security News, Phishing | Leave a Comment

Spammers are currently sending out large numbers of phishing emails entitled “Wikipedia e-mail address confirmation” that are designed to trick people into visiting compromised web pages.

Source: The H Security

CSI:Internet – The image of death

Posted on July 6, 2010 
Filed Under Online Security News | Leave a Comment

One morning when checking my emails, one subject line really drew my attention: “Air France Flight 447 (crash pictures)”. The email claimed that images on the camera memory stick of a passenger on the crashed plane had been successfully reconstructed and could now be viewed in the attached PowerPoint presentation. When someone is trying that hard, my alarms go off.

Source: The H Security

Google closes vulnerabilities in Chrome 5

Posted on July 6, 2010 
Filed Under Online Security News | Leave a Comment

Google has released version 5.0.375.99 of Chrome, a security update that addresses four “high” risk vulnerabilities in its WebKit-based browser, and a new Dev channel release that on Windows systems enables the new consolidated menu by default.

Source: The H Security

Adobe’s protection against embedded scripts incomplete

Posted on July 6, 2010 
Filed Under Online Security News | Leave a Comment

Despite the recent update, the protection against Adobe PDF /launch attacks is incomplete. By enclosing the commands they embed in PDF documents in double quotation marks, attackers can bypass the protection

Source: The H Security

Microsoft installs another Firefox add-on without asking users’ permission

Posted on June 18, 2010 
Filed Under Online Security News | Leave a Comment

Last year Microsoft caused annoyance with a furtively installed Firefox add-on. With the update for its Search Enhancement Pack the vendor has now slipped unaware Firefox users another add-on

Source: The H Security

Mass website hack aimed at online gamers

Posted on June 18, 2010 
Filed Under Online Security News | Leave a Comment

Attackers have embedded an exploit for the recent vulnerability in Flash Player in tens of thousands of web sites. The hacked web servers are Microsoft Internet Information Server and ASP.NET-based

Source: The H Security

Facebook worms are spreading freely

Posted on June 18, 2010 
Filed Under Online Security News | Leave a Comment

Facebook has, for weeks, been plagued by a security flaw which, so far, it has been unable to fix and more and more exploits are coming into circulation. The latest of them promises the 101 hottest women in the world and displays an image of Jessica Alba

Source: The H Security

Comment: Mozilla does it their way

Posted on June 7, 2010 
Filed Under Online Security News | Leave a Comment

In recent years we have become used to selling our soul for access to useful online services, usually in the form of intimate data. The new Firefox synchronisation platform from Mozilla however, will ensure that the server operators have no access to my data. Source: The H Security

Personally I think it’s great that somebody takes steps against collecting more information.

Click-jacking on Facebook

Posted on June 7, 2010 
Filed Under Facebook Security | Leave a Comment

Several hundred thousand Facebook users are said to have fallen victim to a click-jacking attack by inadvertently clicking on a hidden “Like” button on a specially crafted page

Once the button was clicked, a message (for example “User Noob likes LOL This girl gets OWNED after a POLICE OFFICER reads her STATUS MESSAGE.”) was posted to the user’s news feed, which is visible to other users. Other users clicking on the news feed link in Facebook also landed on the click-jacking page – Sophos compares the way the link spreads to that of a worm and has, therefore, called the attack a click-jacking worm. A similar attack was launched on Twitter in early 2009.

Source: Sophos

Next Page →