Information Security News and Exploits

Providing you with Security News and Exploits from all over the web.

Entries for July 23rd, 2010

Dell Blames Insider for Malware Infection

Dell Inc has accepted that parts of its servers were infected with a computer virus designed to steal private data and is offering customers replacement parts for free. The firm said that it wasnâ??t aware about any incidents of attack but it had decided to replace the tainted parts at the earliest. A Dell spokesman [...]

Leave a Comment

Why this “Mac guy” will dump Apple fanboy club card

A couple of posts by two of my colleagues yesterday really made me stop and think about choosing a tech camps – you know, Camp Apple, Camp Google, Camp Microsoft.
First, there was Mary Jo Foleyâ??s post confessing that she – a self-confessed â??PCâ? – not only bought an iPad but was loving it, as well. [...]

Leave a Comment

Apple pushes white iPhone 4 to late 2010

Those of you holding out for white iPhone 4s will have to continue your practice in patience: Apple says that they continue to be a challenge to manufacture and won’t be available until later this year. That’s rightâ??no longer will they be available in the second half of July, which was already pushed back from [...]

Leave a Comment

Rooting the Droid X – Bootloader Stays Locked

Android enthusiast Stephen Bird claims that he has found a method to gain root access on Motorolaâ??s latest Droid X smartphone. Bird said that he had ported an exploit for the Motorola Milestone, which was recently released by developer Sebastian Krahmer.
The exploit helped him to cash in on Android drawback, which resembles a privilege escalation [...]

Leave a Comment

‘White iPhone 4 secretly Verizon iPhone’ theories reignited by new delay

Apple has once again delayed the white iPhone 4, again citing manufacturing challenges, but what Apple has not said is what those challenges are or even whether they even apply to the white outer surface of the device. While most unconfirmed third party reports have suggested that the white glass material is the culprit, todayâ??s [...]

Leave a Comment

Hackers find simple workaround for Samsung Vibrant GPS issues

A handful of Samsung Vibrant users are finding that they are less than thrilled with the handset’s GPS performance. Some are reporting that the Vibrant takes a long time to lock onto a signal, and others are complaining that the phone incorrectly displays their location.
With so many apps reliant on GPS, it could quickly become [...]

Leave a Comment

vBulletin 3.8.6 vuln gifts admin credentials to unwashed masses

Websites using software from vBulletin have been stung by a critical vulnerability that makes it trivial to steal credentials needed to administer site panels.
The flaw in version 3.8.6 of vBulletin makes it possible for anyone with a web browser to infiltrate a forum’s back end, where sensitive data about users is often stored. The forumware [...]

Leave a Comment

Security BSides Grows, But Not Too Much

The security "unconference" is back in Vegas next week, and this time the setting is a gated private resort with multiple swimming pools and a sand beach, and the number of attendees signed up so far for the free — yes, free — event has doubled. But that doesn’t mean Security BSides will lose the [...]

Leave a Comment

Internet Explorer deemed least vulnerable browser

Ask the average techie which browser has the most vulnerabilities, and odds are their answer will be "Internet Explorer, of course." Indeed, Microsoft’s browser has endured plenty of slings and arrows — and not entirely without justification — but some of those projectiles should deservedly be aimed at Apple, Mozilla, and Google. According to a [...]

Leave a Comment

Cisco study warns against “FarmVille”

If your employees are playing popular Facebook games at work – and undoubtedly, some of them are – they are opening up malware avenues for hackers and cybercriminals, according to Cisco. This is just one of the findings of a midyear security report delivered by Cisco this week that reiterated earlier conclusions on social media, [...]

Leave a Comment

Microsoft releases temporary workaround for Windows Shell flaw

Microsoft (NASDAQ: MSFT) has released an automated tool to neutralize the recent vulnerability that was discovered in the Windows Shell, which we reported on last week. Called "Fix It," the automated tool is available on Microsoft’s support website and will mitigate the vulnerability temporarily by preventing shortcut files from being displayed.
Of course, this is hardly [...]

Leave a Comment

iPhone 4 Bluetooth woes continues

IT DIDN’T TAKE LONG for another fault to be unearthed with Apple’s Iphone Flaw, this time with its Bluetooth connectivity.
As The INQUIRER reported last week, there were murmurings among the faithful of Bluetooth issues. Not surprisingly those believing that anything to come out of Steve Jobs’s company could do no wrong refuted the claims, but [...]

Leave a Comment

Windows Vulnerability Targeted by More Malware

Security researchers have found more malware exploiting an unpatched Windows vulnerability via .LNK shortcut files.
According to Sophos blog July 23, two other pieces of malware have been observed targeting the bug. One is a keylogging Trojan the company is calling Chymin-A that is "designed to steal information from infected computers." The other is Dulkis-A, a [...]

Leave a Comment

Inside the heads of Android fanboys

The fanboys are riled up — the Android fanboys, that is. Earlier this week, InfoWorld ran my "mobile deathmatch" face-off between Google’s Android OS and Apple’s iOS. I got a bunch of strongly worded emails, some bordering on nasty, for my conclusion that Android is basically harder to use than iOS. Those comments, as well [...]

Leave a Comment

IT Workers Getting More Confident, Report Says

In the war between perception and reality, perception appears to have the edge right now.
IT worker confidence in the second quarter of 2010 has risen 6.6 points to 58.2 despite rocky economic indicators all around, according to a survey by Harris Interactive that was sponsored and published by staffing company Technisource.
Confidence is measured in three [...]

Leave a Comment

Ten Reasons to Dump Windows and Use Linux

Now is a particularly good time to ditch Windows for good, for workstations as well as servers. For instance, now that Microsoft stopped supporting Windows Server 2003 on July 13, you’ll need to find something different to use for your servers. Whether it’s switching from Windows Server 2003 to 2008 or to Linux-based servers–or changing [...]

Leave a Comment

Security Concerns Slow LA’s Move to Google Apps

Google pulled off a coup last year when it was awarded a contract worth $7.25 million by the City of Los Angeles to move 30,000 employees to its cloud-based email solution. It was a huge triumph not only because CSCâ??s (Computer Sciences Corporation) proposal for Google Apps â?? both companies have joined forces for this [...]

Leave a Comment

Iran was prime target of SCADA worm

Computers in Iran have been hardest hit by a dangerous computer worm that tries to steal information from industrial control systems.
According to data compiled by Symantec, nearly 60 percent of all systems infected by the worm are located in Iran. Indonesia and India have also been hard-hit by the malicious software, known as Stuxnet.
Looking at [...]

Leave a Comment

How to clamp down on privileged users in a virtualization environment

Management and security, always a troublesome twosome, have reared their ugly heads yet again. This time, they’re causing problems for virtualization initiatives, quashing deployment plans while IT managers grapple with how to finesse management and security of the virtual machines moving around the server infrastructure.
No surprise, then, that CA Technologies, with its aggressive pursuit of [...]

Leave a Comment

Tech worker testifies of ‘blue screen of death’ on oil rig’s computer

A computer that monitored drilling operations on the Deepwater Horizon had been freezing with a "blue screen of death" prior to the explosion that sank the oil rig last April, the chief electronics technician aboard testified Friday at a federal hearing.
"Blue screen of death," or BSOD, is a term most often used to describe the [...]

Leave a Comment