security
RIM takes on Indian Government head on
Research In Motion (RIM) is reportedly close to resolving a several months-long network security dispute with India’s Union Home Ministry. The issue first became public in early March, when the ministry threatened to ban BlackBerry service entirely, unless it was given unconditional access to any and all of the information passing across RIM’s network at [...]
The open source alternative
It’s good to see the BBC covering open source software
New way to hack Oracle database
Security researcher David Litchfield has released technical details of a new type of attack that could give a hacker access to an Oracle database.
RSA finds new malware enhanced phishing technique
RSA said Monday that it discovered a new phishing technique that uses elements of a malware attack to swipe personal information.
The discovery illustrates a series of attacks from the Rock Phish group, which is a gang reportedly based in Russia that has been targeting financial institutions since 2004.
Hole in Xpdf enables code injection
A security hole in Xpdf and libraries and applications based on it can allow which attackers to inject and execute malicious code using crafted PDF files. The hole can be exploited merely by opening the PDF file.
(self hosted) Wordpress 2.5 users, Careful!
If you’re a self-hosted Wordpress user and have upgraded to WP2.5, you need to know there is a serious ‘gotcha’ in the revised sidebar widget building section. If you use text widgets to include custom HTML, javascript or other non-PHP code and want to make changes or add new ones then be very careful how you do it.
Exploit Attacks Pro-Tibet Site Visitors
Friebet Trojan carries SQL attack payload
Online attacks focused on exploiting renewed controversy over the Tibet situation by delivering malware to visitors of sites favoring Tibetan separatist efforts.
A Trojan injected into sites favoring Tibetan independence from China targeted visitors with a specially crafted download. Security vendor McAfee said the affected websites hosting this Trojan were probably [...]
EU Group Say Web Companies Do Too Little To Protect Users’ Privacy
The Financial Times (4/8, Allison) reports, “An influential European Union privacy group has taken aim at some of the methods used by Google, Microsoft and other leading technology companies to deliver relevant online search results.” The Times continues, “In an opinion published on a Dutch government website, the Article 29 Working Party, a group of [...]
