Posted December 14, 2012 An Internet Explorer vulnerability allows hackers to track mouse cursor movement anywhere on the screen, even if a given window is inactive, unfocused or minimised. It can also compromise the security of virtual keyboards and keypads, thereby thwarting their use against keyloggers. Here’s more.
Samsung Smart TV security hole allows hackers to watch you, change channels or plug in malware
Posted December 12, 2012 Researchers have found a vulnerability in an unspecified model of a Samsung LED 3D TV that they exploited to get root access to the TV and any attached USB drives. The bug, which can be used to gain root access, affects multiple Samsung models and device generations, they say. Read all [...]
What computer security threats can we expect to see in 2013?
Posted December 7, 2012 Here are the trends that SophosLabs anticipates will shape the IT security landscape next year. Read more.
Hacker selling $700 exploit that hijacks Yahoo email accounts
Posted November 26, 2012 A hacker is selling a $700 zero-day exploit for Yahoo Mail that lets an attacker leverage a cross-site scripting (XSS) vulnerability to steal cookies and hijack accounts. Read the full story on Naked Security.
Goatse hacker Auernheimer found guilty of breaching AT&T to access customer iPad data
Posted November 22, 2012 A hacker claims he was disclosing a security flaw responsibly. But IRC transcripts show that the Goatse hacking group was instead musing about shorting AT&T stock, discussed selling 120,000 email addresses to spammers, and never told AT&T about the vulnerability in the first place. Here’s the full story.
Adobe Reader zero-day exploit thwarts sandboxing
Posted November 8, 2012 The vulnerability is selling for up to $50K on the black market, security researchers say, and has been included in a package of banking Trojans called the Blackhole Exploit Kit, which is the most prevalent exploit kit out there. Read all about it.
Nuclear power plant cybersecurity warnings silenced by legal threats
Posted October 31, 2012 One vendor’s threat to sue has resulted in two canceled talks about a nuclear power plant’s potential vulnerabilities to cyber-attack. For more, here’s the story.
- Ridiculously redacted interpretation of FISA snooping law released
- Medical group fined $140K for tossing patients’ health records into public dump
- Texas student appeals court order to wear “Mark of the Beast” RFID tracking badge
- Crunch Your Own Damn Resumé
- NASA suffers major data breach over stolen laptop that wasn’t encrypted
-
Lisa Vaas: Thanks! Welcome!...
-
see- und lagercontainer: Very great post. I simply stumbled upon your weblo...
-
Eli: lol huh? This makes no sense. Judges don\'t unders...
-
Wayne Andrew McArdle: Thank-you Lisa for your insight, please keep Repor...
-
FREEDOM: Hello nice to see you posting about my finds if yo...
Follow @LisaVaas on Twitter
