Brian Prince

Researchers at Armorize Technologies discovered recently that Google’s DoubleClick was serving a banner ad laced with malware. According to Wayne Huang, CTO of Armorize, his company first discovered the malware Dec. 4 via its HackAlert service, which scans Websites every day. The company discovered the drive-by-download serving from a piece of JavaScript delivered through Internet […]

With Patch Tuesday looming, Microsoft is investigating new reports of a zero-day vulnerability impacting Internet Explorer. Exploit code for the vulnerability was posted Dec. 8 on the Full Disclosure mailing list. The bug affects Internet Explorer versions 6, 7 and 8 across multiple versions of Windows, including Windows 7 and Windows Vista. There is no […]

Microsoft has plans for a gigantic Patch Tuesday next week, when it will plug 40 security vulnerabilities across a number of products, including critical bugs impacting Internet Explorer and Microsoft Windows. The bugs will be squashed by a total of 17 security bulletins, two of which are rated “critical.” One of the two critical bulletins […]

The No. 1 challenge facing database professionals: There just aren’t enough hours in the day, according to a recent survey. In a poll of 1,230 IT pros (PDF) by Embarcadero Technologies, roughly 43 percent cited time as their key challenge when it comes to projects. Another 40 percent cited poor planning. Roughly half (53.5 percent) […]

The WikiLeaks controversy has spilled far beyond discussions of classified documents into the realm of cyber-security, where reports of denial-of-service attacks against everything from MasterCard to PayPal have flooded the press. Behind those reports, though, is the growing issue of opt-in botnets powered by users who intentionally install software to take part in cyber-attacks. The […]

RSA, EMC’s security division, is advising customers to apply a two-year-old patch for its Adaptive Authentication product after a researcher discovered hundreds of banking Websites are still open to attack. RSA Adaptive Authentication is a risk-based fraud prevention and authentication platform that measures risk indicators to identify suspicious activities. According to RSA, versions 2.x and […]

A security researcher has posted an exploit for the Linux on the Full Disclosure mailing list that utilizes three different bugs to permit an attacker to get root access. The exploit was posted by Dan Rosenberg, and affects Linux kernel version 2.6.37. The bugs he used were reported by researcher Nelson Elhage, and include two […]

Attackers hit the Website for MasterCard in an apparent cyber-retaliation for the company’s decision to stop processing donations to WikiLeaks. MasterCard joined a growing list of companies targeted by hacktivists associated with Anonymous, a loosely affiliated group tied to the 4chan message board. The attack was confirmed in a tweet this morning by user @Anon_Operation: […]

Facebook is bringing new privacy controls and visibility to the more than 200 million people accessing the social network through their mobile devices. During the next few weeks, Facebook plans to roll out a new application dashboard to mobile users. According to Facebook, the dashboard will give mobile users a detailed view into what information […]

Compliance mandates are eating up as much as half of the work week for many security pros, according to a survey from eEye Digital Security. For its “2011 Vulnerability Management Trends Report,” eEye surveyed 1,963 IT security pros. More than 85 percent of respondents have compliance mandates, such as the Payment Card Industry Data Security […]

WikiLeaks’ chief spokesman and founder Julian Assange was denied bail after being arrested today by U.K. police for rape and other charges. Assange, 39, stands accused of one count of unlawful coercion, two counts of sexual molestation and one count of rape stemming from incidents involving two women in Sweden this past August. Swedish authorities […]

A new Twitter worm has surfaced that abuses Google’s goo.gl link shortening service. The worm has been seen spreading with the following links: “goo.gl/R7f68” and “goo.gl/od0az.” Twitter is aware of the attack and stated in a tweet that it is pushing out password resets to anyone affected. The microblogging site also advised users to check […]