ICT Security-Sécurité PC et Internet
87.1K views | +0 today
Follow
ICT Security-Sécurité PC et Internet
ICT Security + Privacy + Piracy + Data Protection - Censorship - Des cours et infos gratuites sur la"Sécurité PC et Internet" pour usage non-commercial... (FR, EN+DE)...
Curated by Gust MEES
Your new post is loading...
Your new post is loading...
Scooped by Gust MEES
Scoop.it!

Yet Another SQL Injection Attack - F-Secure Weblog

Yet Another SQL Injection Attack - F-Secure Weblog | ICT Security-Sécurité PC et Internet | Scoop.it

Somehow these SQL Injections targetting ASP/ASP.net sites just never seem to abate.

First there was Lizamoon... Surprising us with the millions of websites that got injected.

 

Then came a few others with the recent ones being nikjju.com and hgbyju.com.

Now came njukol…

 

Read more...

 

No comment yet.
Rescooped by Gust MEES from Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security...
Scoop.it!

Mac Flashback Infections - F-Secure Weblog

Mac Flashback Infections - F-Secure Weblog | ICT Security-Sécurité PC et Internet | Scoop.it
F-Secure Security Labs brings you the latest online security news from around the world. Ensure that you are up-to-date with the latest online threats to guarantee your online wellbeing.

 

Our Anti-Virus for Mac detects the latest Flashback variant as Trojan-Downloader:OSX/Flashback.K.

Here's some of our recent Flashback descriptions:

• Flashback.I
• Flashback.K

 

Our previous Mac related posts include instructions on how to disable Java, how to check for a Flashback infection, and manual removal:

 

• Mac Malware at the Moment
• Are you having a (Mac) Flashback?
• Mac Flashback Exploiting Unpatched Java Vulnerability

 

===> For those of you celebrating the Easter Holiday this weekend — if you're visiting your parents and they have a Mac — now is the time to update, disable, or remove their Java client plugin/installation! <===

 

(And that goes for Windows too.)

No comment yet.
Rescooped by Gust MEES from Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security...
Scoop.it!

More Mac Malware (Word Exploit) Targeting NGOs

More Mac Malware (Word Exploit) Targeting NGOs | ICT Security-Sécurité PC et Internet | Scoop.it
F-Secure Security Labs brings you the latest online security news from around the world. Ensure that you are up-to-date with the latest online threats to guarantee your online wellbeing.
No comment yet.
Scooped by Gust MEES
Scoop.it!

WordPress Page is Loading... an Exploit

WordPress Page is Loading... an Exploit | ICT Security-Sécurité PC et Internet | Scoop.it

WordPress.org is being targeted once again, and although this time there isn't much sneaky sophistication, the infection is still prevalent enough for Internet users to be wary.

 

Spam appears to be the driver of these campaigns. Various websites have already been identified to be redirecting to Blackhole exploit kit.

 

Compromised websites would render any of the following pages upon visit...

No comment yet.
Scooped by Gust MEES
Scoop.it!

What is the definition of cybercrime?

What is the definition of cybercrime? | ICT Security-Sécurité PC et Internet | Scoop.it
What is the definition of cybercrime?

Two weeks ago, the "Cybersecurity Act of 2012" was introduced in the U.S. Senate.

 

The bill (S.2105) is designed to protect critical infrastructure such as water, energy, and transportation. It directs the U.S. Department of Homeland Security (DHS) to coordinate with network operators on developing security standards. A related bill, the "Cybersecurity Information Sharing Act of 2012" (S.2102) was introduced on February 13th.

 

Naturally, civil liberties group such as the EFF and EPIC examined the legislation. They say it's too broad.

 

CNET's Elinor Mills: Civil liberties groups: Proposed cybersecurity bill is too broad

Whatever else there is to say about the Cybersecurity Act of 2012, it was a bit surprising to read in CNET's article that "there is no definition of 'crime'." After all, the definition of "cybercrime" has been established for years now.

No comment yet.
Rescooped by Gust MEES from Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security...
Scoop.it!

Oxford Muses on Mac Flashback: Worst Outbreak Since Blaster

Oxford Muses on Mac Flashback: Worst Outbreak Since Blaster | ICT Security-Sécurité PC et Internet | Scoop.it

Oxford Muses on Mac Flashback: Worst Outbreak Since Blaster

 

So how bad was last month's Mac Flashback outbreak and who suffered the most? Our guess: it was bad, and university IT help desks.

 

And it looks like our guess might not be far off the mark.

 

===> Oxford University Computing Services' network security team (aka OxCERT) has written that they dealt "with what is probably the biggest outbreak since Blaster struck the Windows world all the way back in the summer of 2003." <===

 

OxCERT dealt with around 1000 incidents for Blaster. They've seen several hundred Flashback incidents… "and they keep on coming."

 

Read more...

 

No comment yet.
Rescooped by Gust MEES from Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security...
Scoop.it!

Mac Flashback Exploiting Unpatched Java Vulnerability

Mac Flashback Exploiting Unpatched Java Vulnerability | ICT Security-Sécurité PC et Internet | Scoop.it

A new Flashback variant (Mac malware) has been spotted exploiting CVE-2012-0507 (a Java vulnerability). We've been anticipating something like this for a while now.

 

Oracle released an update that patched this vulnerability back in February… for Windows.

 

===> But — Apple hasn't released the update for OS X (yet). <===

No comment yet.
Rescooped by Gust MEES from Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security...
Scoop.it!

Are you having a (Mac) Flashback?

Are you having a (Mac) Flashback? | ICT Security-Sécurité PC et Internet | Scoop.it

On Monday, I provided steps on how to avoid your Mac being compromised by the Flashback trojan. Today I will provide information on how to locate a Flashback infection.

 

To better understand the steps below, it is better to also know a bit about Flashback. It's an OS X malware family that modifies the content displayed by web browsers. To achieve this, it interposes functions used by the Mac's browsers.

 

The hijacked functions vary between variants but generally include CFReadStreamRead and CFWriteStreamWrite: read more...

No comment yet.
Scooped by Gust MEES
Scoop.it!

Mobile Threat Report, Q4 2011 - F-Secure Weblog

Mobile Threat Report, Q4 2011 - F-Secure Weblog | ICT Security-Sécurité PC et Internet | Scoop.it
F-Secure Security Labs brings you the latest online security news from around the world. Ensure that you are up-to-date with the latest online threats to guarantee your online wellbeing.
No comment yet.
Rescooped by Gust MEES from Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security...
Scoop.it!

Mac Malware Summary 2011 (Q2/Q3/Q4) - F-Secure Weblog : News from the Lab

Mac Malware Summary 2011 (Q2/Q3/Q4) - F-Secure Weblog : News from the Lab | ICT Security-Sécurité PC et Internet | Scoop.it
F-Secure Security Labs brings you the latest online security news from around the world. Ensure that you are up-to-date with the latest online threats to guarantee your online wellbeing.

 

From April to December 2011, there have been several dozen new Mac threats.

 

Well, that's nothing when compared to Windows malware — but it's definitely something when compared to the number of Mac threats seen prior to 2011.

 

We expect more of the same for 2012.

No comment yet.