ICT Security-Sécurité PC et Internet

63 percent of more than 4,000 respondents in a new Ponemon Institute survey said that social media in the workplace represents a serious security risk — yet only 29 percent report having the necessary security controls in place to mitigate it.

 

More than 50 percent of respondents report an increase in malware due to social media use.

Two vulnerabilities have been reported in FortiNet FortiAnalyzer, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site scripting attacks, according to Secunia.

Criminal operators continue to hone their craft in 2011 using crimeware that can be repurposed for multiple fraud opportunities, sold or leased to other criminals, and that is now successfully infiltrating the mobile space, according to Gunter Ollmann, VP of research for Damballa.

Cyber Warfare explores the battlefields, participants and the tools and techniques used during today's digital conflicts.

 

The concepts discussed in this book will give those involved in information security at all levels a better idea of how cyber conflicts are carried out now, how they will change in the future and how to detect and defend against espionage, hacktivism, insider threats and non-state actors like organized criminals and terrorists.

Sanford "Spamford" Wallace has long been a thorn in the side of social networks and has already been successfully sued in civil court by the FCC, MySpace and Facebook.

Web applications, on average, experience twenty seven attacks per hour, or roughly one attack every two minutes, according to Imperva. They observed and categorized attacks across 30 applications as well as onion router (TOR) traffic, monitoring more than 10 million individual attacks targeted at web applications over a period of six months.

The analysis shows:
When websites came under automated attack they received up to 25,000 attacks in one hour, or 7 attacks every second.

Four dominant attack types comprise the vast majority of attacks targeting web applications: Directory Traversal, Cross-Site Scripting, SQL injection, and Remote File Inclusion.

Hacktivist group LulzSec is back in business. It has added to the pressure put on Rupert Murdoch following the phone hacking scandal by hacking into News International servers, hijacking the front page of The Sun and redirecting users to the (also compromised) new-times.co.uk site where a fake story about Murdoch's suicide was featured:

Most users get hacked at high rates even when they do not think they are engaging in risky behavior, with 62% unaware of how their accounts had been compromised, according to Commtouch.

 

The increased preference for compromised accounts is illustrated by the graph below which compares the percentage of spam received over sample periods in Q2 and Q3 2011, where the “from” field includes “Gmail” or “Hotmail.”

A simple mistake on the part of cyber attackers has revealed another mass malicious iFrames injection attack that is currently under way, according to Armorize's researchers.

 

Initially, they forgot to include a tag before the actual malicious code, so it was indexed by Google and, therefore, searchable. The initial number of compromised domains was around 22,400, with a total of 536,000+ infected pages.

Google Image Search has for a while now been littered with images that lure users to compromised sites that serve as doorway pages to other malicious sites.

Multiple vulnerabilities have been reported in phpMyAdmin, according to Secunia. These can be exploited by malicious users to conduct cross-site scripting attacks and potentially compromise a vulnerable system and by malicious people to disclose potentially sensitive information and potentially compromise a vulnerable system.