LinuxSecurity.com
Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Welcome!
Sign up!
EnGarde Community
Login
Polls
What is the most important Linux security technology?
 
Advisories
Community
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
SELinux
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Securitydistro
Latest Newsletters
Linux Security Week: May 20th, 2013
Linux Advisory Watch: May 17th, 2013
Subscribe
LinuxSecurity Newsletters
E-mail:
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

  
Watch out for waterhole attacks -- hackers' latest stealth weapon  23 May 2013 
Source: InfoWorld - Posted by Alex   
Hacks/Cracks The bane of the computer security world is how long it takes to recognize and respond to new attack paradigms. Name a major threat -- the boot virus, macro virus, email attachment, or Web JavaScript redirect -- and it seems to take years to respond adequately.
 
Reporters sued as 'hackers' for finding a security hole with Google  23 May 2013 
Source: Wired UK - Posted by Dave Wreski   
Wireless Security Call it security through absurdity: a pair of telecom firms have branded reporters for Scripps News as "hackers" after they discovered the personal data of over 170,000 customers -- including social security numbers and other identifying data that could be used for identity theft -- sitting on a publicly accessible server.
 
Bitdefender Clueful exposes Android spies  22 May 2013 
Source: H Security - Posted by Anthony Pell   
Privacy Bitdefender Clueful is designed to warn Android users about apps that put their privacy at risk. Available free of charge, the app checks whether any of a user's installed programs are known to transmit smartphone numbers to advertising networks or cause push-message spam.
 
Guantanamo Wi-Fi shuttered after Anonymous hacking threat  22 May 2013 
Source: CNET - Posted by Anthony Pell   
Hacks/Cracks After the hacking collective Anonymous launched a Twitter campaign pledging to go after the Guantanamo Bay Naval Base in Cuba, the U.S. military barred all Wi-Fi access on the base, according to the Associated Press. All social media, including Facebook and Twitter, also has been banned.
 
Critical Linux vulnerability imperils users, even after “silent” fix  22 May 2013 
Source: arsTechnica - Posted by Anthony Pell   
Intrusion Detection For more than two years, the Linux operating system has contained a high-severity vulnerability that gives untrusted users with restricted accounts nearly unfettered "root" access over machines, including servers running in shared Web hosting facilities and other sensitive environments.
 
Exploit for local Linux kernel bug in circulation - Update  21 May 2013 
Source: H Security - Posted by Dave Wreski   
Latest News Back in April, the Linux kernel developers fixed an incorrectly declared pointer in the Linux kernel. However, it appears that they overlooked the potential security implications of such a bug – particularly the fact that it is possible to gain access to almost any memory area using a suitable event_id.
 
Hackers From China Resume Attacks on U.S. Targets  21 May 2013 
Source: NY Times - Posted by Anthony Pell   
Hacks/Cracks Three months after hackers working for a cyberunit of China’s People’s Liberation Army went silent amid evidence that they had stolen data from scores of American companies and government agencies, they appear to have resumed their attacks using different techniques, according to computer industry security experts and American officials.
 
Linux Security Week: May 20th, 2013  20 May 2013 
Source: LinuxSecurity Contributors - Posted by Benjamin D. Thomas   
Linux Security Week Thank you for reading the LinuxSecurity.com weekly security newsletter. The purpose of this document is to provide our readers with a quick summary of each week's most relevant Linux security headlines.
 
Pressure mounts for building in security during application development  20 May 2013 
Source: CSO Online - Posted by Anthony Pell   
Server Security Security has seldom been a priority in application development, but pressure from businesses stuck patching faulty software is having an impact on the industry.
 
Large Attacks Hide More Subtle Threats In DDoS Data  20 May 2013 
Source: Dark Reading - Posted by Dave Wreski   
Intrusion Detection The massive avalanche of data in March that crashed down on Spamhaus, the maintainer of a number of spam blacklists, made headlines as the largest distributed denial-of-service attack witnessed to date.
 
Linux Advisory Watch: May 17th, 2013  17 May 2013 
Source: LinuxSecurity Contributors - Posted by Benjamin D. Thomas   
Linux Advisory Watch Thank you for reading the Linux Advisory Watch Security Newsletter. The purpose of this document is to provide our readers with a quick summary of each week's vendor security bulletins and pointers on methods to improve the security posture of your open source system.
 
How to hack an electric car-charging station  17 May 2013 
Source: Naked Security - Posted by Dave Wreski   
Hacks/Cracks Is there anything more annoying than infrastructure that turns on you?
 
LulzSec Hackers Sentenced In London  17 May 2013 
Source: Information Week - Posted by Anthony Pell   
Government LulzSec Hacker "Topiary" famously tweeted: "You cannot arrest an idea." Perhaps not, but in the case of Topiary, revealed to be Jake Davis, now 20, you can be sentenced to 24 months in a "young offenders institute" for two counts of conspiracy to impair the operation of a computer, to be followed by a five-year serious crime prevention order that can restrict where he can travel and which jobs he'll be allowed to take.
 
How a Career Con Man Led a Federal Sting That Cost Google $500 Million  15 May 2013 
Source: Wired - Posted by Pooja Shah   
Government Whitaker began by explaining his business—how he started out selling HGH and steroids but eventually sent customers vegetable oil and protein powder instead. He also said that the Google employees he worked with knew that he was in Mexico, selling mainly to Americans in the US—and that they knew his business was illegal. Further, he stated, they helped him tailor his advertising to increase the number of clicks it received.
 
    
Partner

 

Latest Features
Securing a Linux Web Server
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Using the sec-wall Security Proxy
Sponsor:

 

Yesterday's Edition
Critical Linux vulnerability imperils users, even after “silent” fix
Guantanamo Wi-Fi shuttered after Anonymous hacking threat
Bitdefender Clueful exposes Android spies
Partner Sponsor

Community | HOWTOs | Blogs | Features | Book Reviews | Networking
 Security Projects |  Latest News |  Newsletters |  SELinux |  Privacy |  Home
 Hardening |   About Us |   Advertise |   Legal Notice |   RSS |   Guardian Digital
(c)Copyright 2013 Guardian Digital, Inc. All rights reserved.