Facebook vulnerable to critical XSS, could lead to malware attacks 23 May 2008 14:12 GMTFacebook, the second most popular social networking site in the U.S according to Nielsen, is currently vulnerable to a critical XSS, allowing the injection and execution of malicious scripts within the popular site. As you can seen in the attached screenshot, the harmless injected scripts in the demonstration successfully load,...
Source: ZDNet Learn from the latest Internet Security Threat Report update 23 May 2008 13:00 GMT(Source: Symantec) Join Symantec for a free webcast to learn the findings of Symantec's Internet Security Threat Report Volume XIII. This newly released issue covers the six-month period from July 1 to December 31, 2007.
This webcast summary of the Internet Security Threat Report will:
- Provide a six month update of worldwide Internet threat activity, including analysis of network-based attacks, a review of known vulnerabilities, and highlights of malicious code
- Alert attendees to current trends and impending threats
- Offer recommendations for protection against and mitigation of these concerns.
Attend this webcast to learn what stealth tactics attackers are using to prey on end users, how these trends are determined and why these devices should be of concern to your organization.
This webcast summary will provide you with insight from Symantecs Global Intelligence Network which has some of the most comprehensive sources of Internet threat data in the world. It includes more than 40,000 sensors monitoring networks in more than 180 countries, malicious code reports from more than 120 million client, server, and gateway systems and one of the world's most comprehensive vulnerability databases, consisting of more than 25,000 recorded vulnerabilities affecting more than 55,000 technologies from more than 8,000 vendors.
Leverage this vast wealth of data and learn how to protect your organization from the latest internet threats.

Source: Computerworld Malware-infected USB drives distributed at security conference 23 May 2008 12:38 GMTThe folks at Australian mega-telco Telstra are wiping eggs from their faces after distributing malware-infected USB drives to attendees at this year's AusCERT security conference. AusCERT's marketing manager Claire Groves confirmed the USB sticks came certified pre-owned thanks Dan Geer and were given out at a tutorial...
Source: ZDNet More Snake Oil: LifeLock spokesperson's stolen id leads to law suits 23 May 2008 03:30 GMTCan you remember being a kid, when your parents first told you what your SSN was? I remember mine telling me to never give it to anyone. Of course, then as soon as I got my first job as a caddy at the local golf course I had to give...
Source: ZDNet Google introducing Safe Browsing diagnostic to help owners of compromised sites 23 May 2008 01:01 GMTLast week, Google's Niels Provos made an announcement regarding a newly introduced feature aiming to help owners of compromised sites in understanding the implications of the compromise, as well as the malicious events that took place when Google last indexed the site. From Google's Online Security Blog : We've...
Source: ZDNet TJX whistle blower sacked? 22 May 2008 21:54 GMTTJX, the retailer that was hit with a major security breach, has sacked a whistle blower who was exposing the company's security issues. According to the ha.ckers.org site: I had some very disturbing news today from one of the forum users - he had just been...
Source: ZDNet Gaping holes in Trillian IM client 22 May 2008 20:40 GMTTrillian users beware:Â There are multiple serious security holes in the popular cross-platform IM application. According to alerts issued by TippingPoint's Zero Day Initiative ZDI, the vulnerabilities allow remote attackers to execute arbitrary code on vulnerable installations of Trillian Pro. Trillian users are strongly...
Source: ZDNet RSnake picks on Google Health... yes, Google wants your medical records, too! 22 May 2008 15:02 GMTInteresting article from Robert "RSnake" Hansen yesterday on one of Google's new innovations, the Google Health application. Yeah, imagine that, Google wants to own the content of your medical records, too! You'd think that Google would want to avoid this due to HIPPA complications, as this is a true example of...
Source: ZDNet