An XSS vulnerability in TweetDeck, a Twitter application, has been exploited in an attack, according to The BBC.
A new banking Trojan nicknamed Pandemiya is being promoted in hacker forums and underground online markets as an alternative to the infamous Zeus, according to an RSA blog post. The source code, which includes 25,000 lines of original code written in C language, is retailed at around $1,500, the RSA Security’s Fraud Action team says.
The official websites in Uganada of the Unites States Embassy (http://washington.mofa.go.ug), the Russian Embassy (http://moscow.mofa.go.ug), the Australian Embassy (http://canberra.mofa.go.ug), the German Embassy (http://berlin.mofa.go.ug) and the Embassy of the United Kingdom (http://london.mofa.go.ug) have been defaced by notorious Syrian hacker Dr.SHA6H, according to a PasteBin post.
Access points and Android devices using libraries linked to vulnerable versions of OpenSSL are affected by the Heartbleed bug, according to The Register.
Pakistan Haxors Crew, one of the most active hacktivist groups targeting Indian sites, defaced the main page of the Taj Mahal website (www.tajmahal.gov.in) to emphasize security vulnerabilities of the Indian government, according to ehackingnews.com.
Leader of hacktivist group LulzSec, Hecto Xavier "Sabu" Monsegur, will receive a reduced penalty of 7 months in prison for helping US authorities sabotage some 300 hacking attacks, according to itnews.com.
Over 70 XMPP-based service operators and software developers have permanently upgraded to encrypted connections to secure users’ communications and prevent traffic sniffing, according to Prosody, an XMPP communications server.
As security solutions grow more efficient, cyber criminals are shifting to more sophisticated “deceptive” tactics, including malicious downloads and ransomware, according to a cybersecurity report from Microsoft.
A 27-year-old former navy nuclear system administrator has been arrested for allegedly hacking the systems of the US Navy, Homeland Security, various police departments and other private and public organizations, according to The US Department of Justice.
Mozilla is petitioning the US Federal Communications Commission (FCC) to adopt clear and democratic rules to prevent ISPs from blocking or discriminating against edge providers, such as wireless networks.
A regular digital video recorder can be transformed into a Bitcoin-mining bot, according to a blog post by SANS Institute.
An alleged Anonymous member faces a maximum sentence of 440 years in prison after being indicted with 18 counts of cyber-stalking on top of earlier offenses, according to an FBI press release.
Microsoft has issued a security fix for an Internet Explorer browser vulnerability that includes Windows XP users despite ceasing security updates for Windows XP last month, according to a company blog post.
Popular voice calling service Skype has come under scrutiny recently by researchers who discovered the company leaves its local database unencrypted, potentially exposing users’ private information to cyber-attack.