Security Incident on FreeBSD Infrastructure
From: FreeBSD Security Officer < security-officer@FreeBSD.org > To: FreeBSD Security < FreeBSD-security@FreeBSD.org > Bcc: freebsd-announce@freebsd.org , freebsd-security-notifications@FreeBSD.org Reply-To: secteam@FreeBSD.org Subject: Security Incident on FreeBSD Infrastructure
About Gatekeeper
Today’s Mountain Lion announcement introduces an important new security feature, called Gatekeeper, in addition to the “sandboxing” feature that premiered in Lion. I’d like to talk a little bit about it, and why it’s important to all Mac users.
New PHP Vulnerability:?-s may expose source code for mod_cgi
PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.
Google Address Sanitizer ("compile-time valgrind") to be part of GCC 4.8
This is the mail archive of the gcc-patches@gcc.gnu.org mailing list for the GCC project .
New Java 0-day exploit spotted in the wild.
The latest cybersecurity trends, best practices, security vulnerabilities, and more.
Cloudflare Attack Post Mortem; Apparent Google Apps/Gmail Vulnerability
This morning a hacker was able to access a customer's account on CloudFlare and change that customer's DNS records. The attack was the result of a compromise of Google's account security procedures.
CWI cryptanalist discovers new cryptographic attack in Flame spy malware
Cryptanalyst Marc Stevens from the Centrum Wiskunde & Informatica (CWI) in Amsterdam, known for breaking the https security in 2008 using a cryptanalytic attack on MD5, analyzed the recent Flame virus this week.
Exploit Information Leaks in Random Numbers from Python, Ruby and PHP
Space Cybersecurity has become a prominent topic in the news, particularly when it comes to protecting space-related assets and technologies.
Cybersecurity Bill Broad Enough to Use Against WikiLeaks and The Pirate Bay
Congress is doing it again: they’re proposing overbroad regulations that could have dire consequences for our Internet ecology. The Cyber Intelligence Sharing and Protection Act of 2011 (H.R. 3523), introduced by Rep. Mike Rogers and Rep. Dutch Ruppersberger, allows companies or the government[fn]...
U.S. Government Threatens Free Speech With Calls for Twitter Censorship
“[T]he ultimate good desired is better reached by free trade in ideas....That at any rate is the theory of our Constitution.” — Justice Oliver Wendell Holmes, dissent in Abrams v. United States, 1919EFF has witnessed a growing number of calls in recent weeks for Twitter to ban certain...
Why We Should All Care About Today's Senate Vote on FISA
Today is an incredibly important vote for the future of your digital privacy, but some in Congress are hoping you won’t find out. Finally, after weeks of delay, the Senate will start debate on the dangerous FISA Amendments Act at 10 am Eastern and vote on its re-authorization by the end of the day...
And the privacy invasion award goes to …
Who’s playing fast and loose with your data? The Big Brother Awards, billed as the “Oscars for data leeches” by the hackers and privacy advocates who hand out the prizes, shine a high-intensity spotlight on companies and individuals with poor privacy track records. Since 1998, Privacy International...
Internet Archive Sues to Stop New Washington State Law
The Internet Archive has filed a federal challenge to a new Washington State law that intends to make online service providers criminally liable for providing access to third parties' offensive materials. There is a press release and an article about it.
Run your own CTF: Stripe publishes VM images
Online payment processing for internet businesses. Stripe is a suite of payment APIs that powers commerce for businesses of all sizes.
Kaspersky Lab Discovers 'Gauss'
Kaspersky Lab announces the discovery of ‘Gauss’, a new cyber-threat targeting users in the Middle East
Google Chrome HTTPS Address Bar Spoofing
The Fixed Bounty Bug Revealed Last month Google awarded our security analyst Luka Treiber a Chromium Security Reward for a high-severity ...
Stanford researcher: Google Circumvents iOS Privacy protection in AdSense ads
Earlier today, the Wall Street Journal published evidence that Google has been circumventing the privacy settings of Safari and iPhone users, tracking them on non-Google sites despite Apple's default settings, which were intended to prevent such tracking. This tracking, discovered by Stanford...
Bank of America Telephone Access Security Hole
"I can assure you that they would not be able to do that with the Bank of America security." The words of the Bank of America supervisor echoed in our
NSA Interception Infographic
Late Friday afternoon , the government asked the Supreme Court to dismiss our lawsuit challenging the constitutionality of a 2008 law gives the government unprecedented authority to monitor Americans ’ international emails and phone calls.