Fox News Server Found Unsecured
480026
Security analysts spotted a gaping security hole in Fox News Network LLC&#39;s Web site on Monday, revealing file directories and sensitive content, although it appears the problem has been fixed.
478583
Outages put a crimp in access at PayPal, Gawker. Also: Microsoft's latest security warnings.
517091
Fixes made for "critical" JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.
700042
A non-campus computer and server that were hooked to the campus network without proper security precautions have been linked to a University of California, Berkeley hacker
676378
privately run and not affiliated with the Transportation Security Administration â-ffers news (such as the Nazi salute allegedly flipped
124155
Also: Google Shared Stuff plays well with others. Read these stories and more from around the Web on News.com Extra.
638921
Security firm Secunia has issued an advisory regarding a newly discovered "highly critical" security flaw in Firefox 2.0 and later, which involves a special URI handler. Although the problem was initially attributed to Internet Explorer by researcher Thor Larholm, Firefox is the culprit.
241820
Also: Hackers rig Google to deliver malware. See what people are saying on News.com Extra.
297905
Images posted in news groups may install remote control software on vulnerable PCs.
322278
An unpatched server at the University of Colorado may have compromised information on up to 45,000 students and recent alumni. The patch, which fixed a vulnerability in a Symantec AV console, had been issued but not yet applied.
704436
(InfoWorld) - A Republican Party Web site has been hacked, and for some time it has been spreading a variation of the long-running Storm Trojan horse to vulnerable visitors, a security researcher said Friday. This is the first time that Storm has taken to the Web for its victims, said Dan Hubbard, head of research at San Diego-based Websense. "The big news is that Storm has added infecting sites to its arsenal," said Hubbard. Storm debuted in January but only cracked the top malware lists early this summer, and has become infamous for its ability to adapt its infection strategies. "They have a knack for latching onto the latest newsworthy events and capitalizing on the public interest in them," Symantec researcher Hon Lau said last month. "And if no newsworthy events are happening at the time, then they will just make them up." Until now, Storm has infected users via files attached to e-mail or through links embedded in spam. The change noticed by Websense's scanners, however, means that Storm's backers have moved to other attack vectors -- in particular, compromised Web sites that sport malicious IFRAMEs. Users visiting such sites are instantly infected with the Trojan if their browsers are not patched against whatever exploit the IFRAME code is throwing out. According to Hubbard, several hundred sites have been compromised by Storm's makers, then seeded with IFRAMES that can inject the Trojan into vulnerable PCs. One such site was a Republican Party Web site for the 1st Congressional District of Wisconsin. Within hours after Websense notified the site's owners, however, it had been purged of the dangerous IFRAME code. By mid-morning Friday, it was safe to visit. Hubbard did not know how the site was compromised. The motive behind Storm's continued attacks and its expansion into new areas like this, said Hubbard, is a never-ending appetite for bots -- compromised computers that can be used for spamming or other criminal activities either by the original attackers or by others who lease sections of the botnet. "Storm's botnet is clearly the biggest around," said Hubbard, who estimated its size as "conservatively, in the hundreds of thousands, although some people have thrown out numbers like 1 million or 2 million or even 4 million." Earlier this month, in fact, MessageLabs pegged the botnet at 2 million machines. In the last few weeks alone, Storm has spread through e-mails touting a real-time scoreboard site for National Football League games, spam hyping a Web site that wished Americans a happy Labor Day holiday, and more mail that used YouTube videos as bait. Computerworld is an InfoWorld affiliate
103206
This unedited e-mail below, sent privately to friends by Wall Street Journal correspondent Farnaz Fassihi, was posted on pointer.org, a site run by the Poynter Institute journalism school.
657585
Fox News apologized Friday for posting phony quotes from Democratic presidential candidate John Kerry on its Web site.
628357
A new tool aimed at circumventing Internet filters used by some governments was released Friday, offering hopes for freer access to information for activists, journalists and others.
185711
Also: High security built right into $100 laptop's OS. Read these stories and more from around the Web at News.com Extra.
22770
Unpatched Windows machines are vulnerable to latest adware attack
751179
According to this advisory on the FrSIRT website, users of the P-News package have two somethings to worry about - a file upload and remote information disclosure vulnerability.   Multiple vulnerabilities have been identified in P-News, which could be exploited by remote attackers to compromise a vulnerable server or disclose sensitive information.   The file upload issue has to do with the ability to upload an Avatar to the system that doesn't validate the file extension and the second is a design flaw for the location of the user information (a text file) inside the document root.   Unfortunately, so official patch has been supplied at this time, but a few quick edits to the code can make these issues go away.