SecurityWeek

On Tuesday, Adobe issued updates to Flash Player for Windows, Mac, and Linux in order to address seven recently identified security vulnerabilities. According to Adobe, the issues patched this week could allow an attacker to execute code, or at the least trigger a system crash. The patches address five buffer overflow vulnerabilities, a memory corruption vulnerability, and a security bypass issue.

A group of activist hackers calling themselves NullCrew have targeted the UK’s Ministry of Defence (MOD), and used a simple SQL Injection attack to plunder thousands of email addresses and passwords. According to the NullCrew disclosure, the MOD’s webmaster made a terrible mistake, as the group was able to life more than 3,000 email address and password combinations from a database by using an “easy as [expletive] SQL Injection.”

Threat researchers from malware protection firm FireEye have discovered a new type of malware on systems that have been infected with the Gh0st RAT (Remote Access Trojan), with plenty of evidence that suggests that the botmasters for Gh0st are experimenting with new tools.

Officials at Coca-Cola reportedly hid the fact that the company was victimized in a breach in 2009. According to Bloomberg News, the FBI approached the company when it learned hackers had stolen sensitive files about the company's $2.4 billion acquisition of China Huiyuan Juice Group, which eventually collapsed. The compromise was reportedly occurred via emails with malicious links that were sent to company executives.

Mozilla has added a list of sites to its Firefox browser that can only be connected to via secure conenctions to improve security.

WASHINGTON - New Jersey's decision to allow voters displaced by superstorm Sandy to cast ballots by email has prompted a flood of warnings over security, secrecy and a potential for legal entanglements. State officials in New Jersey announced the plan Saturday, saying it could help victims of the unprecedented storm along with rescuers who may also be unable to get to polling places.

Its no secret that modern data centers are in the midst of an ongoing period of very dynamic evolution that has fundamentally changed the speed and efficiency of enterprise computing.

Rumors circulated early on Monday that Anonymous has kicked off their OpVendetta campaign with a hack on PayPal. While this hasn’t been confirmed, other related defacements and server compromises have been linked to the operation, as the faceless legion aims to make people remember the 5th of November. [Updated With Additonal Statements from PayPal Below]

With Halloween past us, there’s an excess of sugar in our blood, and remnant imaginings of monsters under the bed. So perhaps that’s why when the topic of “silver bullet security” recently came up, my mind immediately went to Werewolves. The term was used, as it often is, in a discussion about Application Whitelisting—the industrial automation industry’s rightful poster child for endpoint security.

Malware protection firm FireEye has teamed up with EMC’s RSA Security division through a new interoperability agreement that will leverage threat information from FireEye’s Malware Protection System (MPS) and feed that data into RSA’s NetWitness network monitoring platform.

Hundreds of webpages maintained by NBC Universal were defaced over the weekend, by a hacker going by the name of “pyknik.” In addition to NBC, this attacker also targeted a Lady Gaga fan site. Web software used by both domains is speculated to be the primary source of access used in the attack.

A hacker zine has posted details that expose some questionable security practices maintained by image hosting service ImageShack, in addition to source code used by the service. The zine also singled out Symantec and exposed the personal details (dox) for several Anonymous supporters.

WASHINGTON - Few want to even think about it, but the 2012 US election result could be clouded by problems with voting machines ... again. Twelve years after the Florida punch card debacle in which thousands of votes went uncounted in the crucial state, some experts cite similar concerns about voting technology.

Security software firm Quarri Technologies has extended its hardened Web browser technology to iOS devices to protect against various Web attacks, including session hijacking and data theft. Quarri Protect on Q Mobile for iOS prevents Web browsers from copying and saving data onto iOS devices, Quarri Technologies told SecurityWeek. POQ Mobile for iOS will be part of Quarri's Protect On Q security suite, which already protects Windows systems and Android devices.

According to a recent report from AVG Technologies, many SMBs in the US and UK are missing out on the benefits of cloud technologies due to basic confusion. The organizations that particpated in the study were unsure of cloud services or felt they were only for large organizations.