Google, Microsoft, Yahoo fix serious email weakness

Computerworld Security: October 25, 2012
===============================================================

Google, Microsoft, Yahoo fix serious email weakness

Google, Microsoft and Yahoo have remedied a cryptographic weakness in their
email systems that could allow an attacker to create a spoofed message that
passes a mathematical security verification.
http://cwonline.computerworld.com/t/8287627/823929835/587816/0/

~~~~~~~~~~~~~~~~~~~RESOURCE COMPLIMENTS OF: Prolexic Technologies~~~~~~~~~~~~~~~~~~~~~

See how much 1 hour of website downtime costs your business

Time is money and a DDoS attack will take both from your business. Calculate how
much a DDoS attack could cost and how long your site might be offline with our
downtime calculator. Then learn the best practices that minimize downtime from
Prolexic's new white paper, "Strategies for surviving a cyber attack this
holiday season."

http://cwonline.computerworld.com/t/8287627/823929835/587817/0/

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


IN THIS ISSUE

1. Darlene Storm: NSA claims 'privilege' 62 times in 1 court document to EFF!
http://cwonline.computerworld.com/t/8287627/823929835/587818/0/

2. Researcher to demonstrate feature-rich malware that works as a browser extension
http://cwonline.computerworld.com/t/8287627/823929835/587819/0/

3. UN: More international cooperation needed to fight cyberterrorism
http://cwonline.computerworld.com/t/8287627/823929835/587820/0/

4. Barnes & Noble halts use of PIN pad devices after data breach
http://cwonline.computerworld.com/t/8287627/823929835/587821/0/

5. Global infosec survey finds more talk - but not more action
http://cwonline.computerworld.com/t/8287627/823929835/587822/0/

6. Adobe patches six critical flaws in Shockwave Player
http://cwonline.computerworld.com/t/8287627/823929835/587823/0/


~~~~~~~~~~~~~~~~~~~WHITE PAPER: Sourcefire, Inc.~~~~~~~~~~~~~~~~~~~~~

How to Protect Against Hackers Targeting Applications

Read "The Five Key Benefits of Application Control and How to Achieve Them," by
Sourcefire security experts, to learn:
• Why application control is so critical to your network security
• How to encourage productivity while minimizing risks
• Must haves when evaluating application control solutions

http://cwonline.computerworld.com/t/8287627/823929835/587824/0/?3e076d18=am9uc2FuOThAZ21haWwuY29t&x=3649f1ad

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Darlene Storm: NSA claims 'privilege' 62 times in 1 court document to EFF!


Enough is enough when it comes to the NSA mass-capturing and storing the
electronic communications of innocent Americans, then claiming state
secrets to kill court cases that might prove this constant surveillance is
unconstitutional. The latest government move trying to dismiss the
EFF's Jewel v. NSA case claimed "privilege" 62 times in one court
document! EFF legal director Cindy Cohn said it's not all secrets, the case
is very much alive, and explained it. Regarding the ACLU case against the
NSA, that is about to go before the Supreme Court, William Binney said 'The NSA
cannot be trusted with this power.' It has dragged on long enough. The courts
and SCOTUS must come through for the rights of We the People and our
nation's constitution!
http://cwonline.computerworld.com/t/8287627/823929835/587818/0/

Researcher to demonstrate feature-rich malware that works as a browser extension

Security researcher Zoltan Balazs has developed a remote-controlled piece of
malware that functions as a browser extension and is capable of modifying Web
pages, downloading and executing files, hijacking accounts and bypassing
two-factor authentication security features enforced by some websites.
http://cwonline.computerworld.com/t/8287627/823929835/587819/0/

UN: More international cooperation needed to fight cyberterrorism

The lack of an international agreement on cybercrime and terrorism is thwarting
efforts to bring terrorists to justice, said a report released this week by the
United Nations Office on Drugs and Crime (UNODC).
http://cwonline.computerworld.com/t/8287627/823929835/587820/0/

~~~~~~~~~~~~~~~~~~~WEBCAST: IBM~~~~~~~~~~~~~~~~~~~~~

Improving Governance, Risk and Compliance

In this webcast you'll learn how your organization can become more responsive to
financial market challenges while reassuring decision makers the accuracy of
execution.

http://cwonline.computerworld.com/t/8287627/823929835/587825/0/?3e076d18=am9uc2FuOThAZ21haWwuY29t&x=f573d51b

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Barnes & Noble halts use of PIN pad devices after data breach

Barnes & Noble has removed PIN pad devices from all of its nearly 700 stores
nationwide as a precaution after detecting evidence of tampering with the
devices at 63 of its stores in eight states.
http://cwonline.computerworld.com/t/8287627/823929835/587821/0/

Global infosec survey finds more talk - but not more action

Anyone you care to ask will likely--and reasonably--agree that the threats
against IT systems and data are serious and organizations need to take
appropriate steps to protect their infrastructure and information. But if you
look at the practices actually in use at many organizations, it becomes
painfully apparent that there's still a wide gulf between ideals and reality.
http://cwonline.computerworld.com/t/8287627/823929835/587822/0/

Adobe patches six critical flaws in Shockwave Player

Adobe has fixed six critical vulnerabilities in Shockwave Player that could
potentially be exploited by attackers to execute malicious code, via the release
of version 11.6.8.638 of the software.
http://cwonline.computerworld.com/t/8287627/823929835/587823/0/



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

VOTE NOW: WHAT'S ON YOUR 2012 HOLIDAY SHOPPING OR WISH LIST?

Computerworld wants to know: What type of tech gear do you most want to give or
receive as a holiday present this year? Let us know by taking our quick poll.
We'll focus on the most popular product types in our upcoming 2012 holiday gift
guide.

http://cwonline.computerworld.com/t/8287627/823929835/584162/0/

BEST PLACES TO WORK -- CALL FOR NOMINATIONS

Is your IT department a great place to work? Our 20th annual Best Places to Work
in IT report will honor 100 organizations that offer great benefits, salaries
and opportunities for training and advancement, as well as interesting projects
and a flexible and diverse work environment. Nominate an organization now
through Dec. 13, 2012:

http://cwonline.computerworld.com/t/8287627/823929835/566535/0/

SHARK TANK OF THE DAY
______________________

Aha!

This pilot fish is responsible for the firewall, so it makes sense when his
supervisor asks if fish has stopped any Internet traffic going to a particular
workstation. No, says fish -- but there's clearly a problem.

http://cwonline.computerworld.com/t/8287627/823929835/586841/0/

CAST YOUR VOTE IN THIS WEEK'S QUICKPOLL

Microsoft's pricing of its Surface RT tablet was called 'aggressive' by some
analysts, 'mystifying' by others, even as they remained skeptical that it's low
enough to make inroads on the dominant player, Apple's iPad. What do you think
-- is Microsoft's Surface tablet pricing competitive with the iPad?

http://cwonline.computerworld.com/t/8287627/823929835/586750/0/

NEW COMPUTERWORLD JOB BOARD
______________________________

Search multiple listings now and get new job alerts as they are posted.

http://cwonline.computerworld.com/t/8287627/823929835/156832/0/


Get more IT peer perspective online:

LinkedIn Group: http://cwonline.computerworld.com/t/8287627/823929835/311619/0/

Facebook: http://cwonline.computerworld.com/t/8287627/823929835/311620/0/

Twitter: http://cwonline.computerworld.com/t/8287627/823929835/311621/0/

===============================================================

CONTACTS/SUBSCRIPTIONS

You are currently subscribed to computerworld_security as: jonsan98@gmail.com.

To unsubscribe from this newsletter, go to:
http://cwonline.computerworld.com/t/8287627/823929835/131135/0/?90482085=aHR0cDovL2N3b25saW5lLmNvbXB1dGVyd29ybGQuY29tL3U%2faWQ9ODIzOTI5ODM1LmZiMjM3OGMxMDdkZDhkNzE2Mzk0N2I5ZTU5NWE0Mjc5Jm49VCZsPWNvbXB1dGVyd29ybGRfc2VjdXJpdHkmbz04Mjg3NjI3&x=3371e088

To manage your subscription preferences, go to:
http://cwonline.computerworld.com/t/8287627/823929835/72510/0/

To subscribe to a newsletter, go to:
http://cwonline.computerworld.com/t/8287627/823929835/231613/0/

Computerworld's online privacy policy is at:
http://cwonline.computerworld.com/t/8287627/823929835/72509/0/

If you are interested in advertising in this newsletter, please contact: bglynn@cxo.com

To contact Computerworld, please send an e-mail to online@computerworld.com.

Copyright (C) 2011 Computerworld, 492 Old Connecticut Path, Framingham MA 01701

** Please do not reply to this message. If you want to contact someone directly,
send an e-mail to online@computerworld.com **