Gmail now automatically displays images, helps attacker to know when you open the mail

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6YN105EmRQmBCN5I5DjpCBb-ipwW7xsoH8Cf2FrXLu2XyINs1iWNl1E5-QISvsFQba76om6H3VPPIiP__jAfDP8Ci_ObKmaQqb-623VTGoIhtDf_CCgxVDe5m-daQ2vwChc8NLCOHfVs/s400/google-default-image.security-risk.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="268" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6YN105EmRQmBCN5I5DjpCBb-ipwW7xsoH8Cf2FrXLu2XyINs1iWNl1E5-QISvsFQba76om6H3VPPIiP__jAfDP8Ci_ObKmaQqb-623VTGoIhtDf_CCgxVDe5m-daQ2vwChc8NLCOHfVs/s320/google-default-image.security-risk.jpg" width="320" /></a></div><div style="text-align: justify;">Google yesterday announced that it will automatically display the embedded images in emails by default, which was previously disabled by Google. <br /><br />By enabling this feature, Google made a mistake, now sender is able to track whether the user have opened the mail or not.<br /><br />An attacker with a unique image link (eg:www.breakthesecurity.com/123456.jpg) can easily determine when the recipient opened the mail.<br /><br />"Turning those images on means we’ll be more accurate when tracking unique opens."MailChimp, a bulk Mail service, said in their blog post.<br /><br />Sponsored Links<br />"GMail's new image caching doesn't occur until the user views the message, still provides read tracking." HD Moore, security researcher commented about this new feature in his tweet.<br /><br />You can disable this feature by choosing the option "Ask before showing" in the "image" section under the General tab in settings. However, it is still in question how many of users going to disable it, most of them don't bother.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Friday, December 13, 2013</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Gmail now automatically displays images, helps attacker to know when you open the mail

Google yesterday announced that it will automatically display the embedded images in emails by default, which was previously disabled by Goo...

Read more »

WordPress 3.7 released for lazy admins, automatic security update

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTNQqeL9CQlAqs5-qz756Ttx_to4iYAMi9J0y4fSMORc3zIpMCRUMde6e47cbK5YExvrDaHh-zU4wJ4zX3Ip8UPbjtLMjxpepVBw3Z2bs2B06PQIp5PXLnVYPvm0emXwHsChU9QEnQncY/s200/lazyadmins-security-wordpress.jpeg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTNQqeL9CQlAqs5-qz756Ttx_to4iYAMi9J0y4fSMORc3zIpMCRUMde6e47cbK5YExvrDaHh-zU4wJ4zX3Ip8UPbjtLMjxpepVBw3Z2bs2B06PQIp5PXLnVYPvm0emXwHsChU9QEnQncY/s200/lazyadmins-security-wordpress.jpeg" /></a></div><div style="text-align: justify;">Wordpress finally come with an idea to put an end to security risks of failing to update the CMS.  Yes, you heard it correctly, they have added a new feature "Automatic update".<br /><br />The new version 3.7 has no special security bug fixes but they have enabled a good feature that will prevent your CMS being hacked because of outdated versions.<br /><br />Besides the "Updates while you sleep" feature, they have also added a feature to estimate the strength of your password and "support for automatically installing the right language files and keeping them up to date".<br /><br />This is quite impressive move from Wordpress.  At least, from now onwards, the lazy admins no need to care about updating the wordpress whenever there is security release, it will be automatically done.<br /><br />It's just come to mind how many of the lazy admins are going to update to the latest version 3.7!</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

WordPress 3.7 released for lazy admins, automatic security update

Wordpress finally come with an idea to put an end to security risks of failing to update the CMS.  Yes, you heard it correctly, they have ad...

Read more »

Paunch, creator of infamous BlackHole Exploit kit arrested in Russia

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUnFtYBefIM0rJLTHk7rxplEyq1LCZLmBqCLR8mIZwvFrIn6Yrm6mYxaLNoizip1-boLmrOjlSwcYCaUp5jRiYEEqSrds1cFy1ueNJdKIRqhTrFKbZGDYz7Fg3U0nby4sgar7IUnMULt0/s200/hackers-arrested.jpeg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUnFtYBefIM0rJLTHk7rxplEyq1LCZLmBqCLR8mIZwvFrIn6Yrm6mYxaLNoizip1-boLmrOjlSwcYCaUp5jRiYEEqSrds1cFy1ueNJdKIRqhTrFKbZGDYz7Fg3U0nby4sgar7IUnMULt0/s200/hackers-arrested.jpeg" /></a></div><div style="text-align: justify;">A man alleged to be the creator of infamous BlackHole exploit kit has been arrested by Russian authorities.<br /><br />Maarten Boone, a security researcher at Fox-IT, was the first person who broke the news in his tweet saying " Blackhole exploit kit author 'Paunch' and his partners arrested in Russia".<br /><br />However, there were no more information from Boone.  Jerome Segura at MalwareBytes pointed out that the encryption service used by Blackhole (crypt.am) is down.<br /><br />Troels Oerting, head of the European Cybercrime Centre, an arm of Europol, <b>has confirmed</b> to <a href="http://www.techweekeurope.co.uk/news/blackhole-exploit-kit-author-arrested-in-russia-128978" target="_blank">TechWeekEurope</a> an arrest had been made, the details of which were given to the organization.<br /><br />“I know it is true, we got some information, but I cannot say anymore,” Oerting told TechWeek.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">News Adopted from EHN</div><div style="text-align: justify;">Dated: October 28, 2013</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Paunch, creator of infamous BlackHole Exploit kit arrested in Russia

A man alleged to be the creator of infamous BlackHole exploit kit has been arrested by Russian authorities. Maarten Boone, a security resear...

Read more »