After pleading guilty last year, two Nigerians and a French citizen were sentenced by a New York federal judge to jail Thursday for scamming $1.2 million through email.
The Open Web Application Security Project (OWASP), an open-source project, has announced a free, 216-page guide for how to review code for application vulnerabilities. The book complements the already released "OWASP Security Developer Guide" and the "Security Testing Guide." The latest publication is "part of OWASP's strategy to make application security visible and enable the market to support the development of secure application software," according to the organization. — DK
It's already April 1 in some parts of the world and there have yet to be any reports of internet meltdowns due to the activation date of the Conficker worm.
Internet crime complaints made to the FBI rose by 33 percent in 2008, and the total monetary losses that were reported rose by 10.8 percent, according to the 2008 Internet Crime Report, published by the Internet Crime Complaint Center, or IC3. For the losses reported, the individual average crime netted $931 for the crooks. The total complaint number hit 275,284, amounting to $265 million. — CAM
On its TechNet blog, Microsoft denied that a recently uncovered GDI+ EMF buffer overflow problem will result in a crash that is "exploitable for code execution." The flaw had been reported Tuesday by SecurityFocus. Microsoft said it was continuing its investigation, but that mitigating defenses already in place effectively counteract the threat, even when the flaw causes termination of an application. — CAM