Language Selection

English French German Italian Portuguese Spanish

Phishing flaw catches Xbox 360 site

Filed under
Microsoft
Security

Microsoft has patched a potentially dangerous flaw on its www.xbox360.com website after security experts warned the software giant of a cross-site scripting vulnerability which could be exploited by hackers to launch phishing attacks.

The vulnerability could be used by web criminals to gather personal and confidential information, such as email address, home address and credit card number, from innocent consumers wishing to pre-order Microsoft's forthcoming gaming console.

IT security firm Finjan Software said that it provided Microsoft with full technical details on 19 May, including proof-of-concept, in order to assist the company with the fix.

Within 12 hours of Finjan's report Microsoft had removed the flaw from its website, which is no longer exposed to this specific vulnerability.

Shlomo Touboul, chief executive and founder of Finjan Software, said: "This discovery is another example of our co-operation with Microsoft and other leading software vendors to fix vulnerabilities before they are exploited by the hacking community."

Source.

More in Tux Machines

New Manjaro Release

What a week we had. With this update we have removed most of our EOL tagged kernels. Please adopt to newer series of each, when still be used. PulseAudio and Gstreamer got renewed. Also most of our kernels got newer point-releases. Series v4.12 is now marked as EOL. Guillaume worked on Pamac to solve reported issues within our v6 series. The user experience should be much better now. Latest NetworkManager, Python and Haskell updates complete this update-pack. Please report back and give us feedback for given changes made to our repositories. Read more

Linux 4.14 Is Up To Around 23.2 Million Lines Of Code

While I usually look at the Linux kernel code size following each merge window, I am a few days late this time around due to busy Xeon/EPYC benchmarking and XDC2017. Anyhow, Linux 4.14 is showing some weight gains but nothing too bad. Linux 4.14 has been another busy cycle with a lot of happenings from finally seeing Heterogeneous Memory Management merged to a lot of other new core functionality plus the always fun and exciting changes and new support happening in driver space. See our Linux 4.14 feature overview for a rundown on the new functionality. Read more

Today in Techrights

10 Best Free Photo Editors For Linux

Linux has come a long way in terms of the applications that are available for the platform. Whatever your specific needs are, you can be sure that there are at least a few applications available for you to use. Today, we'll look at 10 free photo editors for Linux, and I must say, there are a lot of image editing tools available. This post selects just 10 of these awesome tools and talks about them briefly looking at what makes them stand out. In no particular order, let's get started. Read
more