Technical

[DavidR]

I believe the ClickClear function in Firefox NoScript add-on protects against clickjacking.

[Asyn]

I believe the ClickClear function in Firefox NoScript add-on protects against clickjacking.

That's right David.
NoScript blocks these attacks.

[Asyn]

One in four US hackers 'is an FBI informer'
The FBI and US secret service have used the threat of prison to create an army of informers among online criminals
http://www.guardian.co.uk/technology/2011/jun/06/us-hackers-fbi-informer/print

[Asyn]

Cross-domain WebGL textures disabled in Firefox 5
http://hacks.mozilla.org/2011/06/cross-domain-webgl-textures-disabled-in-firefox-5/
https://developer.mozilla.org/en/WebGL/Cross-Domain_Textures
https://bugzilla.mozilla.org/show_bug.cgi?id=656277

[Asyn]

Cookiejacking
https://sites.google.com/site/tentacoloviola/cookiejacking
http://www.reuters.com/article/2011/05/25/us-microsoft-security-idUSTRE74O86F20110525

http://blogs.technet.com/b/msrc/archive/2011/06/09/june-advance-notification-service-and-10-immutable-laws-revisited.aspx

One of the issues we start to address in this release is “cookiejacking,” which allows an attacker to steal cookies from a user’s computer and access websites the user has logged into.

[Asyn]

Twitter authorisation misleads users
http://www.h-online.com/security/news/item/Twitter-authorisation-misleads-users-1259205.html
http://lab.thisisroyal.com/twitter/
http://techcrunch.com/2011/06/10/third-party-twitter-apps-can-access-your-private-messages-without-authorization/

[Asyn]

Nissan LEAF cars leak speed, position, destination to RSS feeds
http://seattlewireless.net/~casey/?p=97

[Asyn]

Siemens fixes vulnerabilities in automation systems
http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&objid=41886031&subtype=133100&caller=view
http://support.automation.siemens.com/dnl/TY/TYzNTUxOQAA_50428932_Akt/Siemens_Security_Advisory_SSA-625789.pdf
http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-161-01.pdf

[Asyn]

Bitcoin P2P Currency: The Most Dangerous Project We've Ever Seen
http://launch.is/blog/l019-bitcoin-p2p-currency-the-most-dangerous-project-weve-ev.html
http://launch.is/blog/l020-is-bitcoin-the-wikileaks-of-monetary-policy.html
http://forum.bitcoin.org/index.php?topic=16457.msg214423#msg214423

[Asyn]

WPScan - WordPress Security Scanner
http://www.ethicalhack3r.co.uk/security/introducing-wpscan-wordpress-security-scanner/
http://code.google.com/p/wpscan/

[Asyn]

WebGL - A New Dimension for Browser Exploitation
http://www.contextis.com/resources/blog/webgl/
http://www.contextis.com/resources/blog/webgl/poc/index.html
http://www.contextis.com/resources/blog/webgl/webgl.avi

WebGL – More WebGL Security Flaws
http://www.contextis.com/resources/blog/webgl2/

[Asyn]

NSA allies with Internet carriers to thwart cyber attacks against defense firms
http://www.washingtonpost.com/national/major-internet-service-providers-cooperating-with-nsa-on-monitoring-traffic/2011/06/07/AG2dukXH_story.html

[Asyn]

WebGL - A New Dimension for Browser Exploitation
http://www.contextis.com/resources/blog/webgl/
http://www.contextis.com/resources/blog/webgl/poc/index.html
http://www.contextis.com/resources/blog/webgl/webgl.avi

WebGL – More WebGL Security Flaws
http://www.contextis.com/resources/blog/webgl2/

WebGL Considered Harmful
http://blogs.technet.com/b/srd/archive/2011/06/16/webgl-considered-harmful.aspx

[Asyn]

Chrome - Trying to end mixed scripting vulnerabilities
http://googleonlinesecurity.blogspot.com/2011/06/trying-to-end-mixed-scripting.html

[Asyn]

Metasploit offers bounty for exploits
https://community.rapid7.com/community/metasploit/blog/2011/06/14/metasploit-exploit-bounty-30-exploits-500000-in-5-weeks
https://community.rapid7.com/docs/DOC-1467