Description:
News, reviews, and alerts for malware and antimalware, spam filtering, and other Internet security topics.
Contents:
Cached Credentials, Authenticating Proxies and Spyware
Recently a client of mine and I had a long winded debate about the dangers of not protecting machines from spyware and other malware. The client swore up and down that since they had an authenticat...
Editors Wanted
We need authors for the following article categories:
- Antivirus (reviews, bugs)
- Virus (latest outbreaks, new exploits used, cleanup steps)
- Antispam (reviews)
- Spam (latest techniques, news)...
Mespam You Spam We All Spam
Its the new tactic in infection warfare. Why bring down computers, when they can make you money?Spam continues to rise, giving network administrators a headache trying to keep up with it.
New ANI Vulnerability for Animated Cursor Files
There is a new exploit on an old vector involving Microsoft's ANI files. ANI is used for animated cursors. Blocking the download of ANI files is not enough - they can be renamed to JPEG to bypass...
CISCO 500 Series PIX May Have Flaws
Supposedly, the CISCO 500 Series PIX firewalls may have a flaw. The potential flaw is with the SIP protocol. By sending a certain packet to the PIX, hackers would be able to gain free reins to the ...
Backdoor Trojan Threatens to Take Over User Computers
What if your computer boots on its own, logs on to websites that it wants, downloads harmful stuff like no one?s business, takes commands from someone in hinterland Russia and send mails to anyone ...
Find Exploits In Nearly Anything
HD Moore, a popular hacker, has recently updated his controversal exploit framework called Metasploit Framework. This framework has plug-in modules to allow users to test everything from their brow...
"Unpreventable" Security Exploits
One of my colleagues, Steven Smith from ASPAlliance, pointed out an article to me involving an "unpreventable" security exploit. In short, a group of consultants were hired to assess security at a ...
Microsoft Security Bulletins Via RSS
You can now subscribe to the Microsoft Security Bulletins that are released on a continual basis by visiting the TechNet website and subscribing to their email service. You can also sign-up for the...
SSL Evasion - Growing Crisis in Online Financial Transactions
People who use online banking, stockbrokers, and other financial sites have gotten used to the need to confirm they are using a secure connection. They make sure the URL begins with "https&quo...
Kama Sutra Worm, Feb 3 Payload
In case you haven't picked this up in the news, some experts warn that the worm dubbed Kama Sutra, also known as Nyxem.E, Blackworm, W32/MyWife.d and Blackmail.E will "attack" February 3. The worm...
WMF Zero-day Exploit
An attacker can gain user level control if you open an image in IE or windows explorer. The exploit was revealed before a patch was available to fix it:
http://www.securityfocus.com/brief/89
Sin...
A Retrospective of 2005
This has been an interesting year for viruses. Most viruses have been recycled worm routines, incorporating lists of the newest (and some old) Windows OS and software exploits. The most popular m...
Sober sends Registration Confirmation
Be aware of a new Sober variant making its way around the Internet. It sends an email with the following details:Subject: Registration ConfirmationMessage: Thanks for your registration.Your data a...
Online Banking to Become More Complex by End of 2006
By the end of 2006, you won't be able to log on to your bank's site with just a username and password.
Banks are required to implement two-level (or two-factor) authentication, meaning that not o...
Sober gives you Your New Password
A new Sober variant is making its rounds, attempting to convince unsuspecting people that their network administrator has changed their password.The email the worm sends is not particularly convinc...
Virus Shuts Down Customs' Computers
It appears that a virus took down the computer system that U.S. Customs relies on, as noted in this article. The article does not identify the virus, but does explain that the downtime impacted ai...
Plug and Play Spreads Zotob
On Tuesday, August 9th 2005, Microsoft released a series of patches, one of which is for a serious exploit in the Plug and Play service that allows remote code execution. Within a few days, a new ...
Spammer Pays $7 Million to Microsoft in Settlement
Scott Richter, owner of OptInRealBig.com, has agreed to pay $7 million to Microsoft. Spam traps had caught 8,000 emails in May and June, identifying Richter as one of the top three spammers in...
Open now and verify your email at eBay
This is a phishing scam and is to be ignored. It comes from "aw-confirm@ebay.com".
Dear eBay User,
Due to recent activity, including possible unauthorized listings, we
have temporar...
Home
|
