The Global Cyber War from MentalWardPublishing.com presented free by McGuinnessPublishing.com
A just-published attack tactic that bypasses the security protections of most current antivirus software is a “very serious” problem, an executive at one unaffected company said.
Last week, researchers at Matousec.com outlined how attackers could exploit the kernel driver hooks that most security software use to reroute Windows system calls through their software to check for [...] Read more »
A section of the Web site for China’s state-run Xinhua news agency was found to be distributing malware last month, according to a Google malware scanning service that is still labeling the site as potentially harmful.
The “news center” section of the Xinhua’s Web site, which displays a feed of the agency’s stories, was found to [...] Read more »
Mozilla patched more than one vulnerability in Firefox when it updated the browser to version 3.6.2 on Monday, the company confirmed today.
A total of 10 flaws were fixed in Firefox 3.6.2, according to Mozilla’s security advisory page, but details of others have been withheld until the company updates the older Firefox 3.0 and Firefox 3.5 [...] Read more »
Browser vendors have been put on alert this week as security researchers at the Pwn2own competition at the CanSecWest conference in Vancouver successfully exploited Microsoft Internet Explorer 8, Safari, and Firefox. On the mobile side, an iPhone was shown to be exploitable, too.
The Pwn2own event tests fully patched versions of software for vulnerabilities and then [...] Read more »
Microsoft said on Friday it is testing a patch to fix a new hole in Internet Explorer 6 and IE 7 following the release of exploit code on the Internet.
With the announcement it seems increasingly likely that the company will be issuing a patch for the hole before the next Patch Tuesday in about four [...] Read more »
A freelance security consultant in China wrote the exploit code targeting Internet Explorer 6 that was used in the attacks on Google and others, according to a published report.
The unidentified programmer had posted pieces of the exploit to a hacking forum, and Chinese officials had “special access” to his work, the Financial Times reported on [...] Read more »
US investigators are hot on the trail of an enigmatic Chinese hacker who allegedly developed the “critical” programming code used to attack Google and other western companies.
According to the Financial Times, positive identification of the accused hacker would make it “far harder” for the Chinese government to deny its involvement in the recent cyber offensive.
“A [...] Read more »
In April 2008, Microsoft released Security Advisory 951306 to alert users of a vulnerability in Microsoft Windows. This vulnerability may allow local users, or users who can legitimately run code in the context of IIS or SQL Server, to operate with elevated privileges. Recently, Microsoft Security Response Center (MSRC) posted several blog entries indicating that [...] Read more »
Symantec has raised the Threatcon to Level 2 due to detection of an in the wild exploit of MS08-021 which allows remote code execution.
From NIST Security News … Read more »
Loading ... Loading ...
Posts
