|
RSS |
Security software
|
|
Security news
|
Sunday, 03 June 2007 |
PandaLabs has detected a wave of spam containing the Pirabbean.A Trojan. This junk mail tries to attract users’ attention with references to the latest episode of the Pirates of the Caribbean saga. The email includes an image that looks like promotional material for the film and claims to contain a trailer. The message subject simply says: “Pirates of the Caribbean: At world’s end”.
|
|
Read more...
|
|
|
Friday, 01 June 2007 |
This week’s PandaLabs’ report focuses on the Bankey.A, BankFake.A,
Ketawa.A and the Opticibot.A Trojans and informs about Braban.F, a worm
that spreads through MSN Messenger.
BanKey.A and BankFake.A have
similar characteristics. Both banker Trojans display a spoof online
banking screen and offer users the possibility of entering their bank
details (account numbers, passwords,…). If users enter the information,
it is immediately sent by email to the malware creators.
|
|
Read more...
|
|
|
Thursday, 31 May 2007 |
|
US-CERT reports that 92 security products by different vendors,
including Cisco, may have a serious security hole. Given these
products' market share, most businesses could be affected. The U.S. Computer Emergency Response Team is reporting
a network evasion technique that uses full-width and half-width unicode
characters to allow malware to evade detection by an IPS or firewall.
The vulnerability affects virtually every major firewall and intrusion
prevention system available, including products from Cisco Systems.
Given Cisco's major share of the market, at least for enterprise
routers and VPN and firewall equipment—according to Gartner, Cisco was
at the top of the heap with 66 percent of that market in 2006—that
means most businesses will be affected.
|
|
Read more...
|
|
|
Thursday, 31 May 2007 |
|
The growing use of JavaScript in web browsers is the new security weak
spot, says Brian Chess, chief scientist and founder of US security
software specialist Fortify Software. Specifically, the use of Ajax
techniques to build Web 2.0 applications makes enterprise applications
more vulnerable. "It is really hard to see the difference between what
Ajax is supposed to do and what is an attack from hijacking
JavaScript," Chess says. "Potentially it provides a bridge between
external internet applications and internal intranet applications
behind the firewall."
|
|
|
Tuesday, 29 May 2007 |
The
US-CERT Cyber Security Bulletin provides a summary of new
vulnerabilities that have been recorded by the National Institute of
Standards and Technology (NIST) National Vulnerability Database (NVD)
in the past week. The NVD is sponsored by the Department of Homeland
Security (DHS) National Cyber Security Division (NCSD) / United States
Computer Emergency Readiness Team (US-CERT). For modified or updated
entries, please visit the NVD, which contains historical vulnerability information.The vulnerabilities are based on the CVE vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores:
- High - Vulnerabilities will be labeled High severity if they have a CVSS base score of 7.0 - 10.0
- Medium - Vulnerabilities will be labeled Medium severity if they have a CVSS base score of 4.0 - 6.9
- Low - Vulnerabilities will be labeled Low severity if they have a CVSS base score of 0.0 - 3.9
|
|
Read more...
|
|
|
Tuesday, 29 May 2007 |
|
Estonia has urged its allies in the European Union and NATO to take
firm action against a new mode of warfare that has been unleashed on
the Baltic state in a bitter row with Russia over a Soviet war
memorial: cyber-attacks. "Taking into account what has been going on in
Estonian cyber-space, both the EU and NATO clearly need to take a much
stronger approach and cooperate closely to develop practical ways of
combatting cyber-attacks," Estonian Defence Minister Jaak Aaviksoo told
AFP Tuesday.
|
|
|
Tuesday, 29 May 2007 |
|
This week’s report focuses on the Nurech.A, Nuwar.D and Hati.A worms, and the WindowsDisabler.A Trojan.
Nurech.A and Nuwar.D both spread in the same way. These malicious codes exploit the theme of Valentine’s Day by concealing themselves in emails with a range of romantic subjects. One subject used by the Nurech.A worm is "Together You and I" and another by Nuwar.D is "5 reasons I love you". The attached file contains a worm in the form of an executable file with names like flash postcard.exe or greeting postcard.exe.
|
|
Read more...
|
|
|
Saturday, 03 February 2007 |
|
Keyloggers, a type of malware that tracks a person's keystrokes through either hardware or software may be one of the lesser-known IT security threats, but, according to a just-released McAfee white paper, they are very much on the rise -- and a booming business for cyber-criminals. The Internet security company recently released “Identity Theft,” a white paper by McAfee Avert Labs' senior virus research engineer Francois Paget, that details how the perpetrators go about obtaining the information. The first key finding relates the fact that, “between January 2004 and May 2006, the number of keyloggers increased by 250 per cent.” |
|
Read more...
|
|
|
Saturday, 03 February 2007 |
|
A new technique being employed by malicious spammers is testing the ability of e-mail filtering technologies to tell the difference between legitimate newsletter content and messages bearing unwanted advertisements and hidden links to malware sites. According to researchers at security software market leader Symantec, a new trend is rapidly emerging among bulk spammers where the creators of the annoying and often dangerous messages are disguising their work using real content distributed in genuine electronic newsletters. By carefully recreating e-mail newsletters and marketing materials sent to customers from well-known sources such as eBay, ESPN and Wal-Mart, spammers have found a new way to circumvent many filtering systems and sneak their work into users' in-boxes, said Doug Bowers, senior director of anti-abuse engineering at Symantec. |
|
Read more...
|
|
|
Saturday, 02 December 2006 |
Apple has published a security update for Mac OS X to fix several problems and vulnerabilities. This update can be downloaded from Apple.com
The security update 2006-007 resolves over 20 vulnerabilities affecting Mac OS X, Mac OS X Server and the Safari web browser. It also fixes flaws in PHP, Perl, OpenSSL, gzip and other products included in Mac OS X. |
|
Read more...
|
|
| << Start < Prev 1 2 3 4 5 6 7 8 9 10 Next > End >>
| | Results 21 - 30 of 135 |
|
Security news