Zeus Source Code Leaked
The source code to the infamous Zeus crimeware kit, which has been sold on underground forums for years, has been leaked and is now available for anyone to see if they know where to look.
Dennis Fisher
About
Dennis Fisher is a journalist with more than 13 years of experience covering information security.
Researchers Say New Bugs Can Bypass Google Chrome Sandbox
Researchers at the French security firm VUPEN say that they have discovered several new vulnerabilities in Google Chrome that enable them to bypass the browser’s sandbox, as well as ASLR and DEP and run arbitrary code on a vulnerable machine.
Skype Planning Patch for Mac OS X Client Flaw
Skype users on Mac OS X are dealing with some confusing information at the moment about whether Skype has fixed a remotely exploitable bug in the Mac client that was reported several weeks ago. The company said it released a patch in an optional minor update nearly a month ago, but it will push out another fix this week that will force users to upgrade.
The OpenID Foundation is warning users about a weakness in the software that could enable an attacker to change some of the data that’s exchanged between parties that use OpenID. The group is telling sites that implement OpenID to update to a new version in order to fix the problem.
Apple has released iOS 4.3.3, a firmware update for the iPhone, iPod Touch and iPad that, among other things, fixes the controversial issues surrounding the location tracking capabilities of those devices.
Sony executives say that the people responsible for the attack that forced the company to shut down its PlayStation Network and other services and compromised data belonging to 77 million customers were “very professional, highly sophisticated” criminals who were able to infiltrate several of the company’s servers and remove an unknown amount of data.
The upcoming release of Adobe Flash Player 10.3 will give users of most of the major browsers the ability to delete Flash cookies in much the same way that they’re able to erase normal Web cookies, thanks to a better integration with privacy settings in Internet Explorer and Google Chrome.
As the concerns surrounding the data collected and transmitted by mobile apps continue to grow, Whisper Systems, a small start-up, has released WhisperMonitor, a free tool that enables owners of Android phones to control exactly what each of their installed apps can do and monitor what data is sent out from the device.
As has become their custom, attackers and malware authors jumped on the death of Osama Bin Laden Monday, using black hat SEO, Facebook scams and Twitter spam. However, unlike other recent major news events, the attempts to lure people into clicking on malicious links or downloading Trojaned files were not very successful.
Crimeware kits have become a ubiquitous part of the malware scene in the last few years, but they have mainly been confined to the Windows platform. Now, reports are surfacing that the first such kit targeting Apple’s Mac OS X operating system has appeared.
