Donald Sears

Researchers Find Malware in Zip Files

Security researchers have discovered flaws in common file formats,
including .zip, which can be used to sneak malware onto computers by
evading antivirus detection and will present their findings at Blackhat Europe. Read the full article. [CNet]


New research from Google underscores the breadth of fake antivirus operations on the Web. An analysis of 240 million Web pages collected by Google’s malware detection infrastructure over a 13-month period discovered more than 11,000 domains involved in the distribution of rogue antivirus (AV). Read the full article. [eWEEK]

Oracle has dealt a sweeping blow to vulnerabilities in its
quarterly Critical Patch Update (CPU). The vendor closes a total of 47
holes in many of its products, among them the database, the business
suites, Sun Solaris and the Java System Directory Server. Read the full article. [The H Security]

US brokerage D.A. Davidson has agreed to pay $375,000 to settle charges
that lax security practices allowed criminal hackers from Latvia to
pilfer the confidential information of some 192,000 of its customers. Read the full article. [The Register]

Microsoft took steps Tuesday to avoid repeating the debacle two months
ago that left Windows XP users staring at the notorious “Blue Screen of
Death” error message after they applied a patch. Read the full article. [Computerworld]