Donald Sears

How Japanese ISPs Deal with Botnets

Japan’s “Cyber Clean Center” is a little-known effort by the Japanese Computer Emergency Response Team Coordination Center (JP-CERT) and a collection of 76 Japanese ISPs covering 90 percent of the nation’s Internet users to fight botnets and other security issues. Read the full article. [KrebsonSecurity]

MS Warns of Rogue Antivirus ‘Security Essentials’

Microsoft has warned Windows users to be on their guard against a piece of rogue antivirus software passing itself off as Microsoft Security Essentials. Security Essentials 2010 is a piece of software Microsoft said installs a fake virus scanner on your machine and]monitors and blocks processes it doesn’t like. Read the full article . [The Register]


When security professionals flock to San Francisco for next week’s RSA 2010 security conference, they will have access to a set of presentations and events not found on the official RSA agenda. It’s billed as an anti-conference of sorts; a place where practitioners can go for an alternate, stripped-down view of the industry. Welcome to Security B-Sides. Read the full article. [CSO]

An update which fixes around 40 bugs is available for the PHP 5.2
development branch. Version 5.2.13 comes highly recommended for all PHP
5.2.x users, as it includes a number of security-related fixes. Read the full article. [The H Security]

To improve the chances of installing their malware on random computers,
scareware peddlers have decided to set up more that 60 websites that
contain hundreds of possible search matches for hot, trending topics. Read the full article. [Help Net Security]

The Koobface botnet is the tip of the iceberg for the
malicious operations of the online crime ring. Here are the top 10 things you
didn’t know about the Koobface gang. Read the full article. [ZDNet]

Secunia reports a hole in Google’s Picasa image management and editing software that allows attackers to compromise Windows using specially crafted JPEG images to provoke an integer overflow in the PicasaPhotoViewer.exe file, which can then be exploited to cause a heap overflow. Google closed the hole in the recently released Picasa 3.6 build
105.41, although Google’s release notes say nothing about a fix. Read the full article. [The H Security]

With the help of a U.S. federal judge, Microsoft has struck a blow against one of the Internet’s worst sources of spam: the notorious Waledac botnet. Microsoft said that it had been granted a court order that will cut off 277 .com domains associated with the botnet. Read the full article. [Computerworld]