Malware


Microsoft Proposes ‘Health Certificates’ For Internet Access

Microsoft is proposing a new Internet-wide security model, based on the concepts of public health, that is designed to address the problem of how to prevent infected machines from affecting the security and performance of PCs elsewhere on the Web. The model would require each PC to present a “health certificate” that outlines its security posture before it could connect to the Internet.

Rethinking Stuxnet

It’s hard to think of a story in the last few years that has generated more hype, conjecture, posturing, hyperbole and misdirection than Stuxnet, with the possible exception of the Aurora attacks. The commentary and hype around Stuxnet has shifted and morphed over the last few months, and now it seems to have coalesced around the idea that the malware was the work of Israeli intelligence and targeted specifically at Iran’s nuclear program. But this line of thinking fits together all too easily and has a number of inherent flaws.

Week in Review: Stuxnet Redux and The Wire’s D.C. Edition

Stuxnet Redux and The
Wire: United States

Governments, the Internet and security were the theme as Internet wiretapping, trans national cyber laws and the further
proliferation of Stuxnet – a computer virus believed to have state backing – topped this week’s news.


Adobe is moving up the release date for the patch for the critical bug in Reader and Acrobat and will now push the fix out on Oct. 5 instead of the following week. The flaw was disclosed last month and has been the target of attacks for several weeks now.

We know Stuxnet has caused some major disruptions in nations like Iran and India. But how, exactly, does it work? In this video, Symantec researcher Liam O’Murchu demonstrates how a Stuxnet infected programmable logic controller (PLC) by Siemens can instruct a piece of machinery to run out of control.

VANCOUVER – Working as Facebook’s resident malware researcher is a lonely job, for now. But Nick Bilogorskiy doesn’t expect it to stay that way. In fact, Facebook’s biggest security challenge will be building up its capabilities to identify and tamp down malware infections like the 2009 Koobface worm.

The Manhattan district attorney on Thursday announced charges against 36 people in connection with the operation of the Zeus malware campaign. It’s the second major bust of suspects in the Zeus investigation this week, following the arrest of 20 people in the U.K. on Tuesday. The U.S. Attorney in New York also announced charges against 34 other people in connection with the same operation.