Last month, when Google researcher Tavis Ormandy released details on a critical Help and Support Center vulnerability that exposed Windows XP and Windows Server 2003 users to malicious hacker attacks, Microsoft was publicly unhappy with the decision.
Unless thousands of companies still using Windows XP SP2 computers
suddenly stop procrastinating, hackers are going to be in seventh heaven come July 13. Read the full article. [The Last Watchdog]
A new report shows that the number of reported vulnerabilities in major commercial software products is accelerating, and that Apple’s products now have more vulnerabilities than those of any other major vendor. Perhaps more importantly, though, is the fact that third-party applications now account for the vast majority of flaws on most computers.
The number of vulnerabilities in the first half of 2010 was close to the
number recorded in the whole of 2009. Read the full article. [The Register]
FBI agents have raided the homes of three alleged members of a hacker
gang that harassed a security expert who helped put the group’s leader
in jail, according to a recently unsealed search warrant affidavit. Read the full article. [Wired]
by Nicolas Brulez
We’ve blogged a few times about rogue AV, explaining how search
engines have been abused using Black Hat Search Engine Optimization
techniques to redirect web surfers to rogue AV websites. Recently, we’ve noticed that the rogue AVs being spread are all
equipped with an “Online Support” button.
A security expert has released a stripped-down Ubuntu distribution designed specifically for reverse-engineering malware. The OS, called REMnux, includes a slew of popular malware-analysis, network monitoring and memory forensics tools the comprise a very powerful environment for taking apart malicious code.
A group of code breakers believe they have
successfully reverse engineered Skype’s implementation of the RC4
cipher, one of several encryption technologies used by the
consumer-oriented VoIP service. Read the full article. [The Register]
By Costin RaiuRecently, I was sitting around with a number of colleagues from Kaspersky Lab, discussing everybody’s favorite subject: the state of anti-virus testing these days. During the talks, somebody brought up the name of a new, obscure testing organization in the Far East. Nobody else had ever heard of them and so my colleague Aleks Gostev jokingly called them a “rogue Andreas Marx.”
Mobile malware that affects Symbian Series 60 handsets is being used to
create a botnet. Read the full article. [The Register]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
