Malware

DHS Studying Global Response to Conficker Botnet

One year after the Conficker botnet was front-page news around the world, the U.S. Department of Homeland Security is preparing a report looking at the worldwide effort to keep it in check.The report, to be published within the month, shows how an ad hoc group of security researchers and Internet infrastructure providers banded together into an organization they called the Conficker Working Group. Its goal was to address what was at the time the world’s most serious cyberthreat.  Read the full story [IDG News Service]

Mozilla Plugs Firefox Pwn2Own Security Hole

Mozilla is the first browser vendor to fix a vulnerability exploited at this year’s CanSecWest Pwn2Own contest.Just one week after a U.K.-based hacker known as “Nils” broke into a 64-bit Windows 7 machine with a Firefox vulnerability, the open-source group shipped Firefox 3.6.3 to plug the security hole.

Red Hat OpenJDK 1.6.0 Fixes Security Vulns

Red Hat has released an OpenJDK 1.6.0 security update for Red Hat Enterprise Linux 5. The update comes after Oracle updated Java 6 with Update 19 and addresses many of the same vulnerabilities. Read the full article. [The H Security]

Google: Kernel Flaws in Windows, Linux, VmWare

by Donald Sears

CanSecWest: Two security researchers at search engine giant Google have discovered
20 kernel bugs, about half remaining unpatched, affecting Windows,
Linux and the popular VMware virtualization software over the last
several years. Read the full article. [TechTarget]

Adobe, FoxIt Investigating Way to Mitigate PDF Hack

by Ryan Naraine

Security response teams at Adobe and FoxIt are investigating ways to mitigate a new PDF hack that allows the execution of an embedded executable without exploiting any security vulnerabilities.A demo of the PDF hack has been published to show how a hacker could employ social engineering techniques to launch code execution attacks if a user simply opens a rigged PDF file.

Remember Aurora–and Other Botnets

by Gunter Ollmann, Damballa

By Gunter Ollmann, DamballaLast night my attention was drawn to a couple of blog entries
relating to Google and the attacks they fell victim to earlier this
year. These attacks were eventually labeled as “Operation Aurora” by
McAfee (based upon the presence of the “aurora” keyword embedded within
some of the malware).

Malware Trojan Wars: SpyEye Vs. ZeuS

by Donald Sears

The latest rivalry appears to be budding between the author of the Zeus Trojan— a crime kit used by a large number of cyber thieves — and “SpyEye,” a
relatively new kit on the block that is taking every opportunity to
jeer at, undercut and otherwise siphon market share from the mighty
Zeus. Read the full article. [Krebson Security]

MS Discovers Over 1,800 Office 2010 Bugs

by Donald Sears
2

Microsoft uncovered more than 1,800 bugs in
Office 2010 by tapping into the unused computing horsepower of idling
PCs. Office developers
found the bugs by running millions of “fuzzing” tests, said Tom
Gallagher, senior security test lead with Microsoft’s Trustworthy
Computing group. Read the full article. [Computerworld]

Cybersecurity for your growing business
Cybersecurity for your growing business

Topics

Show all

Authors

Threatpost

InfoSec Insider

Infosec Insider Post

Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.

Sponsored

Sponsored Content

Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.