Vulnerabilities


Geek.com Hacked, Found Hosting Exploit Kit

The security geeks at Geek.com were busy this weekend, after Web security firm zScaler found evidence that an exploit kit was using malicious iframe attacks to try to attack visitors to the company’s Web site, according to a Zscaler report Sunday.

A Saucy Twitter-Fight Vupen Researchers and Google Engineers

There has been a bit of back and forth quibbling going on between researchers at French security firm Vupen, claiming to have found and exploited a vulnerability in Google’s Chrome browser, and security researchers at Google, who claim the bug they exploited was actually in Adobe Flash, and therefore, was “Not a Chrome pwn.”


The last year or so has seen a series of high-profile targeted attacks against corporate and government networks, including the Aurora attack on Google and others, the intrusion at RSA and the recent attack on the Sony PlayStation Network. But a new report from Microsoft shows that attackers increasingly are going after consumers with highly refined phishing attacks based on social networks.

Like bank robbers, attackers tend to go where the money is and increasingly that means that they’re going after consumers. In this video, members of the Microsoft anti-malware team discuss the trend toward cybercrime rings employing sophisticated sales and marketing tactics to target consumers, as well as some of the exploit trends from recent months.