Ten Years After the LoveBug Worm
The LoveBug worm, a simple email that spread a virus to millions of computers a decade ago, paved the way for many of today’s social engineering and targeted cyber attacks. Read the full article. [CSO]
Web Security
Practical Return-Oriented Programming
In this video from the SOURCE conference in Boston, security researcher Dino Dai Zovi discusses the details of return-oriented programming and the ways in which it can be used to exploit vulnerabilities.
Google Releases Web App Security Course
Google has released a new online training course for Web application developers designed to teach them how to avoid common programming mistakes that lead to vulnerabilities such as cross-site scripting, cross-site request forgery and others.
HD Moore, the founder of the Metasploit Project and now the CSO of Rapid7, talks at the SOURCE conference in Boston about the mainstream acceptance and importance of penetration testing.
A smiley-faced instant message with a photo link
posing as if it’s from someone on your buddy list is actually spreading
misery worldwide in the form of a worm on Yahoo Instant Messenger: The
IM ultimately delivers a worm that allows an attacker to take over the
victim’s machine, not to mention spread itself among the victim’s
contact list. Read the full article. [Dark Reading]
Websites operated by the US Treasury Department are redirecting visitors
to websites that attempt to install malware on their PCs, a security
researcher warned. Read the full article. [The Register]
Buffer overflows have been a serious security problem for software developers for several decades now, but the history of exploitation research on this class of flaws is relatively short.
Two of the accused Mariposa botnet operators in Spain requested jobs at Panda Security in March some 2 months after their arrest, according to a Panda Security official. Read the full article. [KrebsonSecurity]
Microsoft should add a basic PDF viewer to Windows to help protect users
from the spike in attacks exploiting bugs in Adobe’s Reader, said a security
researcher. Read the full article. [Computerworld]
A fake Facebook toolbar email hides a piece of Trojan Horse malware. Researchers warn to look at the file names for suspicious activity. Read the full article. [Help Net Security]
