New Malware Murofet Following Conficker's Lead

It’s been a blissful few months since Conficker last reared its over-hyped head, but now there’s a new piece of malware that is adopting some of the tactics that Conficker used. The malware, known as Murofet, is using Conficker’s technique of generating thousands of new domains for updates every...

Cryptome Outs Identities of Hackers Behind Breach

Less than a week after the Cryptome.org archive was hacked and defaced, the site has posted the names, addresses and phone numbers of two individuals it accuses of being involved in the attack. In an update on Friday, Cryptome founder John Young posted contact information for three individuals he...

USN-1002-1: PostgreSQL vulnerability

It was discovered that PostgreSQL did not properly enforce permissions within sessions when PL/Perl and PL/Tcl functions or operators were redefined. A remote authenticated attacker could exploit this to execute arbitrary code with permissions of a different user, possibly leading to privilege...

Facebook's Future: More Koobfaces

VANCOUVER – Working as Facebook’s resident malware researcher is a lonely job, for now. But Nick Bilogorskiy doesn’t expect it to stay that way. In fact, Facebook’s biggest security challenge will be building up its capabilities to identify and tamp down malware infections like the 2009 Koobface...

FBI Wants to Mandate Surveillance Backdoors

Federal law enforcement and national security officials are preparing to seek sweeping new regulations for the Internet, arguing that their ability to wiretap criminal and terrorism suspects is “going dark” as people increasingly communicate online instead of by telephone. Read the full article...

Пресечена деятельность хакеров-вымогателей

Источник: http://www.kguvd.ru/news/7 Когда: 31 Августа, 2010 Оперативники отдела "К" и УБЭП ГУВД Москвы пресекли деятельность группы хакеров, заражавших вредоносными программами компьютеры пользователей и вымогавших деньги за разблокировку. Деньги взимались с помощью платных SMS стоимостью от 300...

Researchers Find Malware on My Opera Page

Researchers have discovered that a page on the My Opera community Web site is hosting malware related to an IRC botnet. The discovery comes just a couple of weeks after malicious code also was found on Google Code servers. On Thursday, a researcher perusing a page on the My Opera community site...

Botnet-For-Hire Model Resurfaces in New IMDDOS Botnet

Researchers have identified a new botnet based in China that was openly selling DDoS-for-hire services and had managed to plant roots inside a number of major U.S. ISPs. The botnet, known as IMDDOS, is mostly contained right now and the researchers are working with authorities to locate its...

Spammers Moving to Disposable Domains

Spammers and the botnet operators they’re allied with are continuing to adapt their techniques to evade security technologies, and now are using what amount to disposable domains for their activities. A new report shows that the spammers are buying dozens of domains at a time and moving from one ...

FBI Could Not Crack Encryption

Cryptographic locks guarding the secret files of a Brazilian banker suspected of financial crimes have defeated law enforcement officials including code breakers at the FBI. Read the full article. The Register...

Inspector General Talks Limitations of US-CERT

DHS Inspector General Richard Skinner spoke before the House Committee on Homeland Security yesterday and detailed his office’s latest report on the progress US-CERT has made in securing cyberspace and included noting limitations with enforcement, staffing and strategic planning. Read the full...

FBI Plans to Chase Online Money Mules

The FBI’s top anti-cyber crime official today said the agency is planning a law enforcement action against so-called “money mules,” individuals willingly or unwittingly roped into helping organized computer crooks launder money stolen through online banking fraud. Read the full article...

EC Considering Cybercrime Division

European ministers are considering establishing a new agency that would tie together law enforcement agencies and other entities dedicated to fighting cybercrime. The Council of the European Union, composed of ministers from 27 countries, issued a document earlier this week calling for the Europe...

Mozilla Firefox showModalDialog Cross-Domain Scripting Vulnerability

This vulnerability allows remote attackers to bypass specific script execution enforcements on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the lack of cross doma...

AIX 530011 : U829912

The remote host is missing AIX PTF U829912 which is related to the security of the package devices.pciex.14104003.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Wiretapping Flaws Found in Cisco Web Surveilliance

An IBM ISS researcher at Black Hat DC revealed major security holes in a little-known wiretapping architecture for IP networks created by Cisco Systems for law enforcement. The weaknesses could result in an attacker interfering with legal surveillance or performing some unauthorized surveillance ...

The Danger of Open APIs

Ninety years ago KitchenAid released their first countertop mixer, which weighed in at about 69 pounds. More interestingly, the mixer also had a special socket that allowed users to attach assorted add-ons for new functionality such as slicers, shredders and meat grinders. Today this sort of...

Can Howard Schmidt Make a Difference?

At first glance, the selection of Howard A. Schmidt as the White House Cybersecurity Coordinator looks like little more than a safe and easy choice designed to quiet the critics who for seven months have been howling for action from the Obama administration. But a closer look shows that Schmidt’s...

Attackers Buying Own Data Centers for Botnets, Spam

The malware writers and criminals who run botnets for years have been using shared hosting platforms and so-called bulletproof hosting providers as bases of operations for their online crimes. But, as law enforcement agencies and security experts have moved to take these providers offline, the...

Hackers Target MS Police Software

Hackers have released software they say sabotages a suite of forensics utilities Microsoft provides for free to hundreds of law enforcement agencies across the globe known as Computer Online Forensic Evidence Extractor COFEE. Read the full article. The Register...