Stuxnet Code Now Available to Hackers, Posing Major Threat to Infrastructure

According to a report from Sky News, the Stuxnet worm has already been traded on the black market. The report does not specify whether this refers to the source code or binary samples. British security specialists now fear that terrorists could use the worm to attack critical infrastructure. The...

Gary McGraw on Cyber War, Cyber FUD and Rhetoric

Dennis Fisher talks with Gary McGraw of Cigital about the current climate of FUD and rhetoric surrounding cyber war and cyber espionage, the state of software security in the government and military and the potential need for a software Cash for Clunkers program. Show notes: Cyberwarmongering and...

Infected Web sites double in 2010 : A Report

The number of Web sites infected with malware has doubled from a year ago to more than 1.2 million, according to a study released today by Internet security company Dasient. Not only are social-media sites getting targeted, but sites of larger government agencies increasingly are hit, including t...

CVE-2010-3915

Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers to execute arbitrary code via a crafted document, a different vulnerability than CVE-2010-3916...

CVE-2010-3916

Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers to execute arbitrary code via a crafted document, a different vulnerability than CVE-2010-3915...

Code injection

Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers to execute arbitrary code via a crafted document, a different vulnerability than CVE-2010-3915...

Code injection

Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers to execute arbitrary code via a crafted document, a different vulnerability than CVE-2010-3916...

CVE-2010-3915

CVE-2010-3915 concerns JustSystems Ichitaro (2004–2010). Public sources describe multiple remote code execution vulnerabilities that can be triggered by opening a crafted document, enabling arbitrary code execution on affected hosts. The OpenVAS entries explicitly label multiple RCE vulnerabiliti...

CVE-2010-3916

Consolidated data from the connected docs show JustSystems Ichitaro (including Ichitaro Government) is affected by multiple remote code execution vulnerabilities (CVE-2010-3915 and CVE-2010-3916) that can be triggered by opening a crafted document. The OpenVAS entries describe these as remote cod...

CVE-2010-3916

Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers to execute arbitrary code via a crafted document, a different vulnerability than CVE-2010-3915...

CVE-2010-3915

Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers to execute arbitrary code via a crafted document, a different vulnerability than CVE-2010-3916...

VulnCheck KEV: CVE-2010-3916

Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers to execute arbitrary code via a crafted document, a different vulnerability than CVE-2010-3915...

VulnCheck KEV: CVE-2010-3915

Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers to execute arbitrary code via a crafted document, a different vulnerability than CVE-2010-3916...

Massive Denial Of Service Attack Severs Myanmar From Internet

The nation of Myanmar, formerly known as Burma, found its access to the Internet severed by a massive denial of service attack, according to a report by Arbor Networks. The source or motivation of the attack isn’t known, but it is believed that the distributed denial of service DDoS attacks have...

Canada Aims to Strengthen Cyber Defense with $90 Million Security Plan

Canada released its Cybersecurity Strategy this month, emphasizing the immense challenge of protecting government and corporate computer systems. “There is no simple way to detect, identify, and recover from attackers who cannot be seen or heard, who leave no physical evidence behind them, and wh...

VUPEN Security Research - Microsoft Office Word Document Array Indexing Vulnerability (CVE-2010-2750)

VUPEN Security Research - Microsoft Office Word Document Array Indexing Vulnerability CVE-2010-2750 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Microsoft Office Word, included in the Microsoft Office suite, is a powerful authoring program that gives the ability t...

VUPEN Security Research - Microsoft Office Excel Out-of-Bounds Memory Write Vulnerability (CVE-2010-3241)

VUPEN Security Research - Microsoft Office Excel Out-of-Bounds Memory Write Vulnerability CVE-2010-3241 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Microsoft Office Excel is a powerful tool you can use to create and format spreadsheets, and analyze and share...

The Folly of Internet Wiretapping

The last 10 years have seen a great number of advancements in the sophistication and usability of strong encryption programs, and many people now use encrypted messaging services by default. This has made it much simpler for people to keep their private thoughts and data private and secure, and n...

Report: Reused, Third Party Code Major Sources of Insecurity

A new report out from security testing firm Veracode suggests that reused and third party code is a big source of application insecurity. Application security is a sore spot for many organizations, as attackers shift the battlefield from operating system and network attacks to application specifi...

NSA Director Says U.S. Has a Duty to Secure the Internet

WASHINGTON, D.C.–The United States has a responsibility to take a leadership role in securing the Internet against both internal and external attackers, a duty that the federal government takes very seriously, the country’s top military cybersecurity official said Tuesday. However, Gen. Keith...