Lessons From the Rustock Takedown

As a follow-up to the Rustock botnet news, Microsoft have identified themselves as the key instigators of the takedown. This is the second time Microsoft’s legal team has been actively involved in combating the botnet menace – and they obviously learned from their previous attempt at trying to...

Step 2: Don't Pay

Don’t Pay! Whatever else you do not pay to “license” the scareware, says Brulez. Scareware and fake antivirus programs are malicious and are created and distributed by criminal organizations. Paying the licensing fee may temporarily free up your system and remove the fake warnings and alerts...

Experts Warn Of Japan Earthquake, Tsunami Spam

As the Pacific Rim braces for deadly Tsunami’s spawned by today’s magnitude 8.9 earthquake in Japan, the SANS Internet Storm Center says users should be on the lookout for a different kind of Tsunami: scam e-mail and Web pages looking to turn curiosity about the events in Japan into illicit gain...

Enable Media Replace WordPress Plugin Multiple Vulnerabilities

Exploit for php platform in category web applications PRODUCT NAME: Enable Media Replace WordPress Plugin PRODUCT URL 1: http://wordpress.org/extend/plugins/enable-media-replace/ PRODUCT URL 2: http://mansjonasson.se/wordpress-plugins/enable-media-replace/ PRODUCT AUTHOR: Mans Jonasson for .SE...

Adaptive Security Analyzer IIS : A Tool to Protect Windows Based Web Servers !

Adaptive Security Analyzer IIS or the ASA IIS protects Windows-based web servers from known and unknown vulnerabilities like Directory Traversal, Buffer Overflow, Parser Evasion, High-bit Shellcode, Remote Data Services, In addition to the above, it also protects them from various types of intern...

Google and Godaddy Head Coalition Against Rogue Pharmacies

Herbal Viagra peddlers beware: Google and GoDaddy are coordinating the establishment of a non-profit organization dedicated to curbing the spread of illegal online pharmaceutical companies. The two firms plan to share information and work together to educate consumers about the dangers of buying...

Healthcare Breaches Outpace Financials in 2010

Healthcare data breaches have swollen in 2010: Identity Theft Resource Center reports show that compromised data stores from healthcare organizations far outstrip other verticals this year. Read the full article. Dark Reading...

Attacks Cost $3.8 Million on Average Per Year

Organizations are getting hit by at least one successful attack per week, and the annualized cost to their bottom lines from the attacks ranged from $1 million to $53 million per year, according to a newly published benchmark study of 45 U.S. organizations hit by data breaches. Read the full...

The Rise of the Rogue AV Testers

By Costin Raiu Recently, I was sitting around with a number of colleagues from Kaspersky Lab, discussing everybody’s favorite subject: the state of anti-virus testing these days. During the talks, somebody brought up the name of a new, obscure testing organization in the Far East. Nobody else had...

Researcher to Release Hacker Footprint Tool

A researcher at Black Hat USA next month plans to give away a homemade tool that helps organizations glean intelligence about the attacker behind the malware that includes information about native tongue, geographic location, and ties to other attacks. Read the full article. Dark Reading...

178 Busted in Credit Card Cloning Scheme

Authorities in 14 countries raided stolen credit card groups and six cloning labs manned by criminal organizations in the U.S., Spain, France, Germany, Italy, Ireland with arrests in Australia, Sweden, Greece, Finland and Hungary. Read the full article. Reuters Read the Interior Minister statemen...

Novell GroupWise Messenger HTTP Response Handling Stack Overflow (CVE-2008-2703)

Novell GroupWise Messenger is a corporate instant messaging solution targeting toward medium to large enterprise organizations. It facilitates secure communications and policy-based management through Novell's eDirectory product suite. The product is based on a client-server model where messaging...

Update Protection against Trojan.Sasfis

Malware is a software designed to infiltrate or damage a computer system without the owner's informed consent. It is a general name for a variety of forms of hostile, intrusive, or annoying programs like Viruses, worms, Adware, Trojans, and spyware that exploit unprotected clients, using network...

Drupal Storm 1.32 Cross Site Scripting

Drupal Storm module is a CRM type module that allows you to make orgs, people, tasks, and project. It is used on thousands of sites according to http://drupal.org/project/usage/storm. Storm version 1.32 have a lots of cross site scripting vulns. Sploits - Make or view a Storm organization at...

Dental Practice Loses $200K to Criminals

Organized computer criminals yanked more than $200,000 out of the online bank accounts of a Missouri dental practice this month, in yet another attack that exposes the financial risks that small- to mid-sized organizations face when banking online. Read the full article. KrebsonSecurity...

FBI Identifies Top 10 Jobs in Cybercrime

Criminal hacker organizations are operating with increasing corporate-life efficiency, specialization and expertise, said the FBI at FOSE conference. Here are the top ten operational positions in a cybercrime group. Read the full article. Computerworld...

Which ISPs Are Hosting the Bad Guys?

Security blogger Brian Krebs has compiled lists of the top 10 ISPs who are hosting the worst botnets, spam, phishing, and other malware from independent tracking organizations. These lists come from: Stop Badware, F.I.R.E., Phishtank, Zeustracker, Malware Domain List, Arbor Top ASN List, Emerging...

Domains Using .Org to Have Tighter Security

The Public Interest Registry will add an extra layer of security known as DNS Security Extensions DNSSEC to the .org domain in June — a move that will protect millions of non-profit organizations and their donors from hacking attacks known as cache poisoning. Read the full article. Network World...

Operation Aurora Still Out There

The targeted attacks that hit Google, Adobe, and other U.S. organizations are still ongoing and have affected many more companies than the original 20 to 30 or so reported by Google and others. One researcher believes they are close to naming the suspected coder. Read the full article. Dark Readi...

Microsoft Tries to Boost SDL Adoption

Microsoft is trying to boost adoption of the software security practices in its Security Development Lifecycle by releasing a revised set of instructions to make implementation of the process easier and faster. At the Black Hat DC conference on Tuesday, the company announced the release of its...