Hackers Target Halloween Costume Searches with Fake Anti-Virus Trojans

Attackers are targeting people searching for last-minute Halloween costume ideas, reported CyberDefender on Oct. 29. The Internet security vendor, along with other firms like Blue Coat and BitDefender, warned users about the dangers of searching online for Halloween-related topics. "Popular searc...

couchdb code execution

Ralative path for dynamic library loading...

New Email Worm Turns Back the Clock on Virus Attacks

There appears to be an actual email worm in circulation right now, using the tried-and-true infection method of sending malicious emails to all of the names in a user’s email address book. As of Friday afternoon, the malicious files had been deleted from the remote server in the UK that was servi...

Vulnerability: be wary of“help and Support Center”uninvited-vulnerability warning-the black bar safety net

Microsoft has just released 6 months patch, Windows XP it also exposed a new HCP Protocol vulnerabilities. After 3 6 0 Security Center to verify, when the Windows XP users use IE series browsers open hung it to the web, or playing“the infected”of the music file, the PC will automatically...

KHOBE - 8.0 earthquake for Windows desktop security software

Hello, We have found number of vulnerabilities in implementations of kernel hooks in many different security products. The argument-switch attack or KHOBE attack affects user mode and kernel mode hooks that are used to implement security features. The hook may be vulnerable if it performs securit...

360杀毒和360安全卫士内核驱动多个本地拒绝服务漏洞

BUGTRAQ ID: 39936 360杀毒和360安全卫士都是在中国广泛使用的免费杀毒软件。 360杀毒和360安全卫士所使用的profos.sys和360FkAdv.sys驱动没有正确地验证从用户空间所传送的进程对象指针，本地用户可以通过提交恶意的IOCTL请求导致内核崩溃。 奇虎360 360安全卫士 6.1.5.1010 奇虎360 360杀毒 1.1.0.1096 厂商补丁： 奇虎360 ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.360.cn/...

UK Health System Infected by Data Worm

The UK’s National Health Service has been hit by a voracious, data-stealing worm that’s easily detected by off-the-shelf security software, according to researchers who directly observed the mass compromise. Read the full article. The Register...

The Lazy Programmer's Guide to Secure Computing

In this Google TechTalk, HP’s Marc Stiegler describes a different approach to security software...

Kingsoft DuBa Browser Shield ActiveX Remote Exec 0day POC

Date: 2010.01.17 Author: superli Software Link: http://i2d.www.duba.net/i2d/kws3/KWSSetup.exe Version: 3.0 Tested on: xpsp3 ie6 greeting to KingSoft,can you really help users avoiding being hacked ? this vuln almost effect in all of the duba security software. Code : object id=TestObj...

The Low-Down on Daonol

A relatively new trojan has been making the rounds and causing some problems, particularly on Windows XP systems. Trojan:Win32/Daonol is malware which hooks various system calls in order to steal credential information and redirect some web traffic. It also protects itself by keeping some...

Local privilege escalation vulnerability in Trustport security software

ShineShadow Security Report 28092009-10 TITLE Local privilege escalation vulnerability in Trustport security software BACKGROUND TrustPort is a major producer of software solutions for secure communication and reliable data protection. TrustPort products are characterized by a comprehensive...

Microsoft Takes Aim at Malvertising Threat

Less than a week after a malicious advertising attack against the New York Times ad servers, Microsoft filed five civil lawsuits against companies allegedly using online advertising to serve malware. The lawsuits allege that individuals using the business names “Soft Solutions,” “Direct Ad,”...

Microsoft Windows Kernel win32k.sys Privilege Escalation Vulnerability

Windows XP/2003 is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

DISPUTED The NtUserConsoleControl function in win32k.sys in Microsoft Windows XP SP2 and SP3, and Server 2003 before SP1, allows local administrators to bypass unspecified "security software" and gain privileges via a crafted call that triggers an overwrite of an arbitrary memory location. NOTE:...

CVE-2009-2653

Summary: CVE-2009-2653 affects Microsoft Windows XP (SP2/SP3) and Windows Server 2003 (pre-SP1) due to a flaw in the NtUserConsoleControl function in win32k.sys. The OpenVAS and related records describe a local privilege-escalation vulnerability in win32k.sys, enabling an administrator to elevate...

Gartner Sees Better Days Ahead For Security Budgets

From SearchSecurity.com Robert Westervelt The dismal economy has put the brakes on a lot of security projects, but the need to maintain the basics and automate some security functions has fueled interest in managed security services and some specific security areas, according to analysts at Gartn...

How to Avoid Scareware Attacks

From Just Ask Gemalto Dennis Fisher Computer users have been conditioned over the last few years to recognize and avoid many of the more common scams and threats on the Internet: email viruses, phishing, spam, Nigerian 419 ploys and work-at-home money-mule schemes. You know that an email promisin...

Prediction: Apple will recommend security software

From CNet Jon Oltsik As an analyst, it is my job to follow the industry, internalize trends, and then use this information to make predictions. OK, here goes: Within the next 18 months, Apple will begin recommending that Macintosh users install Internet security software on all systems. Now I...

Microsoft: Rogue security software fastest-growing online threat

Trojan downloaders and malware that masquerades as security software are the two fastest growing threats on the Web right now, according an analysis by Microsoft’s Malware Protection Center. In its latest Software Intelligence Report, released on Wednesday, the MMPC found that a Trojan downloader...

New ransomware holds Windows files hostage, demands $50

By Gregg Keizer, Computerworld Cybercrooks have hit on a new twist to their aggressive marketing of fake security software, and are duping users into downloading a file utility computerworld.com that holds users’ data for ransom, security researchers warned today. While so-called “scareware” has...