Month of Twitter Bugs Coming in July

A security researcher who specializes in browser and Web 2.0 vulnerabilities plans to use the month of July to expose serious vulnerabilities in the Twitter ecosystem. The Month of Twitter Bugs, a project which launches on July 1, is the handiwork of Aviv Raff. It will disclose a combination of...

The Twitter worm that isn't

By Roel Schouwenberg On Saturday an alert went out about a new Twitter worm. Could this have been another XSS-Worm? Upon clicking the link users would see the following: However that’s not all that happens. Covertly a connection is made to another server that will result in a malicious PDF being...

Twitter API ripe for malware, worm abuse

A security researcher is warning that the Twitter API can be trivially abused by hackers to launch worm attacks. The red-hot social networking/microblogging service has been scrambling to plug cross-site scripting and other Web site vulnerabilities to thwart worm attacks but, as researcher Aviv...

Update Protections against Recent Malware Threats (20-May-09)

The update includes new protections against 8 recent malware threats:Rogue-Software: ThreatNuker - ThreatNuker is a rogue security software that performs fake scans on the system and reports false and exaggerated infections. It attempts to trick the users into purchasing the license of the softwa...

ShellCode writing example-break through the firewall to the ShellCode-exploit warning-the black bar safety net

Text/figure ww0830 Now on the network to get the console ShellCode either on the target machine to open a port, wait for the attacker is connected; either let the target machine actively connected to the attacker's host, commonly known as a reverse connection. But the former method will generally...

Mac OS X e-mail worm squirming

From ZDNet Dancho Danchev A newly discovered email worm dubbed OSX/Tored-A once again puts the spotlight on the potential worm-ability, and malware spreading tactics targeting Apple’s OS X. The worm propagates through emails harvested from infected hosts, and has a backdoor functionality allowing...

Compliance demands prevented repair of virus-infected medical devices

From CNet News Stephanie Condon The Conficker Working Group several months ago discovered several hundred medical devices that had been infected with the Conficker worm and set about alerting the affected hospitals to the problem. The disinfection process should have been straightforward, but the...

Conficker worm hits hospital devices

From Mercury News Elise Ackerman A computer worm that has alarmed security experts around the world has crawled into hundreds of medical devices at dozens of hospitals in the United States and other countries, according to technologists monitoring the threat. Around March 24, researchers monitori...

Conficker's estimated cost? $9.1 billion

From ZDNet Dancho Danchev In a recent blog post, the Cyber Secure Institute claims that based on their previous studies into the average cost of suck malware attacks, the economic loss due to the Conficker worm could be as high as $9.1 billion. Despite that their analysis also considered a much...

Economy, SMB security to dominate at RSA Conference

As a security show, the RSA Conference leaves a lot to be desired. Its technical sessions carry an uncomfortable load of marketing baggage and don’t have either the cachet or entertaining edge of those at Black Hat or CanSecWest. Anyone will tell you that the real business of RSA is happening off...

Conficker Detection

This host seems to be contaminated with infectious Conficker Worm. Based on the work of Tim Brown as published here, http://www.nth-dimension.org.uk/blog.php?id=72 along with the associated NASL from SecPod Updated SRVSVC and ntrPathCanonicalize Request Packets with Description. - By Chandan S...

Conficker botnet not nearly as large as feared

An analysis of the Conficker peer-to-peer network set up by the latest variant of the worm shows that the size of the network is far smaller than originally thought. Estimates of the size of the botnet have run far into the millions, but analysts at Kaspersky Lab have been observing the network a...

1 in 5 Windows PCs still hackable by Conficker

From Computerworld Gregg Keizer Although the media blitz about the Conficker worm prompted a significant number of enterprise users to finally fix a six-month-old Windows bug, about one in five business computers still lack the patch computerworld.com, a security company said today. Scans of more...

Twitter worm attack: Here's how to keep safe

From PC World Daniel Ionescu The malicious worm affecting Twitter over the weekend has now mutated and continues to invade pcworld.com the popular microblogging network. Although Twitter is taking action twitter.com against the problem, security analysts fear that further mutations of the worm wi...

Conficker hits University of Utah

University of Utah officials say a computer virus has infected more than 700 campus computers tech.yahoo.com, including those at the school’s three hospitals. University health sciences spokesman Chris Nelson said the outbreak of the Conficker worm, which can slow computers and steal personal...

Conficker-infected PCs get update, better anti-security defenses

From Network World Jeremy Kirk Millions of PCs infected with the Conficker virus have received a series of updated files over peer-to-peer connections that improve the worm’s defenses against security products and also include a sniffer and some fake anti-virus software. This is just the latest...

SRI releases Conficker scanner source code

The experts at SRI International, who have been tracking the Conficker worm as closely as anyone, have released the source code to the scanner they wrote to detect the active P2P scanning that Conficker-infected machines perform. The Conficker worm exhibits a number of interesting characteristics...

Microsoft teams with Facebook to halt Koobface worm

From Facebook, by Jeff Williams, Microsoft When the Koobface worm hit Facebook users last year, the company’s security team scrambled to help affected users reset their accounts and avoid new infections. But the worm has continued to crop up periodically since then, and so the anti-malware team a...

Conficker.C stops earlier variants from spreading

From The Last Watchdog, by Byron Acohido Lost amid all of the breathless reporting on Conficker’s update mechanism this week was the fact that machines infected with the latest version of the worm, Conficker.C, have effectively stopped previous versions of the worm from spreading. As Byron Acohid...

Conficker activation passes quietly, but threat isn't over

By Sumner Lemon, IDG News Service An expected activation of the Conficker.c worm at midnight today passed without incident computerworld.com, despite sensationalized fears cbsnews.com that the Internet itself might be affected, but security researchers said users aren’t out of the woods yet. Whil...