2623 matches found
FAQ: Conficker time bomb ticks, but don't expect boom
By Elinor Mills, ZDNet News There’s been lots of hype about the fact that the latest variant of the Conficker worm is set to start communicating with other computers on the Internet on April 1 – like an April Fool’s Day time bomb with some mysterious payload. To help clear up some of the confusio...
Conficker Worm Detection (uncredentialed check)
The remote host seems to be infected by the Conficker worm. This worm has several capabilities which allow an attacker to execute arbitrary code on the remote operating system. The remote host might also be attempting to propagate the worm to third party hosts. C Tenable Network Security, Inc...
FAQ: Conficker and April 1st
Our friends at F-Secure have put together a very valuable FAQ f-secure.com on the Conficker worm to help strip away the hype around the April 1st date. It’s a must read...
Infrastructure attacks: A growing concern
In an essay published on his personal blog doxpara.com, security researcher Dan Kaminsky is starting to sound the alarm about “the extraordinary damage” we face from infrastructure attacks, warning that the industry needs to treat infrastructure with more security due diligence and care. “Forget...
Countdown to Conficker's April 1st climax
By Byron Acohido, LastWatchdog.com Two schools of thought exist about what the Conficker worm will do come the wee hours of April 1, 2009, GMT. Some experts, like WinPatrol creator Bill Pytlovany, are sensing that the worm’s controllers will run circles lastwatchdog.com around the Microsoft-led...
Microsoft working on Paladin vulnerability analysis tool
The researchers at Microsoft are working on a new automated vulnerability analysis tool called Paladin, which will be included in the next version of the company’s Forefront enterprise security suite. The new technology was unveiled at CanSecWest last week and is designed to speed up the process ...
Researchers spot router-based botnet worm
Researchers at DroneBL have spotted signs of a stealthy router-based botnet worm zdnet.com targeting routers and DSL modems. The worm, called “psyb0t,” has been circulating since at least January this year, infecting vulnerable embedded Linux devices such as the Netcomm NB5 ADSL modem and launchi...
Twitter vulnerable to XSS worm attack
By Robert McMillan, ComputerWorld Computer security researchers have devised a new Twitter attack that they say could spread virally, much like a worm on the microblogging service. The attack, publicized by researchers at Secure Science, is an innocuous proof-of-concept that forces users to send...
Conficker worm continues to evolve, confound researchers
The Conficker worm has been wreaking havoc on the Internet for several months now, and despite the concerted efforts of dozens of security organizations around the world, it is showing no signs of fading. A new analysis of Conficker by SRI International shows that the worm’s authors have added...
The Ryan & Roel Show Episode 8
The Kido Worm Attack – Fri, Jan. 23 2009 Ryan and Roel discuss the propagation techniques behind the Kido/Conficker worm attack and make important recommendations around protection and mitigation. Download episode...
The Ryan & Roel Show Episode 6
USB Malware Mess – Fri, November 28, 2008 The boys explain the latest news around Lenovo distributing a malware-infected driver software and the network worm that forced the U.S. military to ban the use of USB drives and other forms of removable media. Download episode...
Koobface worm makes a triumphant return
A new version of the Koobface worm is making the rounds of Facebook this week, this time in the guise of an invitation to view a fake YouTube video. The link takes users to a page asking them to install an updated version of the Flash player, which is instead a piece of malware. As Brian Krebs at...
vBulletin 3.7.3 Visitor Message XSS/XSRF + worm Exploit
No description provided by source. / ----------------------------- Author = Mx Title = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm Software = vBulletin Addon = Visitor Messages Version = 3.7.3 Attack = XSS/XSRF - Description = A critical vulnerability exists in the new vBulletin 3.7.3 softwa...
vbulletin-xssxsrf.txt
/ ----------------------------- Author = Mx Title = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm Software = vBulletin Addon = Visitor Messages Version = 3.7.3 Attack = XSS/XSRF - Description = A critical vulnerability exists in the new vBulletin 3.7.3 software which comes included + with the...
vBulletin 3.7.3 - Visitor Message Cross-Site Request Forgery Worm
vBulletin 3.7.3 - Visitor Message Cross-Site Request Forgery Worm / ----------------------------- Author = Mx Title = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm Software = vBulletin Addon = Visitor Messages Version = 3.7.3 Attack = XSS/XSRF - Description = A critical vulnerability exists in...
vBulletin 3.7.3 - Visitor Message Cross-Site Request Forgery / Worm
/ ----------------------------- Author = Mx Title = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm Software = vBulletin Addon = Visitor Messages Version = 3.7.3 Attack = XSS/XSRF - Description = A critical vulnerability exists in the new vBulletin 3.7.3 software which comes included + with the...
Windows RPC worm (MS08-067) in the wild
The worm-type exploitation has started. More information at http://www.f-secure.com/weblog/archives/00001526.html The worm component has reportdly detection name Exploit.Win32.MS08-067.g and the kernel component Rootkit.Win32.KernelBot.dg, in turn. Symantec uses Worm category too and the name...
Vulnerability in Server Service Could Allow Remote Code Execution (958644)
This host is missing a critical security update according to Microsoft Bulletin MS08-067. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Based...
Server Service Could Allow Remote Code Execution Vulnerability (958644)
This host is missing a critical security update according to Microsoft Bulletin MS08-067. OpenVAS Vulnerability Test $Id: secpodms08-067900055.nasl 5344 2017-02-18 17:43:17Z cfi $ Description: Server Service Could Allow Remote Code Execution Vulnerability 958644 Authors: Chandan S Copyright:...