Sharp rise in Android Malwares in Third Quarter of 2012

Mobile industry watchers have long known that Android is under attack. The number of high risk and dangerous apps targeting Android users jumped from 30,000 in June to 175,000 in September, Trend Micro said in its third quarter security roundup. While some apps are clearly criminal - such as thos...

Mike Mimoso on the Evolution of Security

Dennis Fisher talks with Mike Mimoso, the new editor of Threatpost, about his decade covering security, how the industry and threat landscape have changed and how security researchers are like Bill Parcells. Download: digitalunderground104 Podcast audio courtesy of sykboy65 Subscribe to the Digit...

Firms Need 'Tough Love' In Struggle Against APTs

Black Hat is upon us and, with it, a lot of chatter about the dangers posed by so-called “APT,” or advanced persistent threats. Rather than get trapped in the hype bubble, Threatpost editor Paul Roberts took the opportunity to check back in with a recognized expert on detecting and combating...

Microsoft Releases Automatic Updater for Certificate Revocation Lists, Plans to Invalidate Short RSA Keys

As part of its response to the Flame malware and its usage of a forged Microsoft certificate to sign malicious files, Microsoft has changed the way that Windows handles certificates, releasing an automatic updater function that will recognize and flag untrusted certificates. The new functionality...

ImageMagick security and bug fix update

6.2.8.0-12.el5 - Add fix for CVE-2010-4167 767142 6.2.8.0-11.el5 Fix assertion failed when using 'identify -verbose' when theres no image information available 502626 6.2.8.0-10.el5 Fix memory allocation failure when using color option 616538 Fix hang when converting broken GIF 693989 Fix...

Android Security - Boot Camp Workshop & Presentation #1

Document Title: =============== Android Security - Boot Camp Workshop & Presentation 1 References: =========== http://www.vulnerability-lab.com/resources/documents/454.rar Release Date: ============= 2012-02-26 Vulnerability Laboratory ID VL-ID: ==================================== 454 Discovery...

Prediction: Handful of Malicious Networks Will Spawn Most Attacks In 2012

A shadowy web of malicious networks, or “malnets” will be the source of two thirds of online attacks in 2012, according to a report from the security firm Blue Coat. Despite the continued industry focus on specific families and samples of malicious software, Blue Coat researchers say that...

New SEC Guidance May Impact Corporate Disclosure

As companies begin submitting their regulatory filings and financial reports from 2011, the SEC is pushing for more comprehensive data breach, cyber attack, and general risk-assessment disclosures. As it stands, companies not only downplay the severity of hacking and other Internet-borne threats ...

The Changing Threat Landscape

Join Dennis Fisher, Threatpost editor-in-chief, and his guests, Josh Corman, Director Security Intelligence Akamai, and Gene Kim, Founder / Former CTO Tripwire, and Author, “Visible Ops,” as they discuss the changing threat landscape and how technology plays a pivotal role in the security...

Microsoft Releases Workaround For Kernel Flaw Used By Duqu

Microsoft has released a workaround for the Windows kernel zero-day vulnerability exploited by the Duqu malware, and said that it is working on a permanent patch, but didn’t specify a timeline for its release. The vulnerability is a serious one that can lead to remote code execution on vulnerable...

CVE-2009-5098

The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to cause a denial of service crash via a web page containing a long string following a refresh tag, which triggers a floating point exception...

Android Malware Increasing, AutoRun Attacks Still Prevalent

The recent trend of attackers focusing their attention on mobile platforms such as Android, Symbian and iOs is continuing to accelerate, researchers say, and the threats to smartphones are becoming more and more sophisticated and dangerous. Android is becoming the focus of much of the attention...

GFI SandBox - Powerful automated malware analysis

GFI SandBox - Powerful automated malware analysis GFI SandBox™ formerly CWSandbox is an industry leading dynamic malware analysis tool. It gives you the power to analyze virtually any Windows application or file including infected: Office documents, PDFs, malicious URLs, Flash ads and custom...

Metasploit Pro 4.0 released - Enterprise Integration, Cloud Deployment & Automation

Metasploit Pro 4.0 released - Enterprise Integration, Cloud Deployment & Automation Rapid7 launched Metasploit Pro 4.0, a penetration testing solution that provides security professionals with a better view of their threat landscape by integrating with more than a dozen vulnerability management...

GAO: The DoD's Plan To Unify Cyber Defenses Looks Like Swiss Cheese

A new report out from the Government Accountability Office GAO warns that the U.S. Department of Defense’s efforts to unify its cyber security operations has serious gaps and that the Department is “unprepared to meet the current threat” of cyber attack. The report, issued on Monday, is an...

Complete ZeuS source code has been leaked !

Complete ZeuS source code has been leaked On the 23rd of March 2011 we posted a blog about the source code for the infamous crime kit ZeuS Wsnpoem/Zbot being sold on at least two dark market forums see: https://www.csis.dk/en/csis/blog/3176/. This weekend we found the complete source code for thi...

IT Compliance Matures into Risk Management

Over the past ten years rapid change and an evolving threat landscape has better prepared Coalfire to defend our clients against known risks. Not surprisingly, much of the progress is due to compliance-related investments. As we look towards the next ten years, we see a proactive risk management...

Visualizing Wi-Fi Networks Through Light

Today’s Image of the Day comes from a film posted on YOUrban. The film is an exploration of the typically intangible landscape of WiFi signals. They built a WiFi measuring rod that displays strength of signal in a vertical alignment of light bars. As they moved the rod, they used long-exposure...

Ten Years Later, Rethinking Microsoft's Vuln Ratings

Microsoft’s vulnerability Severity Rating System is closing in on its tenth birthday. While the security landscape has been transformed during that time, the Ratings have endured. But do they still work? Threatpost asked prominent vulnerability researchers to give us their opinion. You may be...

New Study Sees Need for Better Software Integrity Controls

Software security has become one of the more widely discussed and debated topics in the security industry in the last few years, as many software vendors and enterprises both large and small have begun to to focus considerable attention on improving the processes they have in place for producing...