FTC Gives Refunds to Rogue Antivirus Victims

The Federal Trade Commission FTC is sending reimbursement checks to more than 300,000 people victimized by a rogue antivirus scam. According to the FTC, the checks are the result of the settlement between the agency and several defendants named in a complaint the FTC filed in 2008. As part of the...

VSS Freeze Wait Timeout

Challenge A Backup or Replication tasks fails with the following errors: "VSSControl: Failed to prepare guest for freeze, wait timeout 900 sec." "VSSControl: Failed to freeze guest, wait timeout" Solution Possible Security Software Interference Anti-virus software may impede VSS operations. As an...

Burp Suite Pro v1.4.03 released - CSRF generator, SSL strip Added

Burp Suite Pro v1.4.03 released - CSRF generator, SSL strip Added There is a new CSRF generator, which produces proof-of-concept HTML for generating virtually any HTTP request. You can access this feature by right-clicking any item within Burp, and using the engagement tools context menu to selec...

Mac OS X XProtect Installed

There is a problem with the installation of the Apple XProtect application on the remote Mac OS X host - either updates are not enabled / running or its definitions are out of date. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56568; scriptversion"1.57";...

SpyEye Trojan stole $3.2 million from US victims,Android users will be next target !

SpyEye Trojan stole $3.2 million from US victims,Android users will be next target ! A Russian cybergang headed by a mysterious ringleader called 'Soldier' were able to steal $3.2 million £2 million from US citizens earlier this year using the SpyEye-Zeus data-stealing Trojan, security company...

VMware vFabric tc Server weak encryption

Server accepts cleartext password even if it's not allowed for user...

Image of the Day: Visualizing a VoIP Server Attack

Today’s image of the day comes from a video posted by New Scientist magazine that helps illustrate an attack between a server and a hacker. Created by Ben Reardon of Dataviz Australia, the video chronicles a hacker’s attempt to break into a voice over IP VoIP server. As we’ve seen, servers like...

Microsoft Forefront Endpoint Protection / System Center Endpoint Protection / Anti-malware Client Detection and Status

Microsoft Forefront Endpoint Protection, or another antimalware product from Microsoft, is installed on the remote host. However, there is a problem with the installation; either its services are not running or its engine and/or virus definitions are out of date. C Tenable Network Security, Inc...

dpkg directory traversal

Directory traversal on package content extraction...

Hackers Target Halloween Costume Searches with Fake Anti-Virus Trojans

Attackers are targeting people searching for last-minute Halloween costume ideas, reported CyberDefender on Oct. 29. The Internet security vendor, along with other firms like Blue Coat and BitDefender, warned users about the dangers of searching online for Halloween-related topics. "Popular searc...

couchdb code execution

Ralative path for dynamic library loading...

New Email Worm Turns Back the Clock on Virus Attacks

There appears to be an actual email worm in circulation right now, using the tried-and-true infection method of sending malicious emails to all of the names in a user’s email address book. As of Friday afternoon, the malicious files had been deleted from the remote server in the UK that was servi...

Vulnerability: be wary of“help and Support Center”uninvited-vulnerability warning-the black bar safety net

Microsoft has just released 6 months patch, Windows XP it also exposed a new HCP Protocol vulnerabilities. After 3 6 0 Security Center to verify, when the Windows XP users use IE series browsers open hung it to the web, or playing“the infected”of the music file, the PC will automatically...

KHOBE - 8.0 earthquake for Windows desktop security software

Hello, We have found number of vulnerabilities in implementations of kernel hooks in many different security products. The argument-switch attack or KHOBE attack affects user mode and kernel mode hooks that are used to implement security features. The hook may be vulnerable if it performs securit...

360杀毒和360安全卫士内核驱动多个本地拒绝服务漏洞

BUGTRAQ ID: 39936 360杀毒和360安全卫士都是在中国广泛使用的免费杀毒软件。 360杀毒和360安全卫士所使用的profos.sys和360FkAdv.sys驱动没有正确地验证从用户空间所传送的进程对象指针，本地用户可以通过提交恶意的IOCTL请求导致内核崩溃。 奇虎360 360安全卫士 6.1.5.1010 奇虎360 360杀毒 1.1.0.1096 厂商补丁： 奇虎360 ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.360.cn/...

UK Health System Infected by Data Worm

The UK’s National Health Service has been hit by a voracious, data-stealing worm that’s easily detected by off-the-shelf security software, according to researchers who directly observed the mass compromise. Read the full article. The Register...

The Lazy Programmer's Guide to Secure Computing

In this Google TechTalk, HP’s Marc Stiegler describes a different approach to security software...

Kingsoft DuBa Browser Shield ActiveX Remote Exec 0day POC

Date: 2010.01.17 Author: superli Software Link: http://i2d.www.duba.net/i2d/kws3/KWSSetup.exe Version: 3.0 Tested on: xpsp3 ie6 greeting to KingSoft,can you really help users avoiding being hacked ? this vuln almost effect in all of the duba security software. Code : object id=TestObj...

The Low-Down on Daonol

A relatively new trojan has been making the rounds and causing some problems, particularly on Windows XP systems. Trojan:Win32/Daonol is malware which hooks various system calls in order to steal credential information and redirect some web traffic. It also protects itself by keeping some...

Local privilege escalation vulnerability in Trustport security software

ShineShadow Security Report 28092009-10 TITLE Local privilege escalation vulnerability in Trustport security software BACKGROUND TrustPort is a major producer of software solutions for secure communication and reliable data protection. TrustPort products are characterized by a comprehensive...