Mike Mimoso on Targeted Attacks and the Google-Microsoft Controversy

Dennis Fisher talks with Mike Mimoso of SearchSecurity.com and Information Security magazine about the current spate of highly targeted attacks, the silliness of the term cyberwar and the controversy surrounding the disclosure of the Windows Help Center flaw. Podcast audio courtesy of sykboy65...

Lab Matters: Inside Targeted Attacks

Kaspersky Lab anti-malware researchers Costin Raiu and Magnus Kalkuhl field questions on targeted attacks, how they work and how businesses can protect themselves...

The Economics of Targeted Attacks

CAMBRIDGE–Researchers and security vendors have been telling us for years now that attackers have developed sophisticated, targeted attacks designed to separate victims from their money as quickly and cleanly as possible. If that’s so, why aren’t all of us being compromised on a regular basis? A...

Ten Years After the LoveBug Worm

The LoveBug worm, a simple email that spread a virus to millions of computers a decade ago, paved the way for many of today’s social engineering and targeted cyber attacks. Read the full article. CSO...

Researcher Demos PDF Counter Attacks

Targeted attacks might be tough to prevent, but what if you could fight back against the attacker once he’s infiltrated your network? A researcher has come up with a proof-of-concept PoC that does just that by finding vulnerabilities in the attacker’s malware and using it against him. Read the fu...

Gunter Ollmann on Opt-In Botnets and Targeted Attacks

Dennis Fisher talks with Gunter Ollmann, VP of research at Damballa, about the new generation of hacktivism and opt-in botnets, as well as the trend toward targeted attacks in corporate environments. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

Microsoft Plugs IE Drive-By Download Flaws

Microsoft today shipped a cumulative Internet Explorer update with patches for 10 security holes, including a drive-by download vulnerability that’s already being used in malware attacks. The critical MS08-018 update patches security holes that could lead to code execution attacks on all versions...

The Future of Botnets

A lot of people in the security industry are paid to think like attackers: pen testers, security consultants, software security experts. But some of these people have never met an actual black hat, so much of their work is necessarily based on what they think attackers might do in a given...

Exploit Code Published for Latest IE Zero-Day

Using obvious clues from a McAfee blog post, an Israeli hacker was able to pinpoint the latest Internet Explorer zero-day vulnerability and create working exploit code. The exploit code, which provides a clear roadmap to launch drive-by download attacks against IE 6 and IE 7 users, is being fitte...

Operation Aurora Still Out There

The targeted attacks that hit Google, Adobe, and other U.S. organizations are still ongoing and have affected many more companies than the original 20 to 30 or so reported by Google and others. One researcher believes they are close to naming the suspected coder. Read the full article. Dark Readi...

Hackers Using Automation, Geolocation in Social Networking Attacks

MOSCOW — Attackers have been focusing a lot of attention on social networking destinations such as Facebook, Twitter and even LinkedIn for some time now, but they recently have begun shifting their tactics to make their attacks much more effective and precise through the use of geolocation and...

Aurora Attack Malware Components May Be Four Years Old

Although the first known attacks using the Aurora malware that compromised Google weren’t discovered until late last year, some parts of the malware codebase has been in existence in China for nearly four years, raising questions about how many other attacks it might have been used in during that...

Emergency IE Patch Coming on January 21

This is just a quick heads-up that the emergency security patch for Microsoft’s Internet Explorer will be released tomorrow January 21, 2009. The update, rated critical for all versions of IE, will cover a remote code execution flaw that has already been used in targeted attacks against U.S...

How DEP Can Mitigate IE Zero-Day Attacks

Jonathan Ness of Microsoft’s Security Research and Defense team explains the inner workings of the Data Execution Prevention technology that can help mitigate the targeted attacks exploiting the vulnerability in Internet Explorer right now...

Microsoft: Emergency IE Patch Coming

Microsoft has started dropping broad hints that an emergency patch for Internet Explorer will be released very soon to counter targeted attacks and the publication of exploit code for a “browse and you’re owned” vulnerability in its flagship Web browser. UPDATE: Here is the official confirmation...

Targeted attacks use 'Recession Relief' theme

Internet fraudsters are increasingly taking advantage of the deepening recession to dupe unsuspecting email recipients. The e-mail often includes a request for personal details on the pretense of receiving some financial reward, which later leads to fraud. Common themes include prize wins,...

Microsoft issues PowerPoint zero-day warning

Microsoft has issued an advisory to warn about an under-attack zero-day vulnerability affecting its PowerPoint software. According to the pre-patch advisory, the flaw allows remote code execution if a user opens a booby-trapped PowerPoint file. The company described the attacks as “limited and...

Attack of the mini-botnets

From DarkReading.com Kelly Jackson Higgins Big-name botnets like Kraken/Bobax, Srizbi, Rustock, the former Storm — and even the possible botnet-in-waiting, Conficker — have gained plenty of notoriety, but it’s the smaller and less conspicuous ones you can’t see that are doing the most damage...

Symantec Enterprise Firewall / Gateway Security - HTTP Proxy Internal IP Leakage

source: https://www.securityfocus.com/bid/17936/info Symantec Enterprise Firewall and Gateway Security products are prone to an information-disclosure weakness. The vendor has reported that the NAT/HTTP proxy component of the products may reveal the internal IP addresses of protected computers. A...

Symantec Enterprise Firewall Gateway Security - HTTP Proxy Internal IP Leakage

Symantec Enterprise Firewall Gateway Security - HTTP Proxy Internal IP Leakage source: https://www.securityfocus.com/bid/17936/info Symantec Enterprise Firewall and Gateway Security products are prone to an information-disclosure weakness. The vendor has reported that the NAT/HTTP proxy component...