Zeus Botnet Using Windows LNK Flaw

Isolated strains of mainstream malware that took advantage of how the zero-day Windows flaw first exploited by the sophisticated Stuxnet worm began appearing late last week. The same approach has since been applied by the dodgy sorts behind Zeus, a family of sophisticated toolkits frequently used...

Don Bailey and Nick D' on GSM Hacking and Privacy

Dennis Fisher talks with Don Bailey of iSec Partners and Nick D’, an independent security researcher, about their recent work on geolocation and tracking of GSM mobile handsets and the privacy and security implications for users. Podcast audio courtesy of sykboy65 Subscribe to the Digital...

10 Lessons From The Pwn2Own Hacker Contest

The recent CanSecWest Pwn2Own contest saw successful hacking attacks against Microsoft Internet Explorer 8, Mozilla Firefox and Apple’s Safari and iPhone products. Now that the dust has settled and the vendors are starting to patch the vulnerabilities, Threatpost editor Ryan Naraine takes a look ...

A Closer Look at the Koobface Gang

The Koobface botnet is the tip of the iceberg for the malicious operations of the online crime ring. Here are the top 10 things you didn’t know about the Koobface gang. Read the full article. ZDNet...

2009: The Year That Was in Security

Threatpost editor Dennis Fisher talks about the implications of Howard Schmidt’s appointment, the story of the year in 2009 and what 2010 might bring for security...

Jose Nazario on Botnets and the History of DDoS Attacks

Dennis Fisher talks with Jose Nazario of Arbor Networks about the Mafiaboy attacks, the history of DDoS attacks and the botnet epidemic. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

Mafiaboy, Botnets and You

The botnet problem has grown to epidemic proportions, and in this video Threatpost editor Dennis Fisher talks about the roots of the problem and how it evolved into one of the larger threats on the Web...

Mike Bailey on Adobe Flash Vulnerabilities

Dennis Fisher talks with Mike Bailey of Foreground Security about his research on Adobe Flash flaws, the same-origin policy and Web site security. Podcast audio courtesy of sykboy65 Download Subscribe to the Digital Underground podcast on Image via AJolly‘s Flickr photostream...

Botnet-Infected Computers Powering Click Fraud

According to new data from ClickForensics, botnet-infected computers are behind the majority of click-fraud attacks against advertisers and publishers. For the third quarter this year, about 43 percent of all fraudulent clicks came from computers within botnets. The figure is the highest in four...

Mozilla VP of Engineering Mike Shaver on the Microsoft-created Firefox Add-ons

The Big Story podcast with Ryan Naraine – October 19, 2009 In the debut installment of the ‘Big Story’ podcast, Threatpost editor-in-Chief Ryan Naraine chats with Mozilla VP of Engineering Mike Shaver right on his decision to blacklist – then unblock – the controversial Microsoft-created Firefox...

Twitter-based Botnet, Obama and Cybersecurity and a New Linux Kernel Flaw

Threatpost editors Ryan Naraine and Dennis Fisher discuss the botnet being controlled through Twitter, Obama and cybersecurity, as well as the new Linux kernel flaw. Download SHOW NOTES: Researcher Finds Twitter Botnet Command Channel Obama is Failing the Cybersecurity Test Another Linux Kernel...

On the Twitter DDoS Attacks, Apple and Microsoft Patches

Threatpost editors Ryan Naraine and Dennis Fisher discuss the DDoS attacks against Twitter, Facebook and LiveJournal and delve into Apple’s Mac OS X patch and Microsoft’s Patch Tuesday plans. SHOW NOTES: UPDATE: Twitter Suffers DoS Attack Apple Warns of Mac Attack Risk via Image Files Microsoft...

Scenes from Black Hat and Defcon 2009

See photos taken from Black Hat 2009 and Defcon, both held last week in Las Vegas, Nev...

Threatpost News Wrap #5: Microsoft Vulnerabilities, DDoS Attacks

Threatpost editors Dennis Fisher and Ryan Naraine discuss the recent vulnerabilities in ActiveX controls, Microsoft’s slow response to the video control flaw and the slew of DDoS attacks against U.S. government and commercial sites. Download SHOW NOTES: MyDoom DDoS Attacks Likely Work of...

Threatpost News Wrap #4: Crypto libraries, cybersecurity czar job

Threatpost editors Ryan Naraine and Dennis Fisher talk about the problems with developers implementing their own crypto libraries in Web applications, the short list of names for the cybersecurity czar job and the possibility of a full-scale hacker bracket competition. Download SHOW NOTES: Short...

Threatpost News Wrap #3: Patch releases, RFC1918 attack

Threatpost editors Ryan Naraine and Dennis Fisher discuss this week’s massive patch releases by Microsoft, Adobe and Apple, the RFC1918 attack paper by Robert Hansen and who they’d pick in a rotisserie hacker draft. Download SHOW NOTES: New attack class exploits intranet weaknesses The time has...

Threatpost News Wrap #2: Drive-by malware, Twitter attacks

Threatpost editors Ryan Naraine and Dennis Fisher look at the latest security news headlines and dig deeper into the latest wave of drive-by download infections and scareware attacks on Twitter. Download SHOW NOTES Cybercriminals hijack Twitter trending topics to serve malware Subscribe to the Ne...

The Threatpost Daily News Wrap #1

In the first episode of the Threatpost Daily News Wrap podcast, Threatpost editors Ryan Naraine and Dennis Fisher discuss President Obama’s cybersecurity plan and the Microsoft DirectShow vulnerability. Download SHOW NOTES Microsoft warns of dangerous DirectShow flaw, attacks New cybersecurity cz...

James Butler and Peter Silberman talk malware

James Butler and Peter Silberman of MANDIANT with Threatpost’s Robert Vamosi about malware and their new memory forensic software, Memoryze...

Companies still dragging their feet with patches

From IDG News Service Jeremy Kirk A study from security vendor Qualys has found that companies are patching just a hair faster than they were five years ago. The latest data was collected throughout 2008, said Wolfgang Kandek, Qualys’ CTO. Qualys scanned 80 million IP Internet Protocol addresses...