Thursday, March 20, 2008 6:11 PM/CST
I'm hearing some murmurs that Microsoft's acquisition of anti-rootkit startup Komoku could hit a patent hurdle. My sources point to Patent #7,181,560, which was granted to Joe Grand (aka Kingpin from L0pht) and Brian Carrier of digital-evidence.org and covers...
Thursday, January 24, 2008 7:58 AM/CST
The Skype security problem I wrote about here and here is much more serious than originally reported, according to the hacker who found and reported the vulnerability. Aviv Raff showed me proof-of-concept code that fired a code execution exploit...
Wednesday, January 09, 2008 2:13 PM/CST
Anti-virus vendors have raised an alarm for a stealthy new MBR (Master Boot Record) rootkit that takes aim squarely at Windows XP and Windows Vista machines. The rootkit, identified by Symantec as Trojan.Mebroot, was spotted in the wild as...
Wednesday, January 02, 2008 12:03 PM/CST
If you use RealNetworks' RealPlayer software, you might want to pay close attention to this demo from the folks at Gleg Ltd., a Russian vulnerability research and exploit creation outfit. According to Gleg founder Evgeny Legerov, there is a zero-day...
Monday, October 08, 2007 2:39 PM/CST
SoftScan, an anti-virus, anti-spam company, told the New York Times recently that zombified machines belonging to college students are behind a rise in spam that was observed last month. The Times quotes Diego d'Ambra, CTO at SoftScan, as saying that...
Friday, September 07, 2007 5:07 PM/CST
I had just finished writing up this story of a European country with a defense agency site that's got its database dangling out for all the world to play with, when Exploit Prevention Labs Chief Technology Officer Roger Thompson pointed...
Wednesday, August 01, 2007 11:29 PM/CST
LAS VEGASI just sat down with Danny Allan, director of security researcher at Web application security company Watchfire, and he summed it up: For the first time in years, people are walking out of Black Hat presentations shaking their heads,...
Friday, July 13, 2007 3:47 PM/CST
Microsoft has updated its critical security advisory on Excel, put out on its July 10 Patch Tuesday, to include Office 2004 for Mac. Microsoft's MS07-036 advisory covers three critical Excel bugs, all remotely exploitable. This isn't a patch to ignore,...
Friday, June 22, 2007 4:28 PM/CST
The allergy to the iPhone security analysts have acquired? IBM Internet Security Systems isn't buying it. As a matter of fact, Neel Mehta, team leader of the advanced research group at ISS, says the iPhone is going to suffer less...
Friday, June 08, 2007 12:58 PM/CST
In the upcoming Firefox 3.0 browser, the Mozilla Foundation is going beyond Firefox 2.0's protection of users' personal information to actually blocking Web sites that it thinks are planning to plant malware. Alex Faaborg blogged on Mozilla's site on June...