Vulnerabilities
Temporary remedy against Dugu
By Gina on November 4, 2011 | Vulnerabilities
Microsoft released temporary patch for a critical Windows vulnerability. Dugu infection has already made manufacturers of industrial systems suffer because of serious malware. On Tuesday, Microsoft dropped advisory which claims that unknown flaw in the Win32k TrueType font-parsing engine made changes of every supported version of Windows. Read more.
Malware distribution tendencies 2011
By Gina on September 30, 2011 | Vulnerabilities
The main reason why Windows gets infected is the failure to fix third-party programs. About three to five years ago the basic traffic of malware to come was through the emails with infected links or rogue attachments. These days, hackers use malicious websites with fictitious downloads more than ever. According to Danish security firm CSIS, about 85 per cent of all computer infections come through the attacks that happen via commercial exploit kits. Read more.
Mac OS X Lion flaw gives opportunity attacker changing victim’s password
By Gina on September 23, 2011 | Vulnerabilities
Vulnerability in one of Mac OS X Lion’s command-line utilities makes it easier for attacker to attacker to change user’s password without knowing the real one. The command-line program dscl is a multi-purpose utility for interacting with Directory Services nodes. It seems like this can be also used for malicious purpose which is to change user’s password without knowing the current one. Read more.
Flaws have been detected in Symantec Endpoint Protection Manager
By Gina on August 12, 2011 | Vulnerabilities
Symantec Endpoint Protection Manager has been found with several vulnerabilities. According to Secunia, this flaw may be exploited by hackers easily to control cross-site scripting and request counterfeiting attacks.The first flaw is found in URL that symbols are being not properly cleaned and returned to user. This can cause an execution of arbitrary HTML and script code in a user's browser. Read more.
New IE bug may expose your cookies
By Gina on May 31, 2011 | Vulnerabilities
Recently, security researcher has discovered unpatched flaw in IE that can be used for stealing Facebook accounts’ credentials and other web pages that are compromised by this attack. Rosario Valotta, an independent researched demonstrated his “cookiejacking“ method which allowed to use vulnerability of all IE versions to steal session cookies in Facebook once user enters their password and user name. Read more.
