Virus Information News

[First]  [Previous] |    162     163     164     165     166     167     168     169     170     171    | [Next]  [Last] of 172 page(s)

Wild at Heart: Were Intelligence Agencies Using Heartbleed in November 2013?

eff.org

May 6, 2014

Yesterday afternoon, Ars Technica published a story reporting two possible logs of Heartbleed attacks occurring in the wild, months before Monday's public disclosure of the vulnerability.

It would be very bad news if these stories were true, indicating that blackhats and/or intelligence agencies may have had a long period when they knew about the attack and could use it at their leisure. In response to the story, EFF called for further evidence of Heartbleed attacks in the wild prior to Monday. The first thing we learned was that the SeaCat report was a possible false positive; the pattern in their logs looks like it could be caused by ErrataSec's masscan software, and indeed one of the source IPs was ErrataSec.

Will it work? German email companies adopt new encryption to foil NSA - RT News

rt.com

August 10, 2013

Communications sent between Germany's two leading email providers will now be encrypted to provide better security against potential NSA surveillance.

The "E-mail made in Germany" project has been set up in the wake of US surveillance revelations made by NSA whistleblower Edward Snowden. National Security Agency documents show that the agency intercepts 500 million phone calls, texts, and emails in Germany each month. "Germans are deeply unsettled by the latest reports on the potential interception of communication data," said Rene Obermann, head of Deutsche Telekom, the country's largest email provider. "Now, they can bank on the fact that their personal data online is as secure as it possibly can be."

Willful Waste and Destruction at the Economic Development Administration

mygovcost.org

by K. Lloyd Billingsley

July 17, 2013

It's not clear how much economic development the federal Economic Development Administration, a division of the Commerce Department, actually produces.

But the Commerce Department's inspector general has some observations about the administration's performance after a cyber attack that turned out to be bogus. "EDA's persistent, mistaken beliefs resulted in an excessive response and ultimately unnecessary expenditure of valuable resources," the inspector general wrote in a report. "There was no evidence to suggest that EDA's primary business application had been targeted by a cyber attack or maliciously altered."

Windows Help Vulnerability Disclosure

blogs.technet.com

June 10, 2010

We are aware of a publicly disclosed vulnerability affecting Windows XP and Windows Server 2003. We are not aware of any current exploitation of this issue.

This issue was reported to us on June 5th, 2010 by a Google security researcher and then made public less than four days later, on June 9th, 2010. Public disclosure of the details of this vulnerability and how to exploit it, without giving us time to resolve the issue for our potentially affected customers, makes broad attacks more likely and puts customers at risk. We will be releasing a security advisory today with additional guidance and our teams are already working to address the core issue. In the meantime, customers can unregister the HCP protocol to protect themselves using the following steps...

Windows phone scammers continue to try to hack into your computer

abc15.com

by Joe Ducey

March 22, 2012

They say they're calling from Windows Support and that your computer has been sending error messages. All you have to do to fix it, they say, is follow their directions.

Scottsdale resident Linda Hard answered a call like this a few months ago. "I want you to go to the start button and pull up your program list," was the first thing they told her to do. But, that's as far as they got with Hard. "At that point, I said 'this is a scam and I'm hanging up,'" she said. "But there are people out there that wouldn't know it's a scam." And lots of those people have been falling victim to it.

Windows Remote Desktop worm "Morto" spreading

F-Secure Weblog

by Mikko

August 28, 2011

We don't see that many internet worms these days. It's mostly just bots and trojans. But we just found a new internet worm, and it's spreading in the wild.

The worm is called Morto and it infects Windows workstations and servers. It uses a new spreading vector that we haven't seen before: RDP. RDP stands for Remote Desktop Protocol. Windows has built-in support for this protocol via Windows Remote Desktop Connection. Once you enable a computer for remote use, you can use any other computer to access it.

Windows Security 101: EMET 4.0

krebsonsecurity.com

June 18, 2013

Several years ago, Microsoft released the Enhanced Mitigation Experience Toolkit (EMET), a free tool that can help Windows users beef up the security of third-party applications.

This week, Microsoft debuted EMET 4.0, which includes some important new security protections and compatibility fixes for this unobtrusive but effective security tool. First, a quick overview of what EMET does. EMET allows users to force applications to use several key security defenses built into Windows - including Address Space Layout Randomization (ASLR) and Data Execution Prevention (DEP). Put very simply, DEP is designed to make it harder to exploit security vulnerabilities on Windows, and ASLR makes it more difficult for exploits and malware to find the specific places in a system's memory that they need to do their dirty work.

Windows Store App Security Updates

blogs.technet.com

March 12, 2013

We are committed to adapting our policies as the world evolves and with the new Windows Store, we evaluated how to best release security updates for Windows Store apps.

Our goal is to have a quick, transparent and painless security update process. With this in mind, we will deliver high quality security updates for Windows Store apps as they become available. This applies to Microsoft apps that are installed using the Windows Store and to apps like Mail, which are preinstalled with Windows 8 but updated using the Windows Store. Providing security updates to these apps more frequently will allow us to add new functionality, fix issues and improve security. This will also help developers to avoid introducing new issues during the update process.

Windows XP

F-Secure Weblog

by Mikko

August 24, 2011

Let's compare the major computer operating systems at the moment. We have Windows XP, Windows Vista and Windows 7. We have various Linux distributions. And we have Mac OS X.

Of these, obviously Windows XP has the weakest security, by far. And Windows XP has the biggest marketshare, too. Globally close to half of all computers still run XP. And today, Windows XP is ten years old. Ten years is an eternity in this business. So it's no wonder XP's security architecture is not up to date.

With great name comes great liability?

f-secure.com

January 31, 2011

As users become smarter in distinguishing the name of fake and real antivirus programs, rogueware authors have now resorted to a bolder move - stealing the identity of a legit program and using it on their fake products.

A rogue was recently discovered to be using AVG's logo and reputable name, hoping to mislead and trick people into purchasing the fake AV. It implemented the typical method used by other rogues, i.e., pretending to scan the system and then claiming to have detected multiple malicious files. Since the free version is limited in capability, users have to upgrade to the full (fake) version to remove these files. Aside from AVG's logo, the rogue's interface bears no resemblance to that of the legit AVG Anti-Virus Free Edition 2011.

[First]  [Previous] |    162     163     164     165     166     167     168     169     170     171    | [Next]  [Last] of 172 page(s)