Virus Information News

  1     2     3     4     5     6     7     8     9     10    | [Next]  [Last] of 172 page(s)

Blowing the Whistle on West Nile

Reliable Answers.com

by Lynn Landes

August 22, 2005

Pesticides pose a much greater health hazard than the West Nile virus.

I'm reminded of the 1950's...TV newscasts showing clouds of DDT sprayed on a clueless public, compromising their health and contaminating the environment for decades to come, as Rachel Carson writes "Silent Spring." Pesticides pose a much greater health hazard than the West Nile virus.

Banks Shifting Logins to Non-SSL Pages

Netcraft

August 23, 2005

After years of training customers to trust only SSL-enabled sites, banks are shifting their online banking logins to the unencrypted home pages of their websites. Although the data is encrypted once the user hits the "Sign In" button, the practice runs co

Web sites are generally reluctant to use "https" on busy home pages, since SSL involves a tradeoff: improved security, but slower response time. Consumers, meanwhile, prefer easy to-remember URLs for their online banking. In placing login screens on non-SSL home pages, banks are trying to have it both ways: fast page loading without the SSL-related performance hit. The login form's "action" URL points to an SSL-enabled https URL. Since the introduction of SSL, Internet users have been urged to check for the "golden lock" icon to ensure a web session is encrypted before conducting e-commerce transactions. As phishing has grown rampant, the Anti-Phishing Working Group and Federal Trade Commission have warned consumers to be sure a web page is using SSL before sharing personal information.

Cisco Intrusion Detection Products May Allow Intrusion

Netcraft

August 23, 2005

A Cisco security flaw may allow attackers to hack into systems through the intrusion detection system (IDS), Cisco warned Monday in an advisory . An SSL certificate-checking flaw in two Cisco products - CiscoWorks Management Center for IDS Sensors (IDSMC)

A successful attacker "may be able to gather login credentials, submit false data to IDSMC and Secmon or filter legitimate data from IDSMC and Secmon, thus impacting the integrity of the device and the reporting capabilities of it," Cisco said. A free software update that corrects the flaw is available from Cisco. The announcement continues a trend in which security products are emerging as a potential entry point for attackers. Last year the Witty Worm spread rapidly using a security weakness in BlackIce IDS products from Internet Security Systems. Serious security holes have also been discovered in Symantec antivirus products and the ZoneAlarm family of firewalls from Computer Associates, among others.

Brazilian police arrest 85 in crackdown on hackers

Reuters

August 25, 2005

Brazilian police arrested 85 people on Thursday accused of stealing more than $33 million by hacking into the online bank accounts of unwitting Internet users, authorities said.

The raid -- dubbed Operation Pegasus -- was carried out by 410 federal police officers in seven states, making it one of the biggest crackdowns on electronic crime in Brazil. In all, 105 arrest warrants were issued after a four-month investigation found that the suspects had pocketed about 80 million reais in the scam.

Yahoo major phishing site host

CNET News

by Tom Espiner

September 6, 2005

Anti-spam group Spamhaus says almost 5,000 sites on Yahoo use the words bank, eBay and PayPal in their domain names.

Spamhaus has accused Yahoo of failing in the fight against online fraud, and Microsoft has admitted there is room for improvement. Yahoo is playing host to thousands of phishing sites and doesn't have sufficiently well-trained staff to address the problem of online fraud, according to a leading anti-spam and security organization on Tuesday. Richard Cox, chief information officer of Spamhaus, told an audience of politicians, security experts and law enforcement officials that Yahoo has just under 5,000 domains hosted and registered with the words 'bank', 'eBay' and 'PayPal' within the domain names.

Beware, Bagle is Back

internetnews.com

by David Needle

September 22, 2005

Several anti-virus security sites have issued warnings that a variant of the infamous Bagle worm has shown up on the Internet, spreading via e-mails. SophosLabs is warning that the apparent creator of Bagle is "intent on infecting as many people as possib

"All computer users should avoid opening unsolicited e-mail attachments and ensure that their anti-virus protection is up to date," said Carole Theriault, senior security consultant at Sophos, in a statement. "Businesses should also consider blocking all executable code from entering their networks via e-mail -- most companies have no need to receive computer programs via this route, and it dramatically reduces the risk of infection." All of the different versions of the Trojan horse attempt to turn off anti-virus and security software, and block access to security websites, in an attempt to allow hackers to gain access to infected computers. Anti-virus and security firm Microworld Technologies said the new Bagle worm is unable to propagate on its own, and the infected messages have been mass mailed using spamming technologies.

SpreadFirefox.com Community Website Hacked Once Again

net-security.org

by HNS Consulting Ltd.

October 4, 2005

As you may remember, back in July, spreadfirefox.com had its security compromised. Unfortunately this happened again, this time because of vulnerabilities in the TWiki system.

"The Spread Firefox Team became aware this week that the server hosting Spread Firefox, our community marketing site, has been accessed by unknown remote attackers who attempted to exploit a security vulnerability in TWiki software installed on the server. The TWiki software was disabled as soon as we were aware of the attempts to access SpreadFirefox.com. This exploit was limited to SpreadFirefox.com and did not affect mozilla.org web sites or Mozilla software."

Promotional Firefox community site hacked (again)

arstechnica.com

by Ryan Paul

October 4, 2005

Some of you may remember when the SpreadFirefox site got hacked by spammers in July. Well, it happened again. Although the unfortunate Drupal vulnerabilities have all been adequately patched, site maintainers overlooked significant, remotely exploitable v

SpreadFirefox members received e-mails this morning informing them of a potential intrusion. The e-mail assures us that the exploit was limited to the SpreadFirefox server, and never affected the Mozilla sites or software. Like last time, the administrators believe that no critical data was acquired, but they recommend that users change their passwords...

Network feud leads to Net blackout

CNET News

by John Borland

October 5, 2005

Network feud leads to Net blackout | Two major Net companies stop exchanging traffic, cutting off access to each other's networks for some customers.

On Wednesday, network company Level 3 Communications cut off its direct "peering" connections to another big network company called Cogent Communications. That technical action means that some customers on each company's network now will find it impossible, or slower, to get to Web sites on the other company's network.

MySpace hacked: Samy is my Hero

fast.info

October 13, 2005

An aquaintance of mine recently managed within 24 hours to become the most popular civilian on myspace with the help of a clever bit of viral javascript imbedded into his myspace page.

Let's see here...what would make my profile rock. Well, the most popular profiles on myspace pretty much consist of people with the limited english skills so I don't want to mimic those, but popularity begets popularity. I need some more friends. I need people to love me. I delved in and found that I could basically control the web browsing of anyone who hit my profile. In fact, I was able to develop something that caused anyone who viewed my profile to add my name to their profile's list of heroes. I was ecstatic. But it wasn't enough. I needed more. So I went deeper. A Chipotle burrito and a few clicks later, anyone who viewed my profile who wasn't already on my friends list would inadvertently add me as a friend. Without their permission. I had conquered myspace. Veni, vidi, vici.

  1     2     3     4     5     6     7     8     9     10    | [Next]  [Last] of 172 page(s)