Rootkit code to exploit major Intel chip

Wednesday, March 18th, 2009

This is the scariest, stealthiest, and most dangerous rootkit I’ve seen come around since the legendary Blue Pill! No, I’m not just trying to sensationalize this or spread fear, uncertainty and doubt. This is serious and represents a massive new security threat for us all. Security Researchers Joanna Rutkowska and Loic ...

IRS Stimulus Package Phishing Scam

Friday, February 6th, 2009

US-CERT is aware of public reports indicating that phishing scams are circulating via fraudulent U.S. Internal Revenue Service emails offering users stimulus package payments. These emails include text that attempts to convince users to follow a link to a website or to complete an attached document. The website and document ...

phpBB Downtime and Server Compromise

Tuesday, February 3rd, 2009

As you may already be aware from the message on phpBB.com or the topic in the #phpBB channel on Freenode, we have recently been attacked via a vulnerability in an outdated PHPList installation. The initial attack was performed well before a new version of the software was released or a ...

RFID Passports Secretly Copied

Monday, February 2nd, 2009

If you have an RFID-lojacked passport but don't keep it in a faraday cage wallet, this video of Chris Paget's war-driving exploits—plucking information off them from afar—should make you think real hard about it. Cruising through downtown San Francisco in his car with a $250 homebrew RFID reader setup consisting of ...

Google’s Malware Detection Broken

Saturday, January 31st, 2009

As of right now, it appears any google search you do will come up with all the same results as before.  What has changed is that it appears to be reporting that every site might contain malware (i.e. it shows the "This site may harm your computer" warning with every ...