Exploit Reveals the Darker Side of Automatic Updates

Tuesday, July 29th, 2008

A recent study of Web browser installations showed that far too few are up to date with the latest security patches. And browsers aren't alone; as my dear old mum can attest, it can be hard to keep up with OS and application patches when all you want to do ...

Hacking Without Exploits

Tuesday, July 29th, 2008

Cybercriminals increasingly are employing no-tech or low-tech techniques for making big money online -- no exploits or sophisticated hacker tools required.The techniques themselves aren’t new -- some have been around for nearly a decade. But the Web model has made these schemes that capitalize on so-called business logic flaws more ...

Security researcher publishes exploit toolkit

Tuesday, July 29th, 2008

An Argentinian security researcher has published a security exploit toolkit targeting the update mechanisms of Java, Mac OS X, OpenOffice.org and other software, and relying on man-in-the-middle techniques such as those made possible by the recently disclosed DNS security hole. The toolkit, ISR-Evilgrade 1.0, was released by Francisco Amato, a researcher ...

Security update for AVG virus scanner

Tuesday, July 29th, 2008

AVG Technologies' virus scanner contains a DoS vulnerability that allows attackers to crash the scanner. The crash is caused by division by zero when processing UPX-packed files. The vendor has released update 8.0.156, which fixes the problem.Also in this version, the Search-Shield components do not scan web sites for malicious ...

Online Banking: Widespread Security Flaws Revealed

Tuesday, July 29th, 2008

Online bankers, beware. More than 75 percent of bank Web sites surveyed by a research team had at least one design flaw that could make customers vulnerable to cyber thieves.University of Michigan computer scientist Atul Prakash and his graduate students Laura Falk and Kevin Borders examined the Web sites of ...