Hack of Boxee.tv exposes password data, messages for 158,000 users

Tuesday, April 1st, 2014

Hackers posted names, e-mail addresses, message histories, and partially protected login credentials for more than 158,000 forum users of Boxee.tv, the Web-based television service that was acquired by Samsung last year, researchers said. The breach occurred no later than last week, when a full copy of the purloined forum data became widely ...

Word and Excel Files Infected Using Windows PowerShell

Thursday, March 27th, 2014

Malware targeting Word and Excel files has been around for some time, but we recently encountered a new malware family, CRIGENT (also known as “Power Worm”) which brings several new techniques to the table. (We detect these files as W97M_CRIGENT.JER and X97M_CRIGENT.A.) Most significantly, instead of creating or including executable code, CRIGENT uses the ...

Texting ATMs for Cash Shows Cybercriminals’ Increasing Sophistication

Tuesday, March 25th, 2014

There is a growing chorus of voices calling for businesses and home users to upgrade existing Windows XP installations to newer versions of Windows, if not for the features, then at least for the improved security and support. ATMs are basically computers that control access to cash, and as it ...

Cyber threats to Windows XP and guidance for Small Businesses and Individual Consumers

Tuesday, March 25th, 2014

It’s been well publicized that on April 8th, 2014 Microsoft discontinues product support for Windows XP.  Released in 2001, the support policy for the life of Windows XP soon followed in October 2002.  In September 2007, we announced that support for Windows XP would be extended an additional two years ...

Zero-day vulnerability in Microsoft Word under active attack

Monday, March 24th, 2014

Attackers are exploiting a newly discovered vulnerability in Microsoft Word that makes it possible to remotely seize control of computers, the company warned. The in-the-wild attacks work by creating booby-trapped documents in the Rich Text Format (RTF) that exploit a vulnerability in the 2010 version of Microsoft Word, Microsoft warned in ...