Firefox 26 blocks Java plugins by default

Wednesday, December 11th, 2013

Mozilla released Firefox 26 which includes five critical, three high, three moderate, and three low security updates. All Java plug-ins are defaulted to 'click to play', which is a welcome security addition. Benjamin Smedberg, Engineering Manager, Stability and Plugins at Mozilla commented: "When Mozilla conducted a user research study on the prototype ...

Have I been pwned?

Friday, December 6th, 2013

A very useful site was just created to check if any of your online accounts have been compromised (yet): http://www.haveibeenpwned.com/ It’s trustworthy…I know the guy who runs it and it will be updated with all the major data breaches going forward.

Virus can attack ‘any bank anywhere’

Friday, November 29th, 2013

Kaspersky Lab has recorded several thousand attempts to infect computers used for online banking with a malicious programme that its creators claim can attack “any bank in any country”. The Neverquest Trojan banker supports just about every possible trick used to bypass online banking security systems: web injection, remote system access, ...

JPEG Files Used For Targeted Attack Malware

Friday, November 29th, 2013

We recently came across some malware of the SOGOMOT and MIRYAGO families that update themselves in an unusual way: they download JPEG files that contain encrypted configuration files/binaries. Not only that, we believe that this activity has been ongoing since at least the middle of 2010. A notable detail of the malware ...

Exploit Targeting Windows Zero-Day Vulnerability Spotted

Thursday, November 28th, 2013

Trend Micro came across samples of an exploit targeting the recently announced zero-day vulnerability affecting Windows XP and Server 2003. This is an elevation of privilege vulnerability, which may allow a threat actor to gain certain privileges that enable him to do varied activities, including deleting or viewing data, installing programs, or ...