Flame code linked to Stuxnet virus, experts say

Thursday, June 14th, 2012

The Flame cyber-attack that targeted computers across the Middle East has been linked to the Stuxnet worm, which is believed to have been orchestrated by the US and Israel to attack Iranian nuclear centres. Speaking at the Reuters Global Media and Technology Summit on 11 June, Eugene Kaspersky, chief executive of ...

Simple authentication bypass for MySQL root revealed

Wednesday, June 13th, 2012

Exploits for a recently revealed MySQL authentication bypass flaw are now in the wild, partly because the flaw is remarkably simple to exploit in order to gain root access to the database. The only mitigating factor appears to be that it depends on the C library that the MySQL database ...

Analyzing the MD5 collision in Flame

Monday, June 11th, 2012

Here is a great analysis of the MD5 collision in Flame by Alex Sotirov. https://trailofbits.files.wordpress.com/2012/06/flame-md5.pdf

Malicious URLs in Fake Craigslist Emails

Friday, June 8th, 2012

Today, Websense® Security Labs™ ThreatSeeker™ Network has seen a barrage of malicious emails pretending to be automated notifications from Craigslist. These emails instruct the recipient to click a link to complete a Craigslist request. The URLs in these emails redirect the user to malicious web sites hosting Blackhole Exploit Kit. So far we have ...

Millions of Last.fm passwords leaked

Friday, June 8th, 2012

A list with several million passwords belonging to users of the music community site Last.fm has been posted on the internet. The site owners have posted a statement saying that the company is investigating the leak and that all users of the service should change their passwords immediately. This is ...