Flaw in Conficker Worm May Aid Cleanup Effort

Monday, March 30th, 2009

Experts have discovered a security hole in the computer code that powers the Conficker worm, an aggressive contagion that has spread to more than 12 million Microsoft Windows systems worldwide. The security community is treading lightly with this news, because while the discovery could make it easier to isolate infected ...

Mozilla Firefox XSL Parsing ‘root’ XML Tag Remote Memory Corruption Vulnerability

Thursday, March 26th, 2009

Mozilla Firefox is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected browser. Failed exploit attempt will result in a denial-of-service condition. The following proof of concept is available: http://www.securityfocus.com/data/vulnerabilities/exploits/2009-ffox-poc.tar.gz

Panda Releases Free Security Tool for Autorun

Thursday, March 26th, 2009

Panda, an antivirus software company, has a new free Panda USB Vaccine available for download that can disable the Windows Autorun feature for an entire PC or a particular USB drive. The Autorun feature in Windows can make it easier to install software - and it can also be exploited by ...

Compromised Site: Peugeot

Wednesday, March 25th, 2009

Websense Security Labs ThreatSeeker Network has discovered that the official Web site of Peugeot in Romania has been compromised and is infecting the machines of site visitors with malicious code. Malicious code has been inserted onto the reported page of the site via iframes. These iframes redirect to the pages ...

Stealthy router-based botnet worm squirming

Tuesday, March 24th, 2009

Researchers at DroneBL have spotted signs of a stealthy router-based botnet worm targeting routers and DSL modems. The worm, called “psyb0t,” has been circulating since at least January this year, infecting vulnerable embedded Linux devices such as the Netcomm NB5 ADSL modem (above) and launching denial-of-service attacks on some Web sites. Some ...