YouTube Addicts Beware

Monday, June 16th, 2008

From Web sites related to online banking, credit unions, financial departments, and social networking sites, phishers are chucking their rods into relatively new territory: video streaming sites. Trend Micro Content Security team learned about this latest (and very interesting) phishing technique a few days back. Several phishing domains (see Figure 1) ...

Details emerge of Safari “carpet bomb” flaw

Monday, June 16th, 2008

The vulnerability known as the Safari carpet bomb has still not been fixed, despite Microsoft releasing a security update for Internet Explorer last Tuesday evening. The consensus is that Microsoft's browser is the main cause of the problem, which can create a security hole in combination with Apple's Safari. When Internet ...

A Guide to Protecting Your Identity Online

Saturday, June 14th, 2008

With identity theft on the rise and personal information at a premium, it's never been more important to be cautious about what you reveal online. Social-networking sites such as Facebook have largely usurped chatrooms and forums -- at least in the grown-up world -- as fun places to hang around online ...

Cross-Site Scripting (XSS) – A Real-World Example

Saturday, June 14th, 2008

Cross-Site Scripting (XSS) is an attack that's pretty basic to detect, pretty basic in execution, and you'd think that it would be rather simple to understand. Unfortunately this is apparently not the case. I won't go into the details of Cross-Site Scripting because others have beat that to death - ...

Vishing Attacks Increasing

Friday, June 13th, 2008

In recent months, Web site compromises have become the most prevalent problem that threatens Internet users from all over. While this trend continues to dominate today’s security issues, let’s not forget about other threats that, although may be not as massive as these attacks, have equally serious ramifications against the ...