SEARCH RESULTS
 
Showing 1-10 of 122 records
 
Expand article

Summarizing Zero Day's Posts for September

The Article has images
2008-10-07 10:54:00 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...usual, here's September's summary of all of my posts at Zero Day . You may also want to catch up and go through August's and July's summaries , next to adding my personal RSS feed or Zero Day's main feed to your RSS reader Notable article for September - Spamming vendor launches managed spamming service 01. DoS vulnerability hits Google's...
 
Tags: google downplays chrome, chrome, vendor launches, day, september, norwegian bittorrent tracker, malware, hand mobile devices, malware attack
 
 
 
 
Expand article

Summarizing July's Threatscape

The Article has images
2008-08-01 16:08:24 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...usual, however their centralization is greatly assisting in tracking them down 09. Storm Worm's U.S Invasion of Iran Campaign Stormy Wormy is once again making the headlines with their ability to actually make up the headlines on their own 10. Mobile Malware Scam iSexPlayer Wants Your Money The best scams are the ones to which you've...
 
Tags: malware, profitable malware operations, malware authors, malware tools, malware coder, malware kit, malware infection, neosploit malware kit, spam
 
 
 
 
Expand article

Embedding Malicious IFRAMEs Through Stolen FTP Accounts

The Article has images
2008-03-03 10:14:01 by HASH0x8b0b9bc in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...usual, as usual in the sense of the hundreds of other such propositions currently active online. And if we're to use an analogy on its importance as a event, it's like your smell receptors, namely the more you use a particular fragnance, the less you're capable of sensing it since you're getting used to the smell. In this line of thoughts,...
 
Tags: ftp accounts, ftp, iframes, malicious iframes, web service, service, ftp account credentials, demand service, data
 
 
 
 
Expand article

Storm Worm's Lazy Summer Campaigns

The Article has images
2008-07-31 06:39:35 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...usual creativity in respect to the usual social engineering attacks taking advantage of the momentum we're used to seeing. These days they're not piggybacking on real news items, they're starting to come up with new ones Storm's latest "FBI vs Facebook" campaign is an example of very badly executed one, lacking their usual fast-flux, any...
 
Tags: storm, campaign, storm worm campaign, storm nameservers, storm worm sample, storm fast-flux node, brprbgok6, usual social, lee chung leelikethisone1
 
 
 
 
Expand article

Summarizing August's Threatscape

The Article has images
2008-09-10 06:57:32 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...usual, August was a pretty dynamic month for the middle of summer, with everyone excelling in their own malicious field 01. McAfee's Site Advisor Blocking n.runs AG - "for starters False positives are rather common, especially when you're aiming to protect the end user from himself and not let him gain access to "hacking tools", but you're...
 
Tags: malware, facebook malware campaigns, usefulness pinch malware, banker malware kits, malware campaigns, botnet, diy botnet kit, distribute malware, banker malware
 
 
 
 
Expand article

Wordpress 2.5 cookie integrity protection vulnerability

2008-04-25 16:03:19 by Steven J. Murdoch in Light Blue Touchpaper
 
...usual, then modify their cookie so its valid for the administrator account Fu et al. called this the cryptographic splicing attack in their paper (Section 3.3), and is one of the many ways they show how people can slip up when implementing web authentication. Unfortunately, dynamic website frameworks, especially PHP, offer little assistance...
 
Tags: cookie, time, user expiry time, wordpress, secure cookie protocol, expiry time, vulnerability, username, maintain cookie uniqueness
 
 
 
 
Expand article

Fun Reading on Security - 2

2008-05-09 12:20:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...usual "blogging frenzy" machine gun blast of short posts, I will just combine them into my new blog series " Fun Reading on Security ." Here is an issue #2, dated May 8, 2008 So my next iteration of fun reading on security, logging and other topics 0x000000 blog has a neat post on security , word definition and all. It reminds us that...
 
Tags: security, security industry longevity, security industry, technologies, security technologies evolution, security vendors, security perspective, security catalyst community, fun
 
 
 
 
Expand article

Eicar.pdf

2008-05-20 18:02:02 by Dave Lewis in Liquidmatrix Security Digest
 
...usual formats and less usual formats. Today, Im publishing a PDF document with an embedded EICAR test file (eicar.txt). This PDF document has also an annotation with a JavaScript action linked to it. Clicking the annotation will export the embedded eicar.txt file to a temporary folder and launch the default editor for .txt files Read on...
 
Tags: eicar, eicar test file, txt, txt files, pdf document, usual formats, txt file, javascript action, quick post
 
 
 
 
Expand article

Those wild and crazy guys are back! - SSAATY #54

The Article has images The Article has audio podcast
2008-05-30 11:04:59 by HASH0x8b3c264 in StillSecure, After All These Years
...usual back and forth. Hopefully it will spur us on to do more of podcasts If you like the content of these shows or have any other comments or questions, please drop us a line at podcast@stillsecure.com Thanks to ClickCaster for hosting our podcast. Tonights music is the usual, To the Summit by Jon Schmidt. You can hear more from Jon at...
 
Tags: mitchell, mitchell ashley, jon schmidt, jon, music transitions, tonights music, tjx fires, usual, lax security