Home > News > Security March 12, 2010 User: Visitor

Home
Shows
News
   Technology
Software
Security
Evil, Evil Spam
Music
Links
Feedback
The Host
Technology FAQ
Site Map
Rules & Policies

Be A Guest on Tech Talk

My Account


Must-read articles on computer security, including virus alerts and much more!

Yahoo! News: Security News

  • It's Time to Finally Drop Internet Explorer 6 (PC World) - PC World - A security researcher has published exploit code for the latest Internet Explorer zero-day flaw on the Web and Microsoft is warning that more attacks against the unpatched vulnerability can be expected in-the-wild. One thing seems to be more apparent with each passing Internet Explorer (IE) vulnerability: its time to upgrade the Web browser.
  • Google says talks with China ongoing (AFP) - <p><a href="http://us.rd.yahoo.com/dailynews/rss/security/*http://news.yahoo.com/s/afp/20100311/tc_afp/chinausitmediarightsinternetgoogle"><img src="http://d.yimg.com/a/p/afp/20100311/capt.photo_1268304157969-2-0.jpg?x=130&y=88&q=85&sig=T79SVNYMX_0IIoXaInMrfg--" align="left" height="88" width="130" alt="A Chinese flag flies outside the Google China headquarters in Beijing. Google said Thursday that it was in talks with China on the future of the US Internet giant in the Asian nation, after the firm threatened to leave over cyberattacks and state web censorship.(AFP/File/Liu Jin)" border="0" /></a>AFP - Google said Thursday that it was in talks with China on the future of the US Internet giant in the Asian nation, after the firm threatened to leave over cyberattacks and state web censorship.</p><br clear="all"/>
  • Intego releases VirusBarrier X6 Dual Protection (Macworld.com) - Macworld.com - The perils of malware and viruses are everywhere, and Mac users shouldn’t be complacent, especially if they’re also running Windows via Boot Camp or other virtualization software. To those ends, Intego has released VirusBarrier X6 Dual Protection, which offers all the features of its X6 product for both Mac and Windows operating systems running on your machine.
  • Correction: Botnet Busted story (AP) - AP - In a story March 2 about the arrest of three suspects in the virus infection of nearly 13 million computers, The Associated Press erroneously reported the spelling of the last name of a captain with Spain's Guardia Civil, which is investigating the case. The captain's correct name is Cesar Lorenzana, not Lorenza.
  • Limewire P2P Network Adds Anti-Malware Protection (PC Magazine) - PC Magazine - LimeWire, one of the biggest peer-to-peer networks (and a traditional home for malware) has announced that the company is integrating AVG anti-malware protection into its LimeWire Pro service.
  • Hackers target freshly uncovered Internet Explorer hole (AFP) - <p><a href="http://us.rd.yahoo.com/dailynews/rss/security/*http://news.yahoo.com/s/afp/20100309/tc_afp/usitinternetsoftwarecrimecompanymicrosoft"><img src="http://d.yimg.com/a/p/afp/20100309/capt.photo_1268172583317-1-0.jpg?x=130&y=84&q=85&sig=maEiSl_Wp6G0CkluhdEJMA--" align="left" height="84" width="130" alt="An attendee tries an interactive display at the Microsoft booth at the 2010 International Consumer Electronics Show, in January 2010 in Las Vegas, Nevada. Microsoft on Tuesday warned that hackers are targeting a freshly-uncovered weakness in some earlier versions of its Internet Explorer (IE) Web browser software.(AFP/File/Robyn Beck)" border="0" /></a>AFP - Microsoft on Tuesday warned that hackers are targeting a freshly-uncovered weakness in some earlier versions of its Internet Explorer (IE) Web browser software.</p><br clear="all"/>
  • Excel, Movie Maker Flaws Fixed by Microsoft (PC World) - PC World - In a relatively light Patch Tuesday, Microsoft closed holes that could allow a poisoned Excel or Movie Maker file to install malware on a vulnerable PC. However, a new flaw involving VBScript and Windows Help files that can be targeted through Internet Explorer remains unfixed.
  • IE 6 and 7 Bug Allows for Attacks via Poisoned Sites (PC World) - PC World - A new security hole in Internet Explorer 6 and 7 can be targeted via code on a poisoned Web site, Microsoft warned today. A successful attacker could install malware on a victim PC or run any other remote command.
  • Panda Discovers Malware on HTC Magic Phone (PC World) - PC World - A Panda Security employee discovered three malware programs on a recently purchased HTC Magic phone when it was plugged it into a Windows computer.
  • Energizer USB Charger Software Contains Malware (NewsFactor) - NewsFactor - Some Windows PC users may hope the Energizer bunny didn't keep going and going. It turns out the Energizer DUO USB battery charger is a vehicle for attacks on PCs, according to the Department of Homeland Security's Computer Emergency Readiness Team.
  • FDIC: Hackers Took More Than $120M in Three Months (PC World) - PC World - Ongoing computer scams targeting small businesses cost U.S. companies US$25 million in the third quarter of 2009, according to the U.S. Federal Deposit Insurance Corporation.
  • US agencies needs clear cybersecurity roles: GAO report (AFP) - <p><a href="http://us.rd.yahoo.com/dailynews/rss/security/*http://news.yahoo.com/s/afp/20100306/tc_afp/usitcomputersecuritypoliticscongressgao"><img src="http://d.yimg.com/a/p/afp/20100306/capt.photo_1267837380088-1-0.jpg?x=130&y=77&q=85&sig=TPUOCL6Hp8MhdtlH8PI1zw--" align="left" height="77" width="130" alt="Staff members attend an opening ceremony of the new US Computer Emergency Readiness Team/National Cybersecurity and Communications Integration Center facility in 2009, in Virginia. US government cybersecurity efforts are being hampered by a need to better define the roles of the agencies responsible for defending against cyber threats, a US Congressional watchdog said Friday.(AFP/Getty Images/File/Win Mcnamee)" border="0" /></a>AFP - US government cybersecurity efforts are being hampered by a need to better define the roles of the agencies responsible for defending against cyber threats, a US Congressional watchdog said Friday.</p><br clear="all"/>
  • Cyber-terrorism a real and growing threat: FBI (AFP) - <p><a href="http://us.rd.yahoo.com/dailynews/rss/security/*http://news.yahoo.com/s/afp/20100305/tc_afp/usitinternetsoftwarecrimegovernmentrsa"><img src="http://d.yimg.com/a/p/afp/20100305/capt.photo_1267755386121-1-0.jpg?x=130&y=103&q=85&sig=rIjvDKJfplAepqhqXwWo6Q--" align="left" height="103" width="130" alt="Terrorists, crooks and nation states are ramping up cyberassaults that are eating away at data, cash and security in the US, according to the head of the FBI, Robert Mueller (pictured in February).(AFP/Getty Images/File/Alex Wong)" border="0" /></a>AFP - Terrorists, crooks and nation states are ramping up cyber-assaults that are eating away at data, cash and security in the United States, the head of the FBI warned.</p><br clear="all"/>
  • FBI director warns of growing cyber threat (Reuters) - Reuters - Militant groups, foreign states and criminal organizations pose a growing threat to U.S. security as they target government and private computer networks, FBI Director Robert Mueller said on Thursday.
  • NATO chief says enemy might be 'everywhere' in cyberspace (AFP) - <p><a href="http://us.rd.yahoo.com/dailynews/rss/security/*http://news.yahoo.com/s/afp/20100304/tc_afp/natosecurityinternet"><img src="http://d.yimg.com/a/p/afp/20100304/capt.photo_1267716875723-1-0.jpg?x=130&y=98&q=85&sig=L4Ysil2ypJ1ID5cL.iZpww--" align="left" height="98" width="130" alt="North Atlantic Treaty Organization (NATO) Secretary-General Anders Fogh Rasmussen speaks at a seminar on the alliance's comprehensive approach to crisis management in Helsinki.(AFP/LEHTIKUVA/Martti Kainulainen)" border="0" /></a>AFP - NATO must be ready to address the security threats posed by potential enemies in cyberspace, the secretary general of the western military alliance, Anders Fogh Rasmussen, said Thursday.</p><br clear="all"/>
  • Child porn, ID theft drive record cyber crime in Japan (AFP) - <p><a href="http://us.rd.yahoo.com/dailynews/rss/security/*http://news.yahoo.com/s/afp/20100304/tc_afp/japaninternetcrime"><img src="http://d.yimg.com/a/p/afp/20100304/capt.photo_1267717233879-1-0.jpg?x=130&y=70&q=85&sig=Nez7BVT8rYQtE4RBRUUqoQ--" align="left" height="70" width="130" alt="A Japanese patrol car is pictured in Nagakute, Aichi prefecture. Internet crime in Japan jumped to a new record last year, led by ID theft and database attacks, child pornography posts and copyright violations, the national police agency said Thursday.(AFP/File)" border="0" /></a>AFP - Internet crime in Japan jumped to a new record last year, led by ID theft and database attacks, child pornography posts and copyright violations, the national police agency said Thursday.</p><br clear="all"/>
  • NATO chief calls attention to cyber threats (AP) - <p><a href="http://us.rd.yahoo.com/dailynews/rss/security/*http://news.yahoo.com/s/ap/20100304/ap_on_hi_te/eu_finland_nato_cyberattacks"><img src="http://d.yimg.com/a/p/ap/20100304/capt.5ce1207b50534560b240e197e252b3ba.finland_nato_rasmussen_hel801.jpg?x=130&y=86&q=85&sig=88xQHFMLlW.PZKWt4R7sRA--" align="left" height="86" width="130" alt="NATO Secretary General Anders Fogh Rasmussen speaks at a seminar on NATO's new Strategic Concept, with the subject of comprehensive crisis management in Helsinki Thursday, March 4, 2010. (AP Photo/Lehtikuva, Martti Kainulainen)" border="0" /></a>AP - NATO is facing new threats in cyberspace that cannot be met by lining up soldiers and tanks, the alliance's secretary-general said Thursday in an apparent reference to terror groups and criminal networks.</p><br clear="all"/>
  • Accused Spanish Hackers Used a Kit To Take Over PCs (NewsFactor) - NewsFactor - Spanish authorities say they have nabbed the hackers behind the Mariposa botnet. The botnet, which was developed for large-scale theft of information, took control of more than 13 million computers in 190 nations.
  • Spanish "botnet" potent enough to attack country: police (Reuters) - Reuters - Spanish criminals who stole bank details from computers around the world did not realize the power of the illegal network they had created which could have paralyzed an entire country's computer systems, police said.
  • Spain smashes infected global computer network (AFP) - <p><a href="http://us.rd.yahoo.com/dailynews/rss/security/*http://news.yahoo.com/s/afp/20100303/tc_afp/spaincanadausitinternetsoftwarecomputercrime"><img src="http://d.yimg.com/a/p/afp/20100303/capt.photo_1267638118463-2-0.jpg?x=130&y=89&q=85&sig=X6VSrKhmxVLXGsQ1nrwExg--" align="left" height="89" width="130" alt="The head of a Spanish Guardia Civil unit specialised in tech crimes, Jose Antonio Berrocal, gives a press conference in Madrid. Spanish police said Wednesday they had arrested three men suspected of building the world's biggest network of virus-infected computers which hijacked more than 13 million PCs.(AFP/Dominique Faget)" border="0" /></a>AFP - Spanish police said Wednesday they had arrested three men suspected of building the world's biggest network of virus-infected computers which hijacked more than 13 million PCs.</p><br clear="all"/>
  • CNET News.com

  • Researcher publishes exploit for new IE hole - Clues in McAfee blog post led researcher to existing exploit code, which he then analyzed to write his own code.
  • LimeWire enlists AVG for user protection - Notorious as a malware ghetto, LimeWire takes its first steps to integrate authoritative threat protection by signing on AVG to provide premium users with download scanning and blocking.
  • Twitter to block malicious links - Links in direct messages on Twitter and e-mail notifications about direct messages will be filtered in an attempt to stop phishing attacks.
  • WhitePages.com halts ad networks over malware - Site investigates malware delivered via ads on its site in a fake antivirus attack similar to that on the Drudge Report site.
  • LifeLock to pay $12 million to settle deceptive-practices claim - FTC complaint alleged that LifeLock made false claims for adequately protecting customers from identity fraud and data theft.
  • Malware found on HTC Android phone from Vodafone - HTC mobile device running Android was distributed by Vodafone with a botnet program on it, as well as Conficker and a password-stealing Trojan, Panda Labs says.
  • Microsoft warns of zero-day IE hole on Patch Tuesday - New vulnerability in Windows and Office could allow an attacker to take control of IE 6 and IE 7 systems, software maker says.
  • Drudge Report accused of serving malware, again - Drudge says a Senate committee has falsely accused the conservative news aggregation site of spreading malware, but a CNET reader says it's true.
  • Backdoor found in Energizer Duo USB battery charger - The battery maker says it doesn't know how the Trojan got into the software it offered via download for Windows-based computers.
  • Police get Webcam pictures in school spy case - Two IT employees at Lower Merion School District have been put on administrative leave while alleged misuse of Webcams in student laptops is investigated.
  • At RSA 2010, the secure and the insecure (photos) - The cybersecurity conference in San Francisco brings together hackers and security professionals to decode the latest threats to the digital world.
  • RSA 2010: Taking on cyberthreats - roundup Everyone who's got cybersecurity on the brain--politicians, Web giants, and security vendors alike--are descending on RSA this week.
  • Microsoft to fix eight Windows and Office holes - Microsoft will have a relatively light Patch Tuesday next week, fixing eight holes with two bulletins, but a fix for a zero-day VBScript vulnerability is still pending.
  • Symantec exhibit makes cybercrime tangible - In a highly visual, hands-on display at RSA, the security firm shows tools and methods used for cybercrime and identity fraud.
  • 'Mission Impossible'-style heist hits N.J. Best Buy - Stealthy thieves rob a Best Buy in New Jersey "Mission Impossible" style, making off with $26,000 in Apple laptops.
  • Study lauds IE for blocking Web's social attacks - The study, funded by Microsoft, concludes that Microsoft's browser bests competitors in blocking socially engineered malware attacks.
  • McAfee: Source code is easy target within corporations - McAfee's analysis of Perforce software, which is used to house source code, finds numerous security weaknesses.
  • Study: Medical identity theft is costly for victims - New report finds that it can cost tens of thousands of dollars if someone uses your identity or insurance coverage to pay for medical treatment.
  • Spain arrests three accused of running huge botnet - The so-called Mariposa botnet was made up of about 12.7 million PCs infected with worm that stole data and spread via USB drives, MSN Messenger, and P2P networking.
  • Microsoft exec: Infected PCs should be quarantined (Q&A) - Under Scott Charney's plan, ISPs would keep infected PCs off the Internet, much like doctors quarantine sick people and governments restrict smoking in public areas.
  • Microsoft, Germans working on electronic ID card prototype - Microsoft's Scott Charney says company's identity management system can give consumers the power to control where their data ends up.
  • German court rules against data retention policy - Court strikes down law that required data from phone calls and e-mail to be retained by service providers for six months for use by law enforcement officials.
  • Botnets cause surge in February spam - Spam levels increase more than 5 percent in February over prior month, due in large part to greater activity from Grum and Rustock botnets, according to Symantec.
  • Report: Aurora attack was tested last summer - Latest report on attacks targeting Google and others calls it just another "old school" botnet.
  • Microsoft warns of zero-day hole for older Windows - One workaround for hole that could be exploited by attackers taking control of Windows running IE is to avoid pressing the F1 key when prompted by a Web site.
  • US-CERT Cyber Security Alerts

  • SA10-068A: Microsoft Updates for Multiple Vulnerabilities - Microsoft Updates for Multiple Vulnerabilities
  • SA10-040A: Microsoft Updates for Multiple Vulnerabilities - Microsoft Updates for Multiple Vulnerabilities
  • SA10-021A: Microsoft Internet Explorer Vulnerabilities - Microsoft Internet Explorer Vulnerabilities
  • SA10-013A: Adobe Reader and Acrobat Vulnerabilities - Adobe Reader and Acrobat Vulnerabilities
  • SA10-012B: Microsoft Windows and Adobe Flash Player 6 Vulnerabilities - Microsoft Windows and Adobe Flash Player 6 Vulnerabilities
  • SA09-343A: Adobe Flash Vulnerabilities Affect Flash Player and Adobe AIR - Adobe Flash Vulnerabilities Affect Flash Player and Adobe AIR
  • SA09-342A: Microsoft Updates for Multiple Vulnerabilities - Microsoft Updates for Multiple Vulnerabilities
  • SA09-314A: Microsoft Updates for Multiple Vulnerabilities - Microsoft Updates for Multiple Vulnerabilities
  • SA09-286B: Multiple Vulnerabilities Affect Adobe Reader and Acrobat - Multiple Vulnerabilities Affect Adobe Reader and Acrobat
  • SA09-286A: Microsoft Updates for Multiple Vulnerabilities - Microsoft Updates for Multiple Vulnerabilities
  • US-CERT Cyber Security Tips

  • ST05-003: Securing Wireless Networks - Securing Wireless Networks
  • ST04-022: Understanding Your Computer: Web Browsers - Understanding Your Computer: Web Browsers
  • ST04-021: Understanding Your Computer: Operating Systems - Understanding Your Computer: Operating Systems
  • ST04-020: Protecting Portable Devices: Data Security - Protecting Portable Devices: Data Security
  • ST04-019: Understanding Encryption - Understanding Encryption
  • ST04-018: Understanding Digital Signatures - Understanding Digital Signatures
  • ST04-017: Protecting Portable Devices: Physical Security - Protecting Portable Devices: Physical Security
  • ST04-016: Recognizing and Avoiding Spyware - Recognizing and Avoiding Spyware
  • ST04-015: Understanding Denial-of-Service Attacks - Understanding Denial-of-Service Attacks
  • ST04-014: Avoiding Social Engineering and Phishing Attacks - Avoiding Social Engineering and Phishing Attacks