Browse Blog Posts by Tags

All Tags » Vulnerabilities, viruses and exploits » Security, safety and privacy on the Internet (RSS)

MVP WordPress Blogs

Browse Blog Posts by Tags

Showing related tags and posts for the Blogs application. See all tags in the site

Firefox malware attack.

From Harry's blog http://msmvps.com/blogs/harrywaldron/archive/2006/07/25/105724.aspx "FormSpy (aka FireSpy) is a new spyware program designed to integrate into the Mozilla browser environment. It is being spread by spam email spoofed to appear as a billing issue from Walwart. It was launched on July...

Posted to Spyware Sucks by sandi on Tue, Jul 25 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits
Competition for SiteAdvisor - LinkScanner

McAfee's Site Advisor has competition, strong competition, from LinkScanner, a new (free) offering by security startup Exploit Prevention Labs. LinkScanner claims to be a real time exploit scanner, unlike McAfee's Site Advisor which it describes as " not immediate and not empirical ". cite: http://www...

Posted to Spyware Sucks by sandi on Mon, Jul 24 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits
PATCH YOUR SYSTEMS!!!! Over 1 million myspace.com users infected by an old exploit...

Why don't people patch their machines?? Over one million visitors to various myspace.com pages have been infected via the WMF exploit that was patched back in JANUARY . myspace_ad_served_adware_to_mo.html This scares me.. Microsoft can only do so much to protect users from themselves. The use of this...

Posted to Spyware Sucks by sandi on Fri, Jul 21 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits
80% of new malware defeats antivirus...

Ok, so tell me something I *don't* know: http://www.zdnet.com.au/news/security/soa/Eighty_percent_of_new_malware_defeats_antivirus/0,2000061744,39263949,00.htm The time is long past that I have depended on any antivirus or antispyware product to clean a system properly, or detect all malware files. Instead...

Posted to Spyware Sucks by sandi on Thu, Jul 20 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits, General stuff
But but but.. Linux is *safe*

http://isc.sans.org/diary.php?storyid=1482 "As all kernels 2.6.13 up to version 2.6.17.4 and 2.6.16 before 2.6.16.24 are affected, you should patch as soon as possible, even if you don't allow any local users on your machines . Remember that even a small vulnerability in a PHP script can allow local...

Posted to Spyware Sucks by sandi on Thu, Jul 13 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits
Errorsafe does it again via the Messenger Plus! sponsor program

Messenger Plus! users are still being exposed to malware/infector advertisers via Patchou's Sponsor Program. The adultfriendfinder.com and passion.com ads are there, and seem to be getting more risque as the days go by. My primary concern tonight, though, is the re-emergence of Errorsafe. Note the completely...

Posted to Spyware Sucks by sandi on Fri, Jun 30 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits
You know you've arrived when people start searching for vulnerabilities in your product

Opera draws attention. JPEG flaw uncovered in Opera browser (8.54) http://www.vnunet.com/vnunet/news/2158971/jpeg-flaw-uncovered-opera Proof of concept - Opera 9 http://www.critical.lt/?vuln/349

Posted to Spyware Sucks by sandi on Sat, Jun 24 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits
Thanks Ian! I enjoyed the giggle :)

One of my loyal readers pointed me to this site, coincidentally after reading my blogpost about the Bit9 assessment which placed Firefox 1.0.7 as the most dangerous non-malicious software out there: http://www.cweiske.de/ It seems the owner/author doesn't like IE and is blocking access to IE users. That...

Posted to Spyware Sucks by sandi on Thu, Jun 22 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Internet Explorer 7, Vulnerabilities, viruses and exploits
Bit9 says malicious software is not your biggest threat

This is an interesting way of looking at security risk. Bit9 put together a list of the 15 most "dangerous" software products that are not malicious software. To make it on to this list, the software: is well-known in the consumer space and frequently downloaded by individuals; is not classified as malicious...

Posted to Spyware Sucks by sandi on Thu, Jun 22 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits
Email with malicious links targetting Australians and the National Australia Bank

As you will see in this SANS alert , there is an email circulating that is targetting Australians - specifically, customers of the National Australia Bank. Of special note is the fact that the email targets not only Internet Explorer vulnerabilities, but targets Firefox users as well - the bullseye on...

Posted to Spyware Sucks by sandi on Fri, Jun 16 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits
Is patching important?

Hell yes. SANS reports on vulnerabilities already being exploited: http://isc.sans.org/diary.php?n&storyid=1415 And remember what happened to Circuit City? http://msmvps.com/blogs/spywaresucks/archive/2006/06/03/98941.aspx This is the reality friends .. once an exploit is public, or even semi-public...

Posted to Spyware Sucks by sandi on Wed, Jun 14 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits
Cumulative update for Internet Explorer

Yes, this Tuesday is/was Patch Tuesday.: http://www.microsoft.com/technet/security/Bulletin/MS06-021.mspx Heads up; the cumulative update includes the change to handling of activex controls, except this time it cannot be disabled by the compatibility patch. Now, I know that some of you have issues with...

Posted to Spyware Sucks by sandi on Wed, Jun 14 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits
Do you Yahoo? You might want to be careful.....

"Until Yahoo patches the flaw, Symantec recommended users steer clear of the [web based email] service or disable the browser's JavaScript capabilities before reading any web mail." Strong words... http://www.itnews.com.au/newsstory.aspx?CIaNID=33594

Posted to Spyware Sucks by sandi on Tue, Jun 13 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits
Current state of play: Malicious Software Removal Tool

Wow, MSRT cleaned a PC with 251 different infections - how on earth did that PC manage to boot up, let alone get on the net and download the MSRT. There are some fascinating statistics in a report just released by MS: Windows Malicious Software Removal Tool: Progress Made, Trends Observed http://www...

Posted to Spyware Sucks by sandi on Mon, Jun 12 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits
Firefox 1.5.0.4 released on 1 June.

Sorry, was a bit slow on this one. Here we go again... I sure wish they'd release patches instead of making us redownload and reinstall the entire browser every time they address security issues: http://www.mozilla.com/firefox/releases/1.5.0.4.html#new

Posted to Spyware Sucks by sandi on Sun, Jun 4 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits
Circuit City support site hacked - infecting PCs

First HP, now this. Circuit City's support web site , forum.circuitcity.com, was compromised by a person or persons unknown, possibly via an unpatched security flaw in Invision Power Forum, and malicious code was added that infected any visitor to the support site who had not patched their systems against...

Posted to Spyware Sucks by sandi on Fri, Jun 2 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits
HP driver infected with a virus - again!!

Yep, you heard right; a device driver available for download from Hewlett Packard was infected with the Funlove virus: http://www.itnews.com.au/newsstory.aspx?CIaNID=33248 What I want to know is... why did it take a third party company to spot the virus in the device driver? Doesn't HP have their own...

Posted to Spyware Sucks by sandi on Fri, Jun 2 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits
Oy vey... these guys are getting TOO smart

http://www.viruslist.com/en/weblog?weblogid=187189654 BTW, a matrioshka is a Russian nesting doll.

Posted to Spyware Sucks by sandi on Mon, May 22 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits
MS Word Exploit - Administrator Rights - Oh my...

Some areas of the net are in a flap about the MS Word exploit that has been the focus of some publicity recently. Some sites are even advising that we should consider dumping MS Word in preference to OpenOffice . Come on guys. We shouldn't even be thinking about fighting this thing by moving to a different...

Posted to Spyware Sucks by sandi on Sat, May 20 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits, General stuff
MS Word Zero Day Exploit - its real but there's some misinformation out there...

I spend *far* too much time chasing after false positives in antivirus and antispyware applications, and too much time shouting down misinformation - do a search for the words "false positive" in this blog and you'll see what I mean. (Note: please do NOT assume that just because Trend is highlighted...

Posted to Spyware Sucks by sandi on Sat, May 20 2006
Filed under: Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits

Page 13 of 15 (288 items) « First ... < Previous 11 12 13 14 15 Next >

Questions? Contact Susan at Susan-at-msmvps.com. Each post's copyright held by the original author. All rights reserved. Blog site is an independent site not sponsored by Microsoft.
Our servers would like to thank www.ownwebnow.com and www.exchangedefender.com. We wouldn't be here without the generosity of Vlad Mazek and his companies.

Powered by Community Server (Commercial Edition), by Telligent Systems

Theme based on the Paperclip Blog Theme included in Community Server.
Enhanced to a Site-Wide Theme by Interscape Technologies.