Schannel zero-day exploit released
105905
Blog: Original researcher makes public his own exploit code.
582154
The new native IPsec implementation for 2.6.x kernels greatly improves the security of Linux systems.
598197
Technique lets intruders exploit flaws previously thought to be insignificant, says security researcher.
711347
Code that exploits a "critical" Windows flaw has been posted on the Net, opening the door for a worm to be created.
35985
Virtualized rootkits - Part 1 &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
716663
Networked multifunction devices share PC vulnerabilities to worms, hackers.
295779
Blog: Low ransom request and a self-termination date on the code suggest this is a test attack.
4497
Within days of the release of the security bulletin, there was proof of concept code available on the web. As the exploit was analyzed by various security groups, it was found that it was similar
97619
(InfoWorld) - Attackers have targeted the zero-day VML vulnerability on an unknown number of Windows-based machines, using a layered approach that first involved exploiting a hole in cpanel, an application that's popular with Web hosting services. AccordingÂ to posts on the support forum of HostGator, criminals accessed the company's servers using the cpanel hole, which was also a zero-day vulnerability. Once in, they planted code on many of the Web sites of HostGator's customers. End users who used Internet Explorer to visit those sites and had not followed work-around procedures were then infected with a virus, which attacks vector markup language in Windows. "The person or group that did this is very intelligent, and obviously knows how to plan a big attack," a HostGator official wrote in the forum. "Since this exploit could have worked on anyone running cpanel it had nothing to do with how secure we were. We suspect it was done by someone in china as we have a small piece of information supporting this." HostGator says the vulnerability in cpanel has been patched. The attack demonstrates the growing sophistication of computer attacks. According to HostGator, the cpanel vulnerability was discovered about a month ago, leading officials to speculate that the attackers waited for a zero-day to emerge before exploiting it.ADVERTISEMENTMAKE SOA REAL WITH IBM WEBSPHERE PODCASTStreamline processes and maximize efficiency within a proven service oriented architecture. Take back control of your business processes with IBM WebSphere.
309307
Newly updated. This article provides insight into the Metasploit Framework, a very useful tool for the penetration tester. Part two of three.
16648
Opt-out button in spam used to run exploit
439242
Proof of concept shows vulnerability in VoIP desktop clients using the SIP protocol, so real-world attacks are expected.
682593
(InfoWorld) - A new version of the IcePack hacker exploit tool kit has been released, security researchers warned Tuesday, and for the first time it includes attack code designed to exploit an unpatched, or zero-day, Microsoft vulnerability. Three of IcePack's eight exploit tools are new, said Roger Thompson, chief technology officer at Exploit Prevention Labs. That's noteworthy in and of itself, Thompson said. "The mix of old and new exploits is to be expected, but three new ones in one update is pretty impressive," he noted. But the new tool kit also sports a first. "The latest iteration has done something original," said Thompson, pointing to an exploit that attacks a zero-day vulnerability in Microsoft's DirectX software development kit (SDK). "The closest to a tool-kit zero-day exploit [before] was for the ANI [animated cursor] vulnerability." He was referring to a Windows bug that surfaced in early April. By the time that Mpack, an IcePack predecessor, added the ANI exploit, however, Microsoft had patched the vulnerability with an emergency out-of-cycle update. The DirectX SDK bug was disclosed by Polish researcher Krystian Kloskowski in a post to the milw0rm.com site in mid-August. Microsoft did not release a fix for the flaw in the regularly scheduled updates issued earlier Tuesday. IcePack is only one of several click-to-attack malware tool kits in circulation. Derived from the earlier Mpack, IcePack joins others boasting monikers such as NeoSploit and WebAttacker that cater to what Thompson called "lazy crooks." "Originally there was just WebAttacker, but they screwed up and then NeoSploit came along," Thompson said as he rattled off the exploit tool kit genealogy. "Then there was Mpack, which everyone at first thought was just WebAttacker, but it wasn't. Now there's IcePack." He estimated that nine to 12 malware tool kits are currently in use. "They all use very similar code, and they're all trying to make a buck out of selling to lazy crooks," said Thompson. Even though the just-updated IcePack features the first zero-day attack code seen in a malware kit, Thompson downplayed the threat. Sort of. "This is not an end-of-the-world kind of thing, since not many people will have the [DirectX] SDK. But no one knows what other software packages use that [vulnerable] ActiveX control. It's a little like Russian roulette that way." Other researchers confirmed Thompson's assessment. Symantec, for instance, warned customers of its DeepSight threat network that it had spotted in-the-wild attacks using the DirectX exploit. Symantec's researchers also confirmed that the other two exploits new to IcePack target vulnerabilities in Yahoo Messenger and Yahoo Widgets. Both of those bugs, however, have been patched. Taking aim at patched vulnerabilities is a common characteristic of multistrike kits, even though it might seem counterintuitive, said Thompson. "They usually go after lesser-known vulnerabilities," he said.
147320
Patch for Messenger addresses zero-day exploits that take advantage of vulnerabilities in its Webcam ActiveX controls.
498738
A hacker has released attack code that could be used to exploit a critical bug in some versions of the Windows operating system.
223591
Security researcher demonstrates a way to use cross-site scripting to remotely spam an internal network printer.
610973
This article discusses the use of Libwhisker, a PERL module which allows for the creation of custom HTTP packets and can be used for penetration  testing various web applications.