Hacker flogged Microsoft source code
104940
THE FEDS have fingered the collar of a Connecticut computer hacker. He&#39;s been charged with flogging copies of Microsoft Windows proprietary source code.
598010
A hole in Microsoft's Access database permits hackers to install software on vulnerable systems, the US-CERT team warns.
301264
Hackers wasted little time in exploiting a flaw in the way Microsoft software handles graphics files. Internet watchers say they&#39;ve spotted infected images that could implant a back door into a Windows computer if they are viewed.
437595
Hackers can drop malicious code into systems running Firefox when the browser is armed with Google Toolbar, Yahoo Toolbar, or other add-ons.
240803
(InfoWorld) - It has become a familiar pattern: A hacker posts exploit code to a security Web site; Microsoft follows soon after with a warning to customers. The pattern was repeated again Thursday, only this time Microsoft's warning that it is investigating "new public reports" of a critical bug in Windows comes more than two months after sample code showing how to take advantage of the flaw was posted to the Web. Microsoft's advisory can beÂ found here. The flaw that Microsoft warned about is in an ActiveX control (called WebViewFolderIcon) used by the Windows' graphical user interface software. It was first disclosed on July 18 as part of aÂ month-longÂ project byÂ hacker HD MooreÂ to expose problems in browser software. Moore's blog post on the flaw can beÂ found here. Moore called his project theÂ "Month of Browser Bugs"Â and ended up disclosing a total of 22 Microsoft vulnerabilities during the period. A few days ago, Moore quietlyÂ added exploit codeÂ for this latest flaw to his Metasploit hacking tool. The exploit caught Microsoft's attention after it was posted to theÂ milw0rm.com Web site,Â Moore said. But the security researcher believes that any competent hacker could have developed an exploit based on his July blog posting. So far, Microsoft has patched only two of Moore's flaws. In fact, Microsoft engineers haven't even been able to investigate close to a third of the vulnerabilities, Moore said. Microsoft executives could not immediately be reached for comment, but the company's security advisory said this latest WebViewFolderIcon bug will be patched on Oct. 10. "We have been in contact with HD Moore and at this time our investigations have revealed that most issues relating to Internet Explorer in particular will result in the browser closing unexpectedly," Microsoft's public relations agency said Thursday in a statement. "Because of their nature, most of these issues will more likely be resolved through a service pack release rather than a security update." Microsoft has been busy this month, rushing out an emergency, "out-of-cycle" fix for a flaw in Internet Explorer's Vector Markup Language (VML) rendering engine that was being widely exploited by attackers. Microsoft has even more work ahead of it, according to Moore. In early August, he handed Microsoft another 70 bugs that he had not publicly disclosed. Still, he believes that more of his flaws should have been fixed by now. "I was kind of amused that they would do an out-of-cycle patch for the VML bug, but would let all of these lapse," he said. Microsoft has told him that at least four of his bugs are "exploitable issues," meaning that an attacker could take advantage of them to run unauthorized software on a victim's computer, Moore said. Earlier this week, SymantecÂ said that Microsoft was the slowest of the major browser-makers at patching its bugs during the first half of this year. But according to Symantec's numbers, Microsoft patched IE bugs, on average, nine days after the public disclosure of a flaw. Most of the 22 Month of Browser Bugs flaws have been in public for two months now.
499083
A man has been arrested for selling portions of the Windows 2000 and Windows NT 4.0 source code on-line after the software was illegally leaked onto the internet in February, according to reports.
768290
The first example of a working program designed to exploit a bug in Microsoft&#39;s GDI+ libraryâwhich allows malicious code to be run simply by viewing a JPEG imageâhas been found in the wild.
342495
A flaw in the Microsoft programs that was announced on Sep 14, has already paved the way for a deluge of new security threats. The hackers have begun circulating malicious code hidden in images that use the popular JPEG format.
769658
The Source Code Club is back in business, if you can call it that. The anonymous hacker group first began peddling proprietary source code last July, then disappeared, and now has reemerged
394672
InfoWorld - Software developers like to make installation of their programs simple and quick. So do hackers.
427785
Copycats are keeping busy. Security researcher says the Net threat's source code is "hot stuff."
276718
Khoo writes &quot;A sample program hit the Internet on Wednesday, showing by example how malicious coders could compromise Windows computers by using a flaw in the handling of a widespread graphics format by Microsoft&#39;s software.
70700
A remote attacker could take complete control over computers running many versions of Microsoft software by inserting malicious code in a JPEG image that executes through an unchecked buffer
400750
'The most inefficient conspirator in the world' As one of his clients told us, "Mark Radcliffe is the law when it comes to open source software."â¦
383627
A toolkit designed to exploit a recently-disclosed Microsoft JPEG vulnerability has been released onto the net. The toolkit (screen shot from AV firm F-Secure here) makes it trivially easy for maliciously-minded
430846
In a harbinger of security threats to come, hackers have exploited a newly announced flaw in Microsoft Corp. (MSFT) programs and begun circulating malicious code hidden in images that use the popular JPEG format...
675051
A vindictive software programmer upset about his cancelled contract snuck into Varian Semiconductor Equipment Associates Inc.&#39;s computer system and zapped out e-commerce coding he and others