Worm salutes Microsoft
521752
After a relatively quiet fall, mass-mailing worm begins to spread on Windows PCs. Meanwhile, the Air Force turns to Microsoft for security help.
711347
Code that exploits a "critical" Windows flaw has been posted on the Net, opening the door for a worm to be created.
204651
This is pretty interesting, seems as though Microsoft has acquired an anti-spyware company noone&#39;s ever heard of. I know spyware and adware removal software is big business now but I&#39;ve never heard of Giant Company Software Inc.
648630
AMSTERDAM  - A new computer worm emerged on Tuesday which broke the speed record from the announcement of a security vulnerability in Microsoft's Internet Explorer to a full-blown virus that spreads in the wild.
706450
The Storm worm was part of a spam campaign that pointed recipients to a Web site wishing them a happy Labor Day, then downloaded malware.
169476
Microsoft has fixed a critical flaw in the Windows operating system that could be used by criminals to create a self-copying computer worm attack.The software vendor released its first set of patches for 2008 on Tuesday, fixing a pair of networking flaws in the Windows kernel. Microsoft also released a second update for a less-serious&#160;Windows flaw that would allow attackers to steal passwords&#160;or run Windows software with elevated privileges.The critical bug lies in the way Windows processes networking traffic that uses IGMP (Internet Group Multicast Protocol) and MLD (Multicast Listener Discovery) protocols, which are used to send data to many systems at the same time. Microsoft says that an attacker could send specially crafted packets to a victim&#39;s machine, which could then allow the attacker to run unauthorized code on a system.Security experts say that there is no known code that exploits this flaw, but now that the patch has been posted, hackers can reverse-engineer the fix and develop their own attack code.Because IGMP is enabled in Windows XP and Vista by default, this bug could be used to create a self-copying worm attack, Microsoft said Tuesday.&quot;Theoretically this is wormable, and that&#39;s why this is rated critical,&quot; said Tim Rains, security response communications lead with Microsoft. However, Microsoft does not believe that hackers will have an easy time developing attack code that will work reliably. &quot;We&#39;ve done a thorough analysis of the vulnerability, and we&#39;ve come to the conclusion that there are several technical mitigating factors that make it unlikely to get reliable remote code execution,&quot; Rains said.Windows uses the IGMP protocol for many popular consumer applications such as streaming video, multiplayer games, and universal plug-and-play, but the protocol is usually blocked at the router. A derivative of IGMP, MLD is the multicast protocol used by IPv6 systems and is enabled on Vista by default.&quot;If it became a worm it could take over an internal network pretty quickly, or at least all the machines where multicast is enabled,&quot; said Eric Schultze, chief technology officer with Shavlik Technologies. &quot;But this one is going to be mitigated because a lot of people have blocked multicast.&quot;The critical MS08-001 update that fixes this flaw also patches a second, less-serious bug in the Windows networking stack that could be leveraged to launch a denial-of-service attack against a Windows system. This vulnerability lies in the Internet Control Message Protocol Router Discovery Protocol (ICMP RDP), which is used by Windows to find out how to communicate with the network. Because this capability is not turned on by default, Microsoft considers this to be merely an &quot;important&quot; bug.Microsoft&#39;s other Tuesday update, MS08-002, fixes an elevation of privilege flaw in the Windows Local Security Authority Subsystem Service (LSASS), used to manage account credentials in Windows.This flaw could be exploited by attackers to steal passwords or run their code with a higher level of privilege on Windows, said Schultze. &quot;The primary concern is Johnny who is a user becoming Johnny admin,&quot; he said. But if attackers were to combine an attack that exploited this flaw with another exploit that would allow them to run code on the system, then &quot;that could become a critical issue,&quot; he said.
169493
A new Internet worm was spreading quickly, threatening to overload computer systems around the world by generating copies by e-mail, security experts said.
523084
A new computer worm emerged on  Tuesday which broke the speed record from the announcement of a  security vulnerability in Microsoft's Internet Explorer to a  full-blown virus that spreads in the wild.
669622
Mass-mailing Zafi-D worm, which disguises itself as a Christmas greeting, is infecting more than one in every ten emails. The worm, which spreads in a file attached to email messages containing the text âHappy
567473
A new version of the infamous Bagle worm series is spreading widely across the net.
605561
NEW YORK: At least one new variant of a worm spread rapidly from Asia and Europe to US computers on Friday morning, filling up people&#39;s e-mail accounts, but otherwise causing little apparent damage.
108964
Virus writers have grafted a network sniffer into the latest variant of the SDBot worm series.
266105
Microsoft fixes a critical flaw in the Windows operating system that could be used by criminals to create a self-copying PC worm attack.
176831
The first computer worm to eavesdrop on network traffic after it infects a computer has been discovered by security experts. The SDBot.
594895
An old worm known as Slammer, which originated back in January 2003, is still going strong according to Gunter Ollmann, director of security strategy at IBM&#39;s Internet Security Systems (IBM ISS).
98994
A new version of the worm that spread from infected Microsoft Corp. Internet Information Services (IIS) Web servers in June has been identified and is using instant messages (IMs) and infected Web sites in Russia, Uruguay and the U.S. to spread itself, according to one security company.
70179
At least one new variant of a worm spread rapidly from Asia and Europe to U.S. computers Friday morning, filling up people's e-mail accounts, but otherwise causing little apparent damage.