Santy Worm Defaces Web Forums
566132
Anti-virus vendors have raised the threat level on a new Internet worm squirming through Web servers that are running unpatched versions of the popular phpBB Web forum software.
702310
The latest Santy worm version poses a risk to many Web sites using the PHP scripting language, a security firm warns.
620094
roundup Free-roaming source code breeds new Netsky pest. Also: From IE to Opera, browsers are a likely prey.
708669
Santy Worm Using AOL and Yahoo to Target More PHP Sites  The newest version of the Santy Worm, Santy.e, is threatening more web sites which use PHP scripting to produce dynamically database generated pages. The Santy Worm first surfaced last week, targeting sites which use the phpBB bulletin board/forum service. Santy ...
267329
PhpBB ancora nel mirino del worm Santy. A pochi giorni dall&#39;esplodere del tristemente noto worm, eccone in arrivo nuove ed ancora piÃ¹ pericolose versioni. Recentemente Santy ha infatti attaccatto numerosi
415712
To set things right about a misquote on Slashdot, Zeev Suraksi has posted this long statement mentioning what he really said and a few more personal opinions.   I've just been misquoted on Slashdot, as if I said there are no security problems in PHP itself, and that I instead point my finger only at inexperienced developers. If you read the original article on Heise Security, you'll see that I have not said anything of the sort. [...] I believe this is the belief of most others on the security team, but I'm only speaking on behalf of myself and do not represent them.   He also covers five more points pertaining to the article and the situation:  Where the bugs/problems lie with problems in PHP Why there are security problems in web PHP applications Why the current security level can be partially blamed on the language itself An admission that yes, there are security problems in PHP And the track record the PHP developers have had in fixing these issues  There's much more than just these brief highlights here, so I encourage you to head on over and check out the full post for yourself.   There are some other opinions on the matter from a few others out there too:  cyberlot's blog Zend Developer Zone's post Tony Bibbs' blog
122733
Security firms are warning that new variants of the Santy worm have start spreading through other search engines than Google. The new versions now also use AOL and Yahoo.
61520
com December 22, 2004, 4:00 AM PT. When the Santy.a worm started spreading on Tuesday, Mikko Hypponen knew he had a way to stop the worm in its tracks.
633181
Gareth Heyes has a new post today talking about one of the vulnerable values in the $_SERVER superglobal - PHP_SELF.   I thought it might be a good idea to gather a few test cases demonstrating the problem. Why PHP allows these URL's is beyond me and it wouldn't take much work to filter out these malicious URL's in the PHP code.   He provides four test cases to show how simple it is to abuse - one using a HTTP header, another pushing XSS through, the third mentions search pages and the fourth a direct code injection.   You can download the code here.
187566
Infected computers can be used as &quot;zombies&quot; to send spam or launch attacks on Web sites. Spreading Trojans via chat rooms is not unusual.
222372
A new variant of the Internet worm MyDoom - Mydoom.Y - has anti-virus vendors puzzled. Not because they can&#39;t do anything about it but because it comes along with a description of itself.
721903
On 20 December 2004, a fast-moving Internet worm called Santy began attacking Web servers using the popular Google search engine. The Santy worm exploits a security vulnerability in phpBB, an open-source bulletin
90728
A new variant of the Santy worm, which attacks Web pages usuing the PHP bulletin board software, appeared this week. Earlier variants used Google to find vulnerable Web pages; the new
37983
Moving beyond Google, variants of the Santy worm are now spreading on the Internet riding on other search engines such as AOL and Yahoo to identify exploitable Webpages.
319998
Blog: IM directs victims to malicious Web site where they are duped into typing in their password, it then sends itself to the victims' contacts.
49498
THE PROBLEM with phpBB software, which we reported on this time yesterday is over. And it&#39;s thanks to Google, it appears. F-Secure said that the Santy worm, which defaced web sites and used a Google search
469986
The Bagle worm shifts shape to outsmart antivirus software. Plus: Media player patches and Feds' fraud crackdown.