Showdown persists over '100% undetectable' rootkit
287352
Slight disagreement to the tune of $412,000 The public feud over the effectiveness of a proof-of-concept rootkit said to be completely undetectable continued on Thursday, as a researcher once again challenged those claims.â¦
42081
Blog: Popular add-ons could have their update process hijacked by man-in-the-middle attacks.
607068
As per suggestions contained in the FAQ: Herein lies a report of two identified and as-of-yet uncorrected security flaws in Scoop. &nbsp;Enough detail will be provided to assist admins in investigating and correcting the flaws, but it is the author's hope that the details of the flaws will be sufficiently obscured to prevent abuse by the undesirables. Executive summary: Through the exploitation of various unchecked privileged operations, attackers may be able to perform admin-level actions leading to data loss. &nbsp;Additionally, well-intentioned security measures combined with XSS vulnerabilities can be exercised to simulate admin-level action, resulting in data loss.
433186
Spyware problems continue to rise. Congress is stepping up to the plate--but will its efforts be more effective than CAN-SPAM?
419178
Evil twin hash bash Antivirus firms are concerned about the emergence of techniques that could render meaningless the use of checksums to mark applications as safe.â¦
699435
A researcher has posted proof-of-concept code for a zero-day flaw within Mac OS X dealing with its handling of disk image (.dmg) files. The issue causes a memory corruption vulnerability that could allow attackers to execute arbitrary code.
226056
MANHASSET, NY - The average unpatched Linux system survives for months on the Internet before being hacked, a report recently issued by the Honeypot Project claims.
312429
You can't cheat an honest person, they say. Like generations of scammers before them, some malware writers are taking that "advice" to heart, releasing their Trojan software and keyloggers as "cracked" versions of Vista oon peer-to-peer service. Who's going to turn them in, after all -- a would-be pirate?
542850
A directory reversal within "flat" extensions could lead to system profile attacks.
22770
Unpatched Windows machines are vulnerable to latest adware attack
517091
Fixes made for "critical" JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.
35985
Virtualized rootkits - Part 1 &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
59578
A new data-protection device will safeguard your passwords and files against theft. The IronKey (available at ThinkGeek.com) is a USB stick with a brushed metal, tamper-and-waterproof shell that simply screams "Mission Impossible."
161831
Unprecedented amounts of data will need to be secured in new, untested ways. What's the best course to pursue in such uncharted territory?
168865
New version turns off security, attempts to download malicious programs from Net--but it's not likely to get far.
346989
Patches cover critical flaws that attackers could exploit even if you do nothing to help.
449182
Multiple vulnerabilities have been reported in version five of the widely-used Kerberos authentication protocol. The most serious could be exploited by crackers to gain root control to authentication servers.