Windows Trojan masquerades as Vista hack
324156
Pirates sink 'selves A week after Windows Vista's official launch hackers have devised their first attack, targeting pirates trying to install illegal copies of Microsoft's operating system.â¦
631605
Microsoft can't stop crowing about new Vista security features. But the system still has holes. Here's how to plug them.
22770
Unpatched Windows machines are vulnerable to latest adware attack
267647
The Banker-AJ trojan has been coded to lie dormant in the background on infected Windows PCs. When users visit legitimate online banking Web sites of certain UK banks, the malicious code is
677767
SEATTLE/SAN FRANCISCO  - Computer hackers are off  and running trying to find vulnerabilities in Microsoft Corp.'s   new Windows Vista operating system, putting to test  the software maker's claim that it is the most secure Windows  program ever.
640197
A clever Windows virus called Bofra has started circulating on the net.
592673
Microsoft urged Windows Vista users to download a new security tool that automatically disables suspicious or malicious "gadgets," the small applets that mimic the "widgets" popular on Mac OS X.Dubbed "Windows Sidebar Protection," the 1MB download was added to Windows Update on Tuesday and classified as a "high-priority" update. Microsoft customers running Vista RTM -- the initial version that launched in late 2006 to businesses and early 2007 to consumers -- saw the update on the list starting Tuesday. The update is optional, but depending on what settings have been selected in Windows' Automatic Updates, it may be downloaded and installed without any additional user interaction.Windows Sidebar is a Vista-only panel that holds the miniature applications known as gadgets -- small single-purpose tools that, for instance, display the time and date or RSS feeds. The Windows gadgets are composed of HTML and various scripts.And there's the rub, said Microsoft."Vista treats gadgets like it treats all executable code," said the advisory that accompanied the update. "Gadgets are written using HTML and script, but this HTML is not located on an arbitrary remote server as Web pages are. HTML content in the gadget is downloaded first as part of a package of resources and configuration files and then executed from the local computer."In other words, gadgets could be dangerous, even malicious. The small applications are crafted not only by Microsoft but also by third-party developers and users; Microsoft distributes gadgets on its Web site, but it doesn't vet them."The update gives us a mechanism to prevent a malicious gadget from being installed first of all, and if it's installed, to block the gadget [from running]," said Austin Wilson, a director in the Windows client product management group. "We're being proactive here. We looked at the [security] landscape and wanted this in place in case a problem arises in the future."There are no known vulnerabilities in any existing gadgets, Wilson claimed, stressing that Microsoft knows of no purposefully malicious gadgets, either.When it detects a flawed, suspicious or malicious gadget, Microsoft will create a "kill bit" file that it will then push to users through Windows Update on the regular once-a-month patch day, said Wilson. Yesterday's update included no kill bit, stressed Wilson, but instead is the tool that generates a unique ID for each gadget, accepts the list from Windows Update and then blocks existing gadgets from running or newly-downloaded gadgets from installing.After a gadget has been identified as bad, its icon gets swapped out with one labeled "Bad Gadget." The icon also can't be dragged, and the tool tip shows it as a security risk.The Sidebar security update is already integrated in the bits that were distributed as Vista Service Pack 1's release candidate last month, said Wilson, and it will be included in the final when that launches in the coming weeks.Microsoft has posted a pair of documents on its support site that go into more detail: KB943411 includes the download links to the 32- and 64-bit versions of the tool; KB941411 walks users through the various dialog boxes they will see when the tool tries to bar or block a gadget.
236014
A new Trojan horse modifies infected PC's hosts file to replace Google text ads with ads from another source.
273457
Microsoft says that speech recognition features in Vista could be hijacked so that a PC tells itself to delete files.
162161
Symantec has issued a warning that computers running Microsoft Windows XP can be infected by a new trojan horse, even though it is patched with Microsoft&#39;s latest Service Pack 2. The Trojan.
84253
Scammers are sending out fake security bulletins that attempt to install malicious software on victim's PCs.
689953
A recently detected exploit code foreshadows a likely worm-style attack on Windows machines plagued with the JPEG vulnerability made public last week, security experts said Thursday.
360314
Windows XP and Windows Vista systems can be exploited if they haven't been updated with Redmond's first patch of 2008, says security firm.
356268
Windows Vista is still prone to attack by three notorious pieces of malware -- mainly because the threats in question rely on social engineering to launch their invasions.
202057
A Trojan horse that exploits a recent critical flaw in Microsoft Windows&#39; handling of JPEG images has been posted to several newsgroups, but it has no way to spread, security experts said Tuesday.
688722
Sample code that exploits a yet-to-be-fixed Windows flaw is circulating. Microsoft plans to deal with it on the next Patch Tuesday.
472946
An overnight update to CA's eTrust Antivirus signatures caused some mayhem for users when the software flagged a security-related process in Windows as malicious.