Researchers unveil persistent BIOS attack methods

Monday, March 23rd, 2009

Apply all of the browser, application and OS patches you want, your machine still can be completely and silently compromised at the lowest level--without the use of any vulnerability.That was the rather sobering message delivered by a pair of security researchers from Core Security Technologies in a talk at the ...

TOP 25 Most Dangerous Programming Errors

Tuesday, January 13th, 2009

Today in Washington, DC, experts from more than 30 US and international cyber security organizations jointly released the consensus list of the 25 most dangerous programming errors that lead to security bugs and that enable cyber espionage and cyber crime. Shockingly, most of these errors are not well understood by ...

Browser Bug Could Allow Phishing Without Email

Monday, January 12th, 2009

A bug found in all major browsers could make it easier for criminals to steal online banking credentials using a new type of attack called "in-session phishing," according to researchers at security vendor Trusteer.In-session phishing (pdf) gives the bad guys a solution to the biggest problem facing phishers these days: ...

Hacker Leaves Message for Microsoft in Trojan Code

Monday, January 12th, 2009

Here's a new way to get Microsoft to pay attention to you: Slip a brief message into the malicious Trojan horse program you just wrote.That's what an unnamed Russian hacker did recently with a variation of Win32/Zlob, a Trojan program victims are being tricked into installing on their computers.The message ...

Obfuscation: The Art of Creating Undetectable Malware

Monday, January 5th, 2009

Do not expect that your system would start misbehaving once it is infected by a malware. Malwares can perform their functions without showing any symptoms for days, months or years. New malwares are capable of hiding themselves even from powerful Antivirus scan engines. They can also perform their jobs without affecting ...