Google Calendar Phishing

Thursday, June 26th, 2008

A couple of minutes ago an interesting attempt to phish for Google account credentials made it to my inbox. It had me blink my eyes because while I suspected phishing there were some things with this one that had me check twice to see how it’s done, as things looked ...

Yahoo fixes email cross-site scripting flaw

Thursday, June 26th, 2008

Yahoo has fixed a vulnerability that could allow a hacker to get access to a person's webmail account. The problem was in the way Yahoo's mail interacts with version 8.1.0.209 of its IM application, according to web application security company Cenzic. Cenzic notified Yahoo of the problem in May, and the company ...

A Tour of Risky Web Sites

Wednesday, June 4th, 2008

Just over 4% of all Web sites are dangerous, according to a new report. But all bad sites aren’t created equal: Cyber bad guys are more likely to build their sites where it’s easy to do so. The report out today from McAfee, a tech-security company that’s trying to position itself ...

Gmail as a spam engine

Sunday, May 11th, 2008

This is not good. Researchers from INSERT found a vulnerability in the Gmail engine that could allow spammers to forward mail through Google, thereby bypassing blacklists and being accepted by whitelists. It works by using the same forwarding features that allow users, myself included, to forward their email through ...

Malicious hardware may be next hacker tool

Thursday, May 1st, 2008

As if computer viruses and worms aren't enough of a nuisance, malicious hardware, which will be much more difficult to detect, could soon become a threat too. Today, computer viruses, which are programs downloaded either as an email attachment or when someone visits a website, are responsible for most computer attacks. ...

Two Factor Authentication is Dead

Thursday, May 1st, 2008

The fundamental problem with two factor (2FA) session authentication is that the approach is vulnerable to Man in the Middle and Man in the Browser attacks. 2FA requires that customers present not only a password (something they know) when they log into online banking, but also demonstrate that they possess ...

Webroot plots the end of desktop security

Thursday, May 1st, 2008

Security's rising star, Webroot, plans to offer web and malware filtering as a service to SMBs, the first vendor of any size to offer such a capability in subscription form. The software-as a service (SaaS) model, which extends the email filtering service already offered by the company, will appeal to smaller ...

Stamp out spam with Sophos’s spam pledge

Thursday, May 1st, 2008

IT and security control firm Sophos is urging internet users to take the Sophos Spam Pledge and put an end to the significant problems that many businesses face on a daily basis, as spam marks its 30th anniversary today. The first ever spam message was sent on 1st May ...

‘Long-Term’ Phishing Attack Underway

Monday, April 28th, 2008

The notorious Rock Phish gang has added a new twist to its phishing exploits that doesn’t require its victim to visit a malicious Website -- instead, it just loads a malicious keylogging Trojan onto the victim’s machine that steals information or credentials. Both Trend Microand F-Secure over the past few days ...

AVG Technologies Releases AVG Anti-Virus Free 8.0

Thursday, April 24th, 2008

AVG Technologies, a leading provider of Internet security software, will tomorrow release AVG Anti-Virus Free 8.0, the latest version of the company’s popular and widely-used free security software, which now incorporates protection against spyware through a new combined anti-virus and anti-spyware engine. AVG Free provides basic protection against viruses and spyware, ...