DNS Attacks Expose Key Flaws

Saturday, March 8th, 2008

The steady rise in phishing attacks in the last year, coupled with increasingly sophisticated scams such as "pharming" attacks, is driving interest in technology to lock down critical components such as e-mail and Domain Name System. But bigger changes to the underlying Internet infrastructure may be needed, according to interviews with ...

Unpatched Machines Seen As Major Security Threat

Saturday, March 8th, 2008

Hackers will keep cranking out exploits that take advantage of known software vulnerabilities because, although patches are available, a minority of machines are fixed, security vendor McAfee said Monday. In releasing its quarterly security analysis, McAfee's "AVERT" virus research team noted that exploited vulnerabilities are becoming a dominant threat to ...

Vulnerability allows scammers to hijack pop-ups

Saturday, March 8th, 2008

Security researchers warned this week of a vulnerability in most Web browsers which could potentially allow scammers to launch phishing attacks from pop-up windows on trusted Web sites. The vulnerability arises when an Internet user opens browser windows for both a legitimate Web site and a malicious site at the same ...

SANS Top 20 Internet Security Vulnerabilities

Saturday, March 8th, 2008

The vast majority of worms and other successful cyber attacks are made possible by vulnerabilities in a small number of common operating system services. Attackers are opportunistic. They take the easiest and most convenient route and exploit the best-known flaws with the most effective and widely available attack tools. They ...

Scanner Tool Released To Thwart JPEG Attack

Saturday, March 8th, 2008

With security experts predicting a large-scale worm attack is only a matter of days away, Microsoft has released a scanning tool to help users identify vulnerable versions of the GDI libraries that handle JPEG processing. The Microsoft GDI+ Detection Tool (available for download here) helps detect the presence of non-Windows Microsoft ...