New worm exploits critical Windows bug

Monday, November 3rd, 2008

A worm that exploits the bug Microsoft Corp. patched in an emergency update 11 days ago is actively attacking systems, several security companies and researchers said today.The worm, which Symantec Corp. called Wecorl but was dubbed MS08-067.g by Kaspersky Lab and Microsoft itself, likely originated in China, said Kevin Haley, ...

Blogspot.com is number one host for malware

Tuesday, July 29th, 2008

New research by IT security and control firm Sophos has identified Blogger (www.blogspot.com) as the leading host for malware. The popular blogging service now accounts for 2 percent of all of the world's malware hosted on the web. Attacks on Blogger involve hackers either setting up malicious blogs on the service, ...

New Worm Transcodes MP3s to Try to Infect PCs

Friday, July 18th, 2008

A new kind of malicious software could pose a danger to Windows users who download music files on peer-to-peer networks. The new malware inserts links to dangerous Web pages within ASF (Advanced Systems Format) media files. "The possibility of this has been known for a little while but this is the first ...

Microsoft Outlook Web Access XSS (MS08-039)

Thursday, July 17th, 2008

Several Cross Site Scripting vulnerabilities were found in within Outlook Web Access (OWA) 2003/2007. An attacker can craft a malicious email which will trigger within a user's browser. Different version of OWA and different clients (Light and Premium) have different attack vectors which can result in an attacker gaining *persistent* ...

Teenager confesses to being Nugache botnet mastermind

Tuesday, July 1st, 2008

Experts at SophosLabs™, Sophos's global network of virus, spyware and spam analysis centers, have welcomed news that a teenager has confessed to controlling thousands of computers in an illegal botnet.19-year-old Jason Michael Milmont, of Cheyenne, Wyoming, has admitted to being the programmer of the Nugache malware which infected Windows computers, ...