How the Bible and YouTube are fueling the next frontier of password cracking

Wednesday, October 9th, 2013

Early last year, password security researcher Kevin Young was hitting a brick wall. Over the previous few weeks, he made steady progress decoding cryptographically protected password data leaked from the then-recent hack of intelligence firm Stratfor. But with about 60 percent of the more than 860,000 password hashes cracked, his attempts ...

Critical Internet Explorer exploit code released in the wild

Tuesday, October 1st, 2013

Attack code that exploits a critical vulnerability in all supported versions of Microsoft's Internet Explorer browser has been publicly released. Monday's release of a module for the Metasploit exploit framework used by security professionals and hackers could broaden the base of attackers who are capable of targeting the flaw. Until now, the bug ...

Microsoft: Upgrade from Windows XP or risk infinite “zero-days”

Monday, August 19th, 2013

Microsoft is intensifying its efforts asking users to scrap Windows XP, the 12-year-old operating system for which the software giant is ending support next April. Tim Rains, director of Microsoft Trustworthy Computing, authored a blog post last week reminding customers of the perils that could await them should they continue running XP, which ...

Wi-Fi routers: More security risks than ever

Saturday, August 3rd, 2013

More major brand-name Wi-Fi router vulnerabilities continue to be discovered, and continue to go unpatched, a security researcher has revealed at Defcon 21. Jake Holcomb, a security researcher at the Baltimore, Md.-based firm Independent Security Evaluators and the lead researcher into Wi-Fi router vulnerabilities, said that problem is worse than when ISE ...

Sophisticated Malware Is Stumping Security Pros

Thursday, July 25th, 2013

The ferocious nature of modern malware is wreaking havoc on some organizations, forcing security professionals to reassess current security policies and consider spending on modernizing defenses to detect attacks, according to a new survey. The study, released this week by Enterprise Strategy Group and commissioned by Malwarebytes, surveyed 315 security professionals ...