Microsoft Opens the Gates to Hack Their Web Services

Monday, April 21st, 2008

It seems like Microsoft are starting to get serious about security, in a very progressive move they have said they are ok with ethical hackers finding security flaws in their online services. It’s been fairly ok so far to hack away at software installed on your own hardware, but hitting remotely ...

Hackers Cancel Attack on CNN

Saturday, April 19th, 2008

A planned cyberattack against CNN's Web site fizzled out Saturday as the group backing the event called it off. "Our original plan for 19 April has been canceled because too many people are aware of it and the situation is chaotic," wrote a group called "Revenge of the Flame," according to ...

The New E-spionage Threat

Friday, April 18th, 2008

The e-mail message addressed to a Booz Allen Hamilton executive was mundane—a shopping list sent over by the Pentagon of weaponry India wanted to buy. But the missive turned out to be a brilliant fake. Lurking beneath the description of aircraft, engines, and radar equipment was an insidious piece of ...

ActiveX module in Microsoft Works opens up security hole

Friday, April 18th, 2008

A demonstration of a security hole in the Microsoft Works Image Server (WkImgSrv.dll) ActiveX module contained in the Microsoft Works office suite has appeared on the Bugtraq mailing list. The demo appears to only cause a system crash. McAfee, however, has already found fully functional exploits which allow attackers to ...

A Case Study on Storm Worm

Friday, April 18th, 2008

A bot is a computer program installed on a compromised machine which offers an attacker a remote control mechanism. Botnets, i.e., networks of such bots under a common control infrastructure, pose a severe threat to today’s Internet: Botnets are commonly used for Distributed Denial-of-Service (DDoS) attacks, sending of spam, or ...