Vulnerabilities
Top 10 TLDs Used by Botnets For CnC
By Gina on February 19, 2010 | VulnerabilitiesGunter Ollmann, who is currently works VP of Research at Damballa company, wants to share an information with the rest of the world related to the command and control (CnC) channels used and abused by criminal botnet operators.He is claiming it would be useful to know about all the Top Level Domains (TLDs) used for botnet CnC. Damballa looked through all the domains used and abused by botnets targeting enterprise networks in 2009 (look at the table below).Top10 TLDs used for CnC. Read more.
Mistakes to Avoid on Social Networks
By Luciana on February 18, 2010 | VulnerabilitiesA huge investigation was done by security firm Sophos earlier this month. The research includes reports of cybercrime attacks on social networks like Facebook, Twitter and LinkedIn. Notifications of malware and spam rose 70 percent on social networks in the last 12 months and 57 percent of users report they have been spammed via social networking sites. Chet Wisniewski, Senior Security Advisor with security firm Sophos was asked to comment how to avoid those attacks. Read more.
New Windows Security Update Patches Critical Flaws
By Gina on February 12, 2010 | Vulnerabilities
Microsoft delivered huge Windows security update. This is one of companies records, which includes one more security updates, shipping 13 of them in February's Patch Tuesday. New massive update is compacted of 13 separate security bulletins that patched 26 vulnerabilities. It also gives attackers different ways to compromise machines and hijack PCs. Microsoft stated, that 12 of the 26 vulnerabilities, or 46% of the total, were tagged with a „1“ in the company's exploitability index. Read more.
Google Announced a New Bug Bounty Program
By Jason on February 10, 2010 | Vulnerabilities
According to the recent news Google is paying $500 bounty to researchers for every flaw they'll find at Chrome browser. As several experts say it is not quite good motivation for skilled vulnerability researchers though. A Charlie Miller, a senior security researcher at Independent Security Evaluators, claims it is ridiculous, insulting and low. Miller's criticism may look very stinging given that he was an initiator of last year's „No More Free Bugs “ campaign. Read more.
Security Makers Use Adobe Avoiding Attacks on Windows PCs
By Luciana on February 8, 2010 | VulnerabilitiesRecent examples show that researchers failed and have serious issues by making sure the security of Internet Explorer from the attackers. The latest versions of IE seemed to be vulnerable because the attackers demonstrated they can make and use a hole for their own malicious interests. For that reason researchers tried to use the weakness in Adobe Systems' Flash Player and created two separate attacks that bypass mitigation Microsoft put into IE 7 and 8. Read more.
