CVE-2010-1885

After a period of steady decline that started in 2009, the number of application vulnerabilities has seen a significant increase during the first half of 2012, according to the latest version of Microsoft’s Security Intelligence Report (SIR) that was released on Tuesday. Exploits for security flaws in popular applications like Java and document readers were […]

Large outbreaks of phony AT&T wireless emails have been distributed in the last two days, according to Commtouch. The emails describe very large balances ($943 in the example below), that are sure to get aggravated customers clicking on the included links. Every link in the email leads to a different compromised site with malware hidden inside. The pattern is: legitimate domain / recurring set of random letters / index.html The index.html file tries to exploit … More →

When a Microsoft Windows machine gets infected by viruses/malware it does so mainly because users forget to update the Java JRE, Adobe Reader/Acrobat and Adobe Flash. This is revealed by a survey conducted by CSIS Security Group A/S. Basis of the study CSIS has over a period of almost three months actively collected real time data from various so-called exploit kits. An exploit kit is a commercial hacker toolbox that is actively exploited by computer … More →

Fortinet released its August 2010 Threat Landscape report showing some interesting changes and shifts from previous months, with an interesting trend in “Do-It-Yourself” Botnet Kits gaining momentum and becoming a serious threat.

For every infected adult domain identified, there are 99 others with perfectly legitimate content that are also infected, according to a report by Avast. In the UK for example, there are more infected domains containing the word “London” than any other domain containing the word “sex”. The latest discovery of an infected site is the Vodafone UK website. This infection in the smart phones section shows how advanced the bad guys are at finding ways … More →