Threat Research

Valentine’s Day Scams: For the love of money

February 7th, 2012

 - Scam artists and cybercriminals are looking to turn romance into profit now that Valentine's Day approaches, possibly taking over your computer in the process. According to ESET researchers in Latin America, we can expect the (continue reading...)

Safer Internet Day 2012 Offers a Lesson for All of Us

February 7th, 2012

 - Many of you may have already noted this from Google’s home page, but for those not reading the fine print or not using Google: Today is International Safer Internet Day, which will have its 10th anniversary next (continue reading...)

Tenable Network Security Podcast Episode 112 – "Evil USB, Detect Unsupported Devices, & Managing Mobile Risk"

February 7th, 2012

 - 
Welcome to the Tenable Network Security Podcast Episode 112

Hosts

Paul Asadoorian, Product Evangelist
Carlos Perez, Lead Vulnerability Researcher
Ron Gula, CEO/CTO

Announcements

New iSeries and AS/400 plugins are being released this week!
Check out our video channel on (continue reading...)

Why is a 14-month-old patched Microsoft vulnerability still being exploited?

February 7th, 2012

 - While the media just looove zero-day exploits, the security industry sees a lot more exploits designed to take advantage of patched vulnerabilities. Question is why don't many of us get around to installing the patches? (continue reading...)

Times Editor apologises for NightJack email hacking

February 7th, 2012

 - The editor of The Times has apologised, after he admitted a journalist had hacked into a serving police officer's email account.

McAfee Reference Architecture: Securing Mobile Devices

February 7th, 2012

 - Without a doubt, the world has embraced mobile.  Everyone’s doing it – from consumer and enterprise, to geography, public, private, and business vertical. In addition to the power and portability of smartphones and tablets, they (continue reading...)

Miss Piggy gives her views on phone hacking scandal

February 7th, 2012

 - At a press conference promoting the new Muppets movie, Kermit the frog declined to comment on the high profile allegations of the media breaking into the mobile phone voicemail systems. (continue reading...)

DoD Cyber Crime Conference Presentation: Recipes for Remediation

February 7th, 2012

 - Wendi Rafferty and I presented at the DoD Cyber Crime conference in Atlanta, GA. Our presentation, “Recipes for Remediation: Key Ingredients for Building a More Resilient Security Program,” has been posted to the MANDIANT (continue reading...)

Safer Internet Day 2012

February 7th, 2012

 - Did you now that…

26% of children report having a public social networking profile
12% of European 9-16 year olds say they have been bothered or (continue reading...)

BBC warns of Heir Hunters email scams circulating

February 7th, 2012

 - Be on the lookout for emails claiming to come from a daytime TV show, after it was discovered that scammers are using the disguise to grab personal information. (continue reading...)

IRS/Quicken spam leads to exploit kits and malware

February 6th, 2012

 - A large volume of spam messages pretending to be from Intuit, the makers of QuickBooks, are flooding inboxes. Don't click the links, they lead to pages infected by the infamous Blackhole exploit kit. (continue reading...)

Injection code masquerades as Google Analytics

February 6th, 2012

 - The Websense® ThreatSeeker® Network has discovered a new wave of injection of malicious code disguising itself as Google Analytics, by adopting similar code snippets and malicious domains.
 

 
It is quite convincing (continue reading...)

MindshaRE: IDAception

February 6th, 2012

 - Posted by Aaron Portnoy

If you've ever tried collaborating with other people while reverse engineering a vulnerability your process probably includes some tedious steps, like transferring:

Your IDB
Your notes/readme files
Virtual machines
Proof of concept (continue reading...)

Tenable Network Security Podcast Episode 111 – "Detecting pcAnywhere, browser vulnerabilities, & hacking cars"

February 6th, 2012

 - 
Welcome to the Tenable Network Security Podcast Episode 111

Hosts

Paul Asadoorian, Product Evangelist
Carlos Perez, Lead Vulnerability Researcher
Ron Gula, CEO/CTO
Jack Daniel, Product Manager

Announcements

Check out our video channel on YouTube that contains the latest Nessus (continue reading...)

Your Children and Online Safety

February 6th, 2012

 - A few years ago, from time to time I used to visit the school where my wife taught IT, to talk to some of their students about IT security. In fact, we wrote a paper (continue reading...)

Two Approaches to Managing Mobile Devices

February 6th, 2012

 - There is no question we have entered the era of always connected mobile devices. Smart phones, iPads, and Android devices have changed the way people access information.  Last month, I (continue reading...)

USA to equip military, government officials with Androids

February 6th, 2012

 - The United States is preparing a modified version of Google's Android operating system to allow soldiers to use smartphones.

What’s all the fuss about ACTA?

February 6th, 2012

 - Widespread protests about ACTA have occurred in Europe. Why is there such anger, and what can be done about it?

#3 Dynamite Plugins – Top Ten Things You Didn’t Know About Nessus

February 6th, 2012

 - 
The video below is part 3 in our series of the top ten things you didn't know about Nessus and covers Nessus plugins that provide outstanding capabilities beyond detecting traditional vulnerabilities: (continue reading...)

Learning to Analyze Computer Viruses: Year Five

February 6th, 2012

 -  For the fifth year now we are arranging a course on malware (malicious software) analysis in co-operation with Aalto University in Helsinki, Finland. The first lecture is on January 18th by our Chief (continue reading...)

Copyright © 2012 The Security Blog. All rights reserved.