October 20, 2011 - We might never find out what really happened in the Stuxnet case. But what about Duqu, the son of Stuxnet? One writer already seems to know with certainty, and despite the absurdity of his claims, his story is getting picked up (continue reading...) Read more
October 15, 2011 - John Shier joined Chet this week as they discussed the death of UNIX and C co-creator Dennis Ritchie, the Virus Bulletin 2011 conference, Apple's release of iOS 5 and OS X 10.7.2, Microsoft Patch Tuesday, and the German R2D2 Trojan. (continue reading...) Read more
October 15, 2011 - Hello, Today we published the October Security Bulletin Webcast Questions & Answers page. We fielded eight questions across all bulletins. There was one question that we were unable to answer during (continue reading...) Read more
October 11, 2011 - Microsoft's Patch Tuesday bulletin for October 2011 covers 23 vulnerabilities in 8 patches. Affected software includes all supported versions of Windows, Internet Explorer, .NET, Silverlight and more. Read more
October 11, 2011 - Hello, On this October Update Tuesday, we are releasing the 11th volume of the Security Intelligence Report, SIRv11, which puts zero-day vulnerabilities into context against other global threats. We are also releasing eight security updates so (continue reading...) Read more
October 11, 2011 - VIDEO: Paul Henry, Security and Forensics Analyst for Lumension, discusses the impact of the October 2011 Patch Tuesday releases. Read more
October 11, 2011 - Today at the RSA Europe 2011 conference Microsoft released their new Security Intelligence Report (SIR) report covering January to June 2011. As in previous editions it analyzes massive amounts of data (continue reading...) Read more
October 10, 2011 - The Treat: October’s bulletins resolve several issues: 2 critical and 6 important, covering a range of products, including Microsoft .NET Windows, IE, Forefront and MS Host Integration Server. The Trick: nearly all require a restart which will cause widespread (continue reading...) Read more
October 8, 2011 - Enjoy the latest security news in brief by watching 60 Second Security! This episode: learning from the 10-year-old Nimda virus, finding a password hole in Lion, taking down support scammers and the dot CZ dot CC domain, and farewelling Steve Jobs. (continue reading...) Read more
October 6, 2011 - Next week's October Patch Tuesday looks to be a light to medium sized release, with eight bulletins, two of which are critical. Top priority should be given to the remote code (continue reading...) Read more
October 6, 2011 - Hello, As we do each month, we're providing advanced notification on the release of eight security bulletins, two Critical and six Important, to address 23 vulnerabilities across Internet Explorer, .NET Framework & Silverlight, Microsoft Windows, Microsoft (continue reading...) Read more
October 2, 2011 - This week, Chet and Paul Ducklin discuss the interesting and important topics of the past week: fighting hi-tech crime, tackling the Kelihos botnet, taking on zombified home users, examining the risks of Amazon's new Silk tablet, and understanding the BEAST! (continue reading...) Read more
September 29, 2011 - When testing the included unmanaged anti-virus in Windows 8 I ran across an odd quirk. It doesn't detect EICAR properly. I present my results and what to expect in this article. Read more
September 28, 2011 - After Microsoft's shutdown of the Kelihos botnet on Monday some suggested it would slow down Mac malware purveyors. While the shutdown of the botnet and the cz.cc domain will help, it's only temporary. (continue reading...) Read more
September 26, 2011 - Hello. Today we released Security Advisory 2588513, addressing an information-disclosure issue in SSL (Secure Sockets Layer) 3.0 and TLS (Transport Layer Security) 1.0 to provide guidance for customers. This is an industry-wide issue with limited impact that affects the (continue reading...) Read more
September 22, 2011 - As I've spent a lot of blogging time here, here and elsewhere on cold-calling/support desk scams, I didn't think I could let the recent flurry of publicity on Microsoft's disavowal of one of its Gold Partners because (continue reading...) Read more
September 21, 2011 - One of Microsoft's Gold Partners has had its relationship with the software giant unceremoniously terminated, after being revealed to be orchestrating a telephone support scam. Read more… (continue reading...) Read more
September 20, 2011 - When Róbert Lipovský and I commented on the DigiNotar/SSL situation, we said that " the user should be cautious (as always), but there's no cause for panic." While I still think that's fair comment, there's no doubt that things aren't (continue reading...) Read more
September 19, 2011 - Microsoft had to reissue an update for users of Windows XP and Windows 2003 today related to the compromise of certificate authority DigiNotar. It (continue reading...) Read more
September 19, 2011 - Today, Microsoft re-released KB2616676 non-security update for customers using Microsoft Windows XP and Windows Server 2003, which addresses an issue described in the “known issues” section of KB2616676. Customers who have enabled automatic updates are already (continue reading...) Read more