A flaw in the way that several security programs and systems utilities detect system changes can allow spyware to run surreptitiously, renewing worries about stealthier attack code.
SecurityFocus
Entries from August 2005
Hidden-code flaw in Windows renews worries over stealthly malware
August 31st, 2005 · No Comments
Tags: Cybercrime · Security · SecurityFocus · Viruses and worms
Zotob suspects arrested in Turkey and Morocco
August 26th, 2005 · No Comments
Law enforcement arrested two men–one living in Turkey and the other in Morocco–in connection with the release of the recent Zotob worm.
SecurityFocus
Tags: Cybercrime · Security · SecurityFocus · Viruses and worms
Storm brewing over SHA-1 as further breaks are found
August 23rd, 2005 · No Comments
Three Chinese researchers refine an attack on the encryption standard used to digitally sign documents, leaving cryptographers to debate whether the Secure Hash Algorithm needs to be mothballed more quickly.
SecurityFocus
Tags: Government · Research · Security · SecurityFocus
Plug-and-play bots worming and warring among Windows systems
August 17th, 2005 · No Comments
A dozen different worms based on bot software have started attacking already-compromised Windows 2000 systems with the aim of creating a lasting bot net, security experts warn. Several companies, such as CNN and the New York Times, have been infected because they failed to patch in time.
SecurityFocus
Tags: Consumer Tech · Cybercrime · Security · SecurityFocus
Worm spreading through Microsoft Plug-and-Play flaw
August 14th, 2005 · No Comments
Dubbed Zotob, the worm infects computers using a flaw in the Windows operating system’s Plug-and-Play functionality, but security experts believe that the attack won’t be as significant as previous epidemics.
SecurityFocus
Tags: Consumer Tech · Cybercrime · Security · SecurityFocus
NIST, DHS add national vulnerability database to mix
August 12th, 2005 · No Comments
The National Institute of Standards and Technology has created a government-funded database of flaws. Will it bring more competition among vulnerability databases or just be a federally funded clone?
SecurityFocus
Tags: Government · Research · Security · SecurityFocus
Microsoft’s “monkeys” find first zero-day exploit
August 8th, 2005 · No Comments
The software giant continues its honeymonkey research, finding more than 750 exploits for Windows computers, including an attack using a vulnerability that had not been publicly disclosed.
SecurityFocus
Tags: Cybercrime · Security · SecurityFocus
Annual hacking game teaches security lessons
August 4th, 2005 · No Comments
At the DEF CON conference, the latest version of the weekend-long Capture the Flag game stresses code auditing as a measure of hacking skills, but also requires participants to think about balancing attack and defense as well as physical security.
SecurityFocus
Tags: Cybercrime · Research · Security · SecurityFocus