Robert Lemos

…articles and musings of a technology and science journalist

Robert Lemos header image 4

Entries from August 2005

Hidden-code flaw in Windows renews worries over stealthly malware

August 31st, 2005 · No Comments

A flaw in the way that several security programs and systems utilities detect system changes can allow spyware to run surreptitiously, renewing worries about stealthier attack code.
SecurityFocus

[Read more →]

Tags: Cybercrime · Security · SecurityFocus · Viruses and worms

Zotob suspects arrested in Turkey and Morocco

August 26th, 2005 · No Comments

Law enforcement arrested two men–one living in Turkey and the other in Morocco–in connection with the release of the recent Zotob worm.
SecurityFocus

[Read more →]

Tags: Cybercrime · Security · SecurityFocus · Viruses and worms

Storm brewing over SHA-1 as further breaks are found

August 23rd, 2005 · No Comments

Three Chinese researchers refine an attack on the encryption standard used to digitally sign documents, leaving cryptographers to debate whether the Secure Hash Algorithm needs to be mothballed more quickly.
SecurityFocus

[Read more →]

Tags: Government · Research · Security · SecurityFocus

Plug-and-play bots worming and warring among Windows systems

August 17th, 2005 · No Comments

A dozen different worms based on bot software have started attacking already-compromised Windows 2000 systems with the aim of creating a lasting bot net, security experts warn. Several companies, such as CNN and the New York Times, have been infected because they failed to patch in time.
SecurityFocus

[Read more →]

Tags: Consumer Tech · Cybercrime · Security · SecurityFocus

Worm spreading through Microsoft Plug-and-Play flaw

August 14th, 2005 · No Comments

Dubbed Zotob, the worm infects computers using a flaw in the Windows operating system’s Plug-and-Play functionality, but security experts believe that the attack won’t be as significant as previous epidemics.
SecurityFocus

[Read more →]

Tags: Consumer Tech · Cybercrime · Security · SecurityFocus

NIST, DHS add national vulnerability database to mix

August 12th, 2005 · No Comments

The National Institute of Standards and Technology has created a government-funded database of flaws. Will it bring more competition among vulnerability databases or just be a federally funded clone?
SecurityFocus

[Read more →]

Tags: Government · Research · Security · SecurityFocus

Microsoft’s “monkeys” find first zero-day exploit

August 8th, 2005 · No Comments

The software giant continues its honeymonkey research, finding more than 750 exploits for Windows computers, including an attack using a vulnerability that had not been publicly disclosed.
SecurityFocus

[Read more →]

Tags: Cybercrime · Security · SecurityFocus

Annual hacking game teaches security lessons

August 4th, 2005 · No Comments

At the DEF CON conference, the latest version of the weekend-long Capture the Flag game stresses code auditing as a measure of hacking skills, but also requires participants to think about balancing attack and defense as well as physical security.
SecurityFocus

[Read more →]

Tags: Cybercrime · Research · Security · SecurityFocus