Robert Lemos

Kaspersky calls for a massive effort to break the code keys used by a malicious program that encrypts its victim’s data and asks for ransom, but other experts doubt the keys can be found or that finding them will help.
SecurityFocus

[Read more →]

Security firm Trend Micro refuses to apply for future VB100 certifications, highlighting a debate over how to best test antivirus software.
SecurityFocus

[Read more →]

As those who still manage to wade through the daily flames on Full Disclosure found out this weekend, the boys over at ZD0 managed to get access to the Administrator account on my blog. They posted the passwd file including the usernames and MD5 password hashes for about a score of users in the latest [...]

[Read more →]

A group of four computer scientists say Windows Update — and other patch services — should be redesigned, after they create a technique to quickly produce attack code from a distributed patch.
SecurityFocus

Follow-up: Patch paper redux: Move along please

[Read more →]

The security researcher that posted the e-mail addresses and passwords for 100 accounts at embassies and political groups reveals that he exploited the victims’ incorrect usage of the Tor Project’s anonymous Web surfing software.
SecurityFocus

[Read more →]

Researchers find that browsers and plug-ins could be exploited to turn a victim’s computer into a door to the internal network. One study finds an attack could claim 100,000 IP addresses in three days.
SecurityFocus

[Read more →]

One of the three Russian developers behind the MPack infection kit virtually sits down with SecurityFocus to discuss the program and making a business out of cybercrime.
SecurityFocus

[Read more →]

Interference on wireless networks will likely get worse before it gets better. Sometimes, the most egregious offenders aren’t nearby residential networks or municipal Wi-Fi grids, but the myriad electronic devices in people’s homes. Poorly shielded microwave ovens leak radio waves tuned to 2.45 GHz, the resonant frequency of water. Many cordless phones operate in the [...]

[Read more →]

A working group of security researchers, digital-rights activists and government prosecutors discuss whether bug hunters can find vulnerabilities in Web sites without violating laws.
SecurityFocus

[Read more →]

Researchers use a previously unknown flaw in Apple’s Safari browser to compromise a MacBook Pro and win the PWN to Own contest, but does the hack actually prove anything?
SecurityFocus

UPDATE: More on the vulnerability, which is a Java flaw in QuickTime.

[Read more →]