Microsoft Warns Of Malware Faking Virus Alerts
Microsoft is warning of a new type of scareware, dubbed Rogue:MSIL/Zeven, which identifies a user's browser--whether it's Google Chrome, Internet Explorer or Firefox--and serves up a nearly perfect-looking version of the browser's malware warning page.
Russian Trojan blamed for credit card losses at US diner
Hundreds of lunchtime customers of a diner in the US city of Memphis are believed to have had funds stolen from their debit and credit cards after PCs at the venue became infected with malware.
Large numbers of customers reported having had funds taken after using Jason’s Deli in recent weeks, which prompted an investigation by the US Secret Service, part of the Department of Homeland Security.
Scam Preys on Required TweetDeck Update
Scammers are trying to take advantage of the fact that many users will soon have to update their version of the TweetDeck Twitter software.
On Monday, TweetDeck warned that some Twitter messages were advising people to upload an untrustworthy executable file, called tweetdeck-08302010-update.exe.
"These tweets are from hacked accounts and this file does not come from us. Do not download it," TweetDeck said in a post on its support page.
Network security challenges faced by universities
Striking a balance between an open yet secure network remains a challenge for university IT departments. While universities are often on the cutting edge of innovation, they face complications when it comes to enforcing IT policies. In some cases, this has led to staggering data breaches.
25% of new worms are designed to spread through USB drives
Following a report that a USB drive was used to compromise US military networks in 2008, a security company has claimed that 25% of all new worms are designed to spread through the portable storage devices.
Security firm Panda says 25 percent of all new worms are designed to spread through portable storage devices such as USB drives.
Facebook and Twitter users receive 'free iPad' spam from hackers
Facebook and Twitter users are complaining about their accounts being compromised and then being used to spam friends with suspicious "free iPad offers."
Twitter warned users of the scam, Wednesday, saying that it was resetting passwords of affected users. "If you've received a message promising you a new iPad, not only is there no iPad, but also your friends have been hacked," Twitter said
Citrix's next version of XenDesktop will automatically encrypt corporate data on employee-owned laptops and include a bare-metal client hypervisor.
The enterprise and platinum editions of XenDesktop 4 Feature Pack 2, due for release the last week of September, will include both the previously announced XenClient bare-metal hypervisor and XenVault, encryption software designed to protect corporate data on laptops used by contractors or employees who bring their own computers to work.
Bare-metal desktop hypervisors: A primer
Microsoft responded to reports of potential zero-day attacks against a large number of Windows programs by publishing a tool it said would block known exploits.
However, the company declined to confirm whether any of its own applications are vulnerable, saying that it is currently investigating Microsoft-made software.
Monday's security advisory was its first public reaction to a wave of reports from researchers that developers have left a large number of Windows programs open to attack.
Hackers are increasingly exploiting configuration errors and faulty application code -- not the kind of software holes that get vendor patches -- to steal information from computer systems, according to a new study by Verizon Communications Inc.
The "2010 Data Breach Investigations Report" covers 141 cases investigated either by Verizon or the U.S. Secret Service last year.
The researchers said one surprising trend was the continued decline in attacks that exploit software vulnerabilities like holes in operating systems.
Adobe said it would patch a critical Reader vulnerability on Thursday. Two weeks ago, Adobe had promised to fix the flaw during the week of Aug. 16 with an emergency, or "out-of-band" security update, but had not slated a specific date.
Computerworld had pegged the likely release date as 17 August based on past Adobe practice of issuing many of its security updates on Tuesdays.
 |
 |
 |