Browse by Tags

McAfee Avert Labs Blog - WFP hack redefined!!!

WFP hack redefined!!! Thursday July 5, 2007 at 2:40 pm CST Posted by Prashanth PR Trackback Today, at McAfee Avert Labs we came across an interesting malware, W32/Crimea that uses an undocumented feature of Windows File Protection. Windows File Protection (WFP) is a feature of the Windows operating system...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 07-09-2007
Filed under: Security and Anti-Virus, Microsoft Windows, AntiVirus Information
SANS Internet Storm Center - Exploit against MS07-033 being used in the wild

Exploit against MS07-033 being used in the wild Published: 2007-06-23, Last Updated: 2007-06-23 15:29:36 UTC by Kyle Haugsness (Version: 1) The Symantec folks identified a website exploiting a bug from this months Microsoft patches, specifically the Microsoft Internet Explorer Speech API 4 COM Object...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 06-25-2007
Filed under: SMS, Security and Anti-Virus, Patch Management, Microsoft Windows, AntiVirus Information
McAfee Avert Labs Blog - MS07-027: Revenge of the Script Kiddies

MS07-027: Revenge of the Script Kiddies Monday June 11, 2007 at 5:14 am CST Posted by Shinsuke Honjo, Geok Meng Ong Trackback As we talked about organized cyber crime on the rise, the script kiddies are not taking a break. CVE-2007-2221 was patched in MS07-027 on May 8th, 2007; barely two days after...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 06-12-2007
Filed under: Security and Anti-Virus, Patch Management, Microsoft Windows, AntiVirus Information, Internet Explorer, Internet Hacks
Symantec Security Response Weblog: Malware Update with Windows Update

Malware Update with Windows Update When computer programmers and OS designers introduce new functionalities in their products, they should always consider “Who is going to use this?”. Sometimes solutions created for legitimate purposes may turn into dangerous weapons if used in a bad way. Alternate Data...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 05-10-2007
Filed under: Security and Anti-Virus, Patch Management, Microsoft Windows, AntiVirus Information, Internet Hacks
Symantec Security Response Weblog: ANI to the Extreme

ANI to the Extreme A few days ago, we received yet another submission containing a strange Animated Cursor file. This vulnerability made quite some noise, and though we thought it was handled by now, this file was definitely not the usual ANI exploit… An ANI file follows the RIFF standard, with a few...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 04-27-2007
Filed under: Security and Anti-Virus, Patch Management, Microsoft Windows, AntiVirus Information
SANS Internet Storm Center - New variant of ANI (MS07-017) exploit

New variant of ANI (MS07-017) exploit Published: 2007-04-17, Last Updated: 2007-04-17 18:10:04 UTC by George Bakos (Version: 1) What a shocker - malware authors are playing cat 'n' mouse with antivirus signatures. Roger Chiu of Malware-Test Lab submitted a .ani file observed in the wild that was not...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 04-18-2007
Filed under: Security and Anti-Virus, Patch Management, Microsoft Windows, AntiVirus Information, Internet Hacks
McAfee Avert Labs Blog - RPC DNS Worm Spotted In The Wild

RPC DNS Worm Spotted In The Wild Monday April 16, 2007 at 2:02 pm CST Posted by Craig Schmugar Trackback A new Nirbot variant has been discovered that attempts to exploit the recent zero day vulnerability in Microsoft’s DNS Server Service ( CVE-2007-1748 ). Vulnerability to Worm Timeline: April 7 - This...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 04-16-2007
Filed under: Security and Anti-Virus, Patch Management, Microsoft Windows, AntiVirus Information, Internet Hacks
Symantec Security Response Weblog: DNS Vulnerability being Exploited in the Wild

DNS Vulnerability being Exploited in the Wild It has been reported that a worm that exploits the Microsoft Windows Domain Name Server Service Remote Procedure Call Interface Vulnerability is in the wild. Symantec Security Response has obtained a sample of the worm and we detect the threat as W32.Rinbot...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 04-16-2007
Filed under: Security and Anti-Virus, Patch Management, Microsoft Windows, AntiVirus Information, Internet Hacks
SANS Internet Storm Center - New Rinbot scanning for port 1025 DNS/RPC

New Rinbot scanning for port 1025 DNS/RPC Published: 2007-04-16, Last Updated: 2007-04-16 22:27:56 UTC by Maarten Van Horenbeeck (Version: 3) We are currently tracking a new version of the Rinbot worm that in addition to its regular scans, is also scanning for port 1025/tcp. Once connected, it attempts...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 04-16-2007
Filed under: Security and Anti-Virus, Patch Management, Microsoft Windows, AntiVirus Information, Internet Hacks
Microsoft Security Advisory Notification - Microsoft Security Advisory (935964) - UPDATE - April 16, 2007

******************************************************************** Title: Microsoft Security Advisory Notification Issued: April 16, 2007 ******************************************************************** Security Advisories Updated or Released Today =============================================...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 04-16-2007
Filed under: Security and Anti-Virus, Patch Management, Microsoft Windows, AntiVirus Information

Page 1 of 6 (51 items) 1 2 3 4 5 Next > ... Last »