Comment Did you have a quiet Christmas? What about New Year? While New Years Eve is the busiest time for text messages, maybe you didn’t get any. And if you’re a Nokia user, there may be a reason for that.
You might have been struck by the Curse of Silence bug that has been floating around [...]

Continue reading " SMS bug: Nokia’s Conversation goes mute "

News, yesterday, of yet another critical vulnerability in Microsoft Corporation’s (NasdaqGS: MSFT) Windows Media Player. Reportedly, the exploit permits remote buffer overflows, which then facilitates a surreptitious code execution exploit. More information of this pernicious exploit appears after the jump.
From the HeiseSecurity UK post: “

According to a report by Security Tracker, all versions of Windows [...]

Continue reading " Exploitable Vulnerability in Windows Media Player Revealed "

Security and the Net has published a superb write-up of the newly updated Metasploit decloaking engine, utilized to determine the original (supposedly anonymized) IP of a connecting machine (when that computer is tunneling its’ network communications through an anonymous proxy). More information regarding the capabilities of the Metasploit Decloaker, and how to [...]

Continue reading " Hidden IP Addresses Not Hidden Anymore "

Microsoft came clean and admitted its SQL Server database software is vulnerable to code injection attacks. It’s not a new flaw but the same bug in the database software that emerged around the time of Microsoft’s monthly Patch Tuesday update earlier this month.
In an advisory, Redmond’s security gnomes confirmed that code has been produced that [...]

Continue reading " MS (finally) confirms unpatched SQL Server flaw "

Critical US electronic systems have failed to withstand a simulated cyberattack.
Participants in a recent cyber-warfare exercise told Reuters that the exercise highlighted problems in leadership, communications and readiness. The two-day exercise brought together 230 government agencies, private firms and other participants. Participants were split into two groups - attackers and defenders - before each developed [...]

Continue reading " US cybersecurity defences fail to thwart mock cyberattack "

The website for American Express has once again been bitten by security bugs that could expose its considerable base of customers to attacks that steal their login credentials.
The notice comes days after The Register reported Amex unnecessarily put its users at risk by failing to fix a glaring vulnerability more than two weeks after a [...]

Continue reading " American Express bitten by XSS bugs (again) "

Microsoft Whale Communications Intelligent Application Gateway (IAG) 2007 is a remote access gateway that boosts productivity by giving mobile and remote workers, partners and customers easy, flexible and secure access to virtually any application from a broad range of devices and locations.
AG SP2 delivers a range of new, important enhancements for customers, including: flexible/secure deployment [...]

Continue reading " Microsoft releases Intelligent Application Gateway SP2 "

A glaring vulnerability on the American Express website has unnecessarily put visitors at risk for more than two weeks and violates industry regulations governing credit card companies, a security researcher says.
Among other things, the cross-site scripting (XSS) error on americanexpress.com allows attackers to steal users’ authentication cookies, which are used to validate American Express customers [...]

Continue reading " American Express web bug exposes card holders "

Researchers from Websense have caught Google carrying ads punting rogue software that secretly installs malware on the PCs of its users.
Recent Google searches for Winrar turned up sponsored links that offer a “spyware free” copy of the widely used data-compression application. Google users unfortunate enough to download and install that software are soon exposed to [...]

Continue reading " Google sponsored links caught punting malware "

Hackers have upped the ante by launching more attacks against an unpatched IE 7 flaw.
Microsoft warned on Saturday that attacks targeting the vulnerability, which affects versions of its flagship browser on all supported versions of Windows, are becoming more widespread. The security bug first came to prominence a week ago, just before the latest edition [...]

Continue reading " MS issues brown alert over unpatched IE 7 flaw "