attacks

http://www.informationweek.com/news/showArticle.jhtml?articleID=206103681By Thomas ClaburnInformationWeekFebruary 4, 2008Businesses and government agencies face a rising number of phishing attacks targeting high-level executives.The Anti-Phishing Working Group on Monday said that in November the identities of 178 financial institutions and government agencies, a new record, were co-opted by phishers in an effort to dupe victims into revealing information. This represents a 2.23% increase from the previous read more »
addto Add this link to... report Bury 
The flaws disclosed last week in Adobe System's Reader and Acrobat programs have been used to exploit computers since at least January via malicious banner advertisements, security analysts are reporting. read more »
addto Add this link to... report Bury 
Attackers continue to use well-worn techniques, such as SQL injection, to exploit holes in popular Web applications but have also moved on to other targets, including government sites, and newer exploit methods, such as cross-site request forgery, according to the latest report filed by the Web Applications Security Consortium. read more »
addto Add this link to... report Bury 
As discussed in the past, cross site scripting (XSS) can be exploited by phishers to build really effective attacks. Today we have analyzed another similar attack that includes some enhanced features. The attack was exploiting an injection flaw in an Internet banking application, specifically located in the module used to display warning messages to users. The function took a single GET parameter: https://www.well-known-bank.com/popup.asp?msg=[ASCII_encoded_message_to_display] And then returned a page read more »
addto Add this link to... report Bury 
A Valentine's themed outbreak of the Storm worm has been detected. Malicious e-mails are being received across the globe -- they contain a Web link, which directs users to a Web site where they can supposedly download a Valentine's card, but in fact are infected with the Storm bug. The virus mirrors the fake Christmas and New Year messages seen in previous months. read more »
addto Add this link to... report Bury 
A recent string of high-profile ActiveX vulnerabilities caused the U.S. Computer Emergency Readiness Team (US-CERT) to advise users to disable the ubiquitous Microsoft browser plug-in technology altogether. The vectors for these recent exploits include a third-party image uploading tool used on both the Facebook and MySpace social networking sites, and flaws found in Yahoo's Music Jukebox, Real Networks' RealPlayer, and Apple's QuickTime. read more »
addto Add this link to... report Bury 
Green means good very littleSecurity vendors like VeriSign consider a new technology called EV SSL an important measure against phishing attacks. But two recent items suggest it will do little to stop skilled conmen from spoofing trusted websites.… read more »
addto Add this link to... report Bury 
p strong Google s Postini team recommends enterprises guard against socially generated spam and virus attacks in 2 8. strong p ...Go beyond knowing technology and manage it Get a Master of Science in Technology Management online. Enroll with National University today. read more »
addto Add this link to... report Bury 
Lock up your granniesAmerican researchers have proven it's possible to maliciously turn off individuals' heart monitors through a wireless hacking attack.… read more »
addto Add this link to... report Bury 
http://www.thestandard.com.hk/news_detail.asp?pp_cat=11&art_id=62968&sid=18033254By Timothy ChuiThe StandardMarch 13, 2008The Beijing Olympics represents too good a target for hackers to pass up, according to the Commerce and Economic Development Bureau.Addressing the Asia Pacific Computer Emergency Response Team Conference yesterday, assistant government chief information officer of infrastructure and security John Wong Shak-chuen said the Games, as well as key elections in some parts of the world later t read more »
addto Add this link to... report Bury 
Barrage of the trojansGroups sympathetic to anti-Chinese protesters in Tibet are under assault by cyber attackers who are embedding malware in email that appears to come from trusted colleagues.… read more »
addto Add this link to... report Bury