hunt

We have been seeing several vulnerabilities of non executable file formats used in the wild recently. For example, we can mention the Trojan.Mdropper.AA family that exploits a bug in a Microsoft Excel file format, or the case of the MSJET vulnerability (still unpatched) that affects MS Access files. The hunt for new vulnerabilities in popular file formats is still a good research area in the security world, especially when we talk about malicious code writers. A proof of concept of a new bug that affects read more »
addto Add this link to... report Bury 
Security researcher Aviv Raff has published code that would allow someone to take control of a computer running Internet Explorer, but there's a catch. He's not saying exactly where he's hidden the attack. read more »
addto Add this link to... report Bury 
From: InfoSec News <alerts_at_private>Date: Wed, 16 Jul 2008 03:11:25 -0500 (CDT)http://www.networkworld.com/news/2008/071508-rustock-rootkit.htmlBy Ellen MessmerNetwork World 07/15/2008 Rootkits are software code designed to hide from detection. So Kaspersky Lab's hunt for the elusive Rustock.C rootkit, rumored to exist for almost two years, reads like a detective plot.Alexander Gostev, Kaspersky Lab's senior virus analyst, tells the tale in his blog Tuesday on Viruslist. According to Gostev, the Ru read more »
addto Add this link to... report Bury