Archive for October, 2007

Adobe discloses Reader and Acrobat flaw

Adobe disclosed a vulnerability in its Reader and Acrobat products that can be exploited by remote attackers using malicious PDF documents. The flaw, acknowledged on Friday by Adobe, exists in Adobe Reader version 8.1 and earlier versions, Acrobat Standard, Professional and Elements 8.1 and earlier and Acrobat 3D on PCs running Windows XP with Internet Explorer 7 installed, according to a company advisory.
The vulnerability is caused by an input … read more »

Spammers hit YouTube’s email servers

Spammers are using YouTube’s servers to send massive quantities of unsolicited email, according to security firm Marshal.
The company has warned email users to be wary of messages carrying YouTube invites which appear to derive from the video-sharing site’s ‘Invite Your Friends’ feature, claiming the compromised servers are sending out spam messages from the service@youtube.com address.
“YouTube users have a facility whe… read more »

Israel suspected of ‘hacking’ Syrian air defences

Questions are mounting over how Israeli planes were able to sneak past Syria’s defences and bomb a “strategic target” in the country last month. Israeli F-15s and F-16s bombed a military construction site on 6 September. Earlier reports of the attack were confirmed this week when Israeli Army radio said Israeli planes had attacked a military target “deep inside Syria”, quoting the military censor.
Syrian President Ba… read more »

Seven fixes planned for Patch Tuesday

Microsoft has announced plans to issue seven patches on Tuesday, including four that will repair “critical” vulnerabilities. Three of the four critical fixes, which correct holes that could be remotely exploited, impact a particular component on Windows. One affects Outlook Express and Windows Mail, another impacts Internet Explorer and a third affects Office.
The fourth critical patch affects Windows.
The software company also plans … read more »

Apple patches QuickTime for Windows flaw

Apple released a security update for its QuickTime media player on Wednesday, patching a flaw that allows remote users to execute arbitrary code onto Windows PCs. Security Update for QuickTime 7.2 for Windows patches the flaw on PCs running Vista and XP operating systems. An attacker can take advantage of the flaw on unpatched machines by enticing the user to view a specially crafted QTL file, which can lead to arbitrary code execution.
The vulne… read more »

Spammers entice users with ‘gift cards’

Hackers are using the lure of gift cards in spamming attacks, according to a Symantec report.
The junk messages claimed to “provide” gift cards for a range of products and services, including History Channel magazine subscriptions and Dominos Pizza, if the recipient completes a survey, the security company said.
The report also shows that text- and HTML-based attacks are on the up - with 100 million emails sent during one attack in September … read more »

VoIP gets hacked

Have you jumped on the VoIP bandwagon? Secure? Think again as US hacker is jailed for 2 years after breaching security at 15 separate telcos with ‘incredible ease’
‘Evil’ Techie genius Robert Moore has recently been jailed in the US after exposing tremendous flaws in tens of telcos IT infrastructures stating it was ‘incredibly easy’ because of basic IT security mistakes.
His global hacking spree was targeted at telcos and corporations… read more »

US Security: NSA Hacks. DHS Spams!

Recent reports point out that the United States National Security Agency will get back at any hacker trying to mess up their systems. Also, it is a known fact that they hack their way into different communication networks to wiretap – they’re just monitoring any possible terrorist conversation. Now, these are just security measures, and though the second is violating privacy, they can’t be called something bad.
However, things are different… read more »

As Apple Asserts iPhone Control, Hackers Fight Back

Perhaps more important than the bricking of unlocked iPhones is the fact that the firmware update blocked third-party application development. Apple has refused to open the iPhone platform to third-party developers, saying programmers should write Ajax-based applications that users can access through the Safari Web browser.
Appearing at a London Apple store for the UK launch of the iPod, Steve Jobs was asked about the rash of solutions for “… read more »

The “Hacker Factory” Now Has Rules

Well, if you read the news you’ll find out that a lot of the evil hackers out there are graduates in computer science. They have a lot of knowledge and some of them have decided that researching just doesn’t cut it – they have to gain profits in some other way. However, the people that are teaching them, giving them the knowledge they need either to uphold security or to take it down have now taken a decision.
The MIT is basically a hacker … read more »

RSS