Archive for the ‘Random Security’ Category

F-Secure warning over PDF malware threat

Emails containing malicious PDF files have been putting computers at risk since Friday, Finnish security software firm F-Secure said on Saturday. “The emails, sent in bulk, looked like credit-card statements, and contained an attachment called ‘report.pdf’,” chief research officer Mikko Hypponen said in a statement.
When such PDF files are viewed on vulnerable machines, they start downloading software from servers in Malay… read more »

Exploit code found serving from popular advertising site

RealNetworks Inc. said it would publish a patch later Friday for its RealPlayer media program to protect users from ongoing attacks. Less than 24 hours before, Symantec Corp. had issued a high-level alert that warned of a critical vulnerability in RealPlayer that could be used against anyone browsing the Web with Internet Explorer.
The bug came to light after the NASA space agency warned employees of a spike in attacks that it said originated fro… read more »

Cracker sales target pegged at Rs.1 crore

TIRUCHI: The Chinthamani Cooperative Supermarket at Puthur here has fixed a cracker sales target of Rs. 1 crore for Deepavali festival. The authorities have planned to establish 10 special sales outlets in the Chinthamani branches at Puthur and Teppakulam in the city and Manapparai and Kulithalai towns to sell popular brands of fireworks.
Transport Minister K.N. Nehru inaugurated the sale at a function held at the Chinthamani supermarket on Sunda… read more »

Mystery of Microsoft’s automatic updates

Software giant Microsoft is investigating why some Windows machines automatically updated themselves and rebooted following last week’s Patch Tuesday. As first reported on Windows user group AeroXperience, last week the automatic updates feature caused some Windows machines to reboot. Users complained to Microsoft that their machines had downloaded and installed updates they did not consent to.
Microsoft on Friday reported that it was looki… read more »

Beware of hackers targeting storage systems

Corporate storage systems and networks are an attractive target for hackers looking to steal sensitive data or launch computer attacks, Alan Lustiger, security architect at TD Ameritrade Inc., told an audience at Computerworld’s Storage Networking World user conference here yesterday. In particular, he warned IT executives that network-attached storage (NAS) systems are a most attractive entry point for hackers. “The easiest storage t… read more »

A New Way to Hack Yourself

All too often, IT shops realize their weaknesses only after they’ve been hacked. Fortunately, Core Security Technologies has a solution: Hack yourself before others do. The company on Tuesday introduced Core Impact v7.5, the latest version of its security analysis and testing tool. The update adds new features that let users attempt to breach themselves to see how far the rabbit hole goes.
The hallmark of the Impact line in past versions ha… read more »

Half of UK companies ill-equipped to deal with disasters

One in two UK organisations are ill-equipped to deal with natural disasters, computer system failures and external threats, new figures from Symantec show. According to the study, 91 per cent of IT companies carry out full scenario testing of their disaster recovery plans, yet nearly half of those tests fail.
Damage to the business brand and reputation is the most feared consequence of corporate disasters among IT professionals (69 per cent), the… read more »

Laptops with sensitive TSA contractor data stolen

The personal details of nearly 4,000 US citizens - including commercial truck drivers who transport hazardous materials - were on two laptops stolen from a third-party contractor working with the Transportation Security Administration (TSA) in the US. The laptops contain the names, addresses, birthdays, commercial driver’s license numbers and, in some cases, the Social Security numbers, of 3,930 people, according to an Associated Press repo… read more »

Storm botnet ’services’ could be sold

The owners of the Storm botnet, whose identities are as yet unknown, could be preparing to sell off the “services” of segments of the network, according to Joe Stewart, a researcher from managed security services company SecureWorks. Stewart claimed in a blog post on Sunday that the latest Storm variants now use a 40-byte key to encrypt their peer-to-peer traffic, meaning each node will only be able to communicate with nodes that use … read more »

Hackers Could Shut Down Car Engines!

Some people just have no idea what they are doing. Here we go again – this is another case of overzealous security that can seriously end up in hurting the ones who should be protected!
General Motors is going to come up with a system to make car thefts history… at least in their opinion! The technology is called Stolen Vehicle Slowdown and it’s used, as you might have imagined, to slow down cars. So, basically, should the Police be chasing… read more »

RSS