dobe Systems, whose software is used by millions of people to read documents sent over the internet, said some of its programs contain a flaw that makes personal computers vulnerable to attack. In an 5 October posting on its website, Adobe said the “critical” flaw is incorporated into versions of Adobe Reader and Acrobat software, and could allow malicious programs to get on to a PC without the user knowing about it.
Such programs can… read more »
October 11th, 2007 in
General News,
Random Security         Source:
zdnet.co.uk
Hack attacks targeting US utilities have almost doubled this year, a security firm warned today. Managed security services company SecureWorks estimated that it blocked an average of 49 attacks per utility client every day from January to April 2007. But this increased to an average of 93 per day between May and September.
“When researching these new statistics, we found that web browser attacks represented a large number of the attacks att… read more »
October 9th, 2007 in
General News,
Random Security         Source:
newsnow.co.uk
A hacker broke into an eBay server on Friday and temporarily suspended the accounts of a “very small” number of members, the company has admitted. “We were able to block the fraudster quickly before any permanent damage had been done. At no point did the fraudster get any access to financial information or other sensitive information,” eBay spokeswoman Nichola Sharpe claimed via e-mail.
EBay has “secured and restored… read more »
October 9th, 2007 in
General News,
Random Security         Source:
newsnow.co.uk
Microsoft is to allow users of Windows XP to download Internet Explorer 7 without having to gain Windows Genuine Advantage authentication. Windows Genuine Advantage (WGA) is part of Microsoft’s Genuine Software Initiative. It is intended to help prevent the distribution and use of unauthorised versions of Windows. Previously, to download Internet Explorer 7, users had to authenticate to WGA.
“With today’s ‘Installation and… read more »
October 9th, 2007 in
General News,
Random Security         Source:
zdnet.co.uk
A feature on YouTube that enables users to share videos with friends is being exploited by spammers to deliver junk mail, security experts have warned. “YouTube users have a facility where they can invite their friends to view videos that they are looking at or have posted,” said Bradley Anstis, director of product management of email security firm Marshal. “This effectively allows them to email to any address from their YouTube… read more »
October 9th, 2007 in
Random Security,
Spam         Source:
scmagazine.com
Adobe disclosed a vulnerability in its Reader and Acrobat products that can be exploited by remote attackers using malicious PDF documents. The flaw, acknowledged on Friday by Adobe, exists in Adobe Reader version 8.1 and earlier versions, Acrobat Standard, Professional and Elements 8.1 and earlier and Acrobat 3D on PCs running Windows XP with Internet Explorer 7 installed, according to a company advisory.
The vulnerability is caused by an input … read more »
October 9th, 2007 in
Random Security         Source:
scmagazine.com
Questions are mounting over how Israeli planes were able to sneak past Syria’s defences and bomb a “strategic target” in the country last month. Israeli F-15s and F-16s bombed a military construction site on 6 September. Earlier reports of the attack were confirmed this week when Israeli Army radio said Israeli planes had attacked a military target “deep inside Syria”, quoting the military censor.
Syrian President Ba… read more »
October 5th, 2007 in
Random Security         Source:
newsnow.co.uk
Microsoft has announced plans to issue seven patches on Tuesday, including four that will repair “critical” vulnerabilities. Three of the four critical fixes, which correct holes that could be remotely exploited, impact a particular component on Windows. One affects Outlook Express and Windows Mail, another impacts Internet Explorer and a third affects Office.
The fourth critical patch affects Windows.
The software company also plans … read more »
October 5th, 2007 in
Random Security         Source:
scmagazine.com
Apple released a security update for its QuickTime media player on Wednesday, patching a flaw that allows remote users to execute arbitrary code onto Windows PCs. Security Update for QuickTime 7.2 for Windows patches the flaw on PCs running Vista and XP operating systems. An attacker can take advantage of the flaw on unpatched machines by enticing the user to view a specially crafted QTL file, which can lead to arbitrary code execution.
The vulne… read more »
October 5th, 2007 in
General News,
Random Security         Source:
scmagazine.com
Have you jumped on the VoIP bandwagon? Secure? Think again as US hacker is jailed for 2 years after breaching security at 15 separate telcos with ‘incredible ease’
‘Evil’ Techie genius Robert Moore has recently been jailed in the US after exposing tremendous flaws in tens of telcos IT infrastructures stating it was ‘incredibly easy’ because of basic IT security mistakes.
His global hacking spree was targeted at telcos and corporations… read more »
October 4th, 2007 in
Random Security,
Webappsec         Source:
newsnow.co.uk