UPDATED: Researchers at the University of Toronto are working on a free tool to allow Web surfers to bypass government censorship of the Web. The tool, called psiphon, is part of a human rights software project developed by the Citizen Lab at the Munk Centre for International Studies and funded by the Open Society Institute […]
Apple Computer has shipped a monster security update to correct a total of 22 vulnerabilities in its Mac OS X operating system. The Cupertino, Calif, companys patch batch includes a fix for a critical Wi-Fi flaw affecting eMac, iBook, iMac, PowerBook G3, PowerBook G4 and Power Mac G4 systems. The Wi-Fi flaw, first exposed at […]
British security researcher David Litchfield is raising an alert for a brand-new class of vulnerabilities affecting Oracle database products. Litchfield, a database security expert who has clashed with Oracle in the past, went public with the discovery in a research paper that warns that dangling cursors in database code can be manipulated and used to […]
Anti-virus researchers have spotted the first signs of an adware/spyware program capable of launching browser windows on Apple Computers Mac OS X. According to a warning from F-Secure, a security vendor in Helsinki, Finland, the proof-of-concept program could be silently installed on a Macs User account and hooked to each application used by that account. […]
On the heels of HD Moore’s Month of Browser Bugs and LMH’s Month of Kernel Bugs, a database security research expert plans to start a new project dedicated to releasing zero-day flaws in Oracle database server and application products…
The recent surge in e-mail spam hawking penny stocks and penis enlargement pills is the handiwork of Russian hackers running a botnet powered by tens of thousands of hijacked computers. Internet security researchers and law enforcement authorities have traced the operation to a well–organized hacking gang controlling a 70,000-s-trong peer-to-peer botnet seeded with the SpamThru […]
On the heels of its July acquisition of Mark Russinovichs Winternals Software, Microsoft has replaced the popular Regmon and Filemon utilities with a single tool offering advanced capabilities for real-time monitoring of registry and process thread activity. The release of the new utility, called Process Monitor, coincides with the relaunch of the Sysinternals portal as […]
A well-respected British security researcher has found a way to use a PCI device to plant an offensive rootkit on Windows machines. John Heasman, principal security consultant at NGSS (Next-Generation Security Software) released a research paper on the Daily Dave mailing list discussing a means of persisting a rootkit on a PCI device containing a […]
As are coming fast and furious, including at least two for the nasty MS06-070 worm hole. If you are in charge of a Windows 2000 shop, there’s no excuse to delay patch deployment for this one.
The recent surge in e-mail spam hawking penny stocks and penis enlargement pills is the handiwork of Russian hackers running a botnet powered by tens of thousands of hijacked computers. Internet security researchers and law enforcement authorities have traced the operation to a well-organized hacking gang controlling a 70,000-strong peer-to-peer botnet seeded with the SpamThru […]