Vulnerabilities and exploits

Over the years we’ve heard the phrase “it’s a feature, not a bug” quite a number of times. And it can be argued that the vulnerability in the PDF specification with regards to Launch actions is just that.

The vulnerability in the Windows Help and Support Center (CVE-2010-1885) has been a constant irritation to antivirus experts for the third week in succession. I will try to provide an analysis of the problem with the help of KSN

Google’s full disclosure of the Microsoft Windows Help and Support Center zero-day vulnerability, which is present in Windows XP and Windows 2003 – CVE 2010-1885.

As part of our general information sharing activity, we have launched a series of webcasts on YouTube.

Unreal IRCd Server source code discovered with backdoor.

When everyone is trying to secure their webservers, malware use client side vulnerabilities such as the recent vulnerability in some of Adobes software such as Acrobat Reader and Flash to spread malicious software.

A few thoughts about why replacing Windows with MacOS and Linux is not really the solution.

This report was compiled on the basis of data obtained and processed using the Kaspersky Security Network (KSN). KSN is one of the most important innovations in personal products and is currently in the final stages of development.

Is Google sniffing your WiFi network? Few hints on how to secure your wireless network.

Every day that goes by, I see more and more people complaining when it comes to Facebook and privacy.

This month Microsoft didn’t release a bulletin for the known vulnerability in SharePoint Server. What Microsoft did release today are two bulletins resolving critical vulnerabilities – one for Windows and one in Office.

Update about Gumblar recent stats and new fact discovered – Gumblar developers decided to block Japanese IPs!

Heloag was believed to be a Peer-to-Peer bot by some, but it is not (as static analysis revealed)!

Not only did Microsoft release their bulletins, but Adobe also released critical updates for Adobe Reader and Acrobat 9.3.1 for Windows, Mac and Unix along with updates for Reader and Acrobat 8.2.1.

New Brazilian crypto technique used for the server side malware obfuscation in order to prevent an automated malware analysis.