Lisa Vaas

The same script that planted malicious code last month on the Super Bowl site is responsible for the zero-day animated cursor file exploit on Windows XP SP2. McAfee uncovered the exploit, which preys on an unpatched vulnerability in Windows ANI files, earlier this week. Websense discovered in February that the official Web site of Dolphin […]

A widespread malicious attack is posing as a convincing invitation from Microsoft to download a beta version of Internet Explorer 7.0, security company Sophos reported. The e-mails appear to come from admin@microsoft.com. The subject line is “Internet Explorer 7 Downloads.” The e-mail contains an image inviting users to download Beta 2 of IE 7. Those […]

An Indiana man will spend 27 months in prison for selling more than $700,000 worth of counterfeit software on eBay, the Milwaukee FBI announced on Wednesday. Courtney Smith, 36, of Anderson, Ind., was sentenced by U.S. District Judge Sarah Barker of the Southern District of Indiana for selling the software over the Internet, in violation […]

eEye Digital Security’s Research Team has released a workaround for the zero-day Windows animated cursor vulnerability that McAfee discovered earlier in the week. Microsoft as of yesterday still hadn’t come up with a patch or workaround for the ANI files vulnerability, which eEye called “one of the most potent zero-days recorded” by the security company’s […]

Microsoft released a security advisory regarding the vulnerability in Microsoft Windows Animated cursor, McAfee reported on Wednesday. McAfee had earlier noted a proof of concept on the message boards but only recently found a drive-by exploit in which a Trojan was being silently slipped onto visitors’ machines. A company spokesperson said that for the attack […]

McAfee’s Avert Labs have discovered a drive-by exploit on the Web that preys on fully patched Windows XP SP2 systems running IE 6 and 7 browsers. In preliminary tests, McAfee found that the IE/XP systems proved vulnerable to an attack that delivers a Trojan download in complete silence. McAfee Avert Labs said on its site […]

The FBI has arrested a Bulgarian woman in connection with an international scheme that’s responsible for defrauding eBay users of more than $350,000. The agency announced on Monday that police in Budapest, Hungary had on March 22 arrested Mariyana Feliksova Lozanova, aka “Gentiane La France,” aka “Naomi Elizabeth DeBont,” with conspiracy to commit wire fraud […]

Expect to see the 2 billionth personal record compromised by years end, according to recent research from the University of Washington. But dont blame it on rogue hackers; sorry to say, its your own fault, Corporate America. Researchers at the university in Seattle estimate that electronic records—those containing Social Security or credit card numbers, academic […]

Exploit code is out for a critical MDAC vulnerability that Microsoft reported in its MS07-009 bulletin, so if you haven’t patched yet, better hop to it. The vulnerability, which can allow a remote attacker to take over a PC, is in Microsoft’s Data Access Components. Microsoft provided a fix for the vulnerability on Patch Tuesday, […]

The new version of HD Moore’s point-and-click Metasploit Framework that was rewritten from scratch in the Ruby scripting language is ready to penetrate, pick at patches, regress test and otherwise hack away. Moore has said that the primary goals of Version 3.0 of his open-source exploit creation tool are improved automation of exploitation through scripting, […]

As if RFID chips in drivers licenses and passports werent scary enough already, Londons Royal Academy of Engineering is suggesting that someday a terrorist will be able to read personal details from a distance and, given the right antennas and amplification, set a bomb to go off when a particular person gets within range. Its […]

Cisco is snipping the wires from hardwired surveillance cameras, rolling out IP cameras that hook into Cisco networks and that can be watched from any network point—not just the traditional central control room. “Our mission in life is to run physical security applications across the network,” said Steve Collen, director of product marketing for Ciscos […]