Ryan Naraine

The Metasploit Project plans to add, sometime during the week of Oct. 30, 802.11 (Wi-Fi) exploits to a new version of its point-and-click attack tool, a move that simplifies the way wireless drivers and devices are exploited. The controversial open-source project, created and maintained by Austin, Texas, hacker HD Moore, has added a new exploit […]

Microsofts freshly minted Internet Explorer 7 browser is vulnerable to a window injection vulnerability that has haunted earlier versions of IE since Dec. 2004, according to a warning from Secunia. The security alerts aggregator said the flaw, which carries a “moderately critical” rating, could be exploited to spoof the content of Web sites for use […]

The Metasploit Project plans to add 802.11 (Wi-Fi) exploits to a new version of its point-and-click attack tool, a move that simplifies the way wireless drivers and devices are exploited. The controversial open-source project, created and maintained by HD Moore, of Austin, Texas, has added a new exploit class that allows modules to send raw […]

Earlier this year, stealth malware researcher Joanna Rutkowska created a stir at the Black Hat Briefings when she demonstrated a way to infect Windows Vista with a rootkit and introduced Blue Pill, a new concept that uses AMDs SVM/Pacifica virtualization technology to create “100 percent undetectable malware.” In this interview with eWEEK senior editor Ryan […]

Windows Defender, the free anti-spyware tool born out of Microsofts December 2004 acquisition of Giant Co., has hit the gold milestone, but Windows 2000 users might want to start looking for alternative protection. At the RSA Europe conference in Nice, France, Microsoft announced the general availability of Windows Defender for Windows XP users and made […]

In the first three months after shipping the Windows Defender Beta 2 anti-spyware application, Microsoft detected 22 million pieces of adware/spyware programs, resulting in roughly 14 million removals. According to statistics released by the Redmond, Wash., software maker, more than 60 percent of Windows Defender users opt to remove the ad-serving programs when offered a […]

New statistics from Microsofts anti-malware engineering team have confirmed fears that backdoor Trojans and bots present a “significant” threat to Windows users. However, according to data culled from the software makers security tools, stealth rootkit infections are on the decrease, perhaps due to the addition of anti-rootkit capabilities in security applications. The latest malware infection […]

Multiple security flaws in Bugzilla could put users of the software-defect–tracking product at risk of cross-site scripting, data manipulation and data exposure attacks. According to a warning from the Mozilla Foundations open-source Bugzilla project, users should immediately upgrade to versions 2.18.6, 2.20.3, 2.22.1 or 2.23.3 to minimize the risk of malicious attacks. Security alerts aggregator […]

Microsoft has blocked the attack vector used to slip unsigned drivers past new security policies being implemented in Windows Vista, according to Joanna Rutkowska, the stealth malware researcher who created the exploit. Rutkowska, who demonstrated the exploit at the Black Hat conference in August, said she tested the attack against Windows Vista RC2 x64 and […]

Veteran malware researcher Joe Stewart was fairly sure hed seen it all until he started poking at the SpamThru Trojan—a piece of malware designed to send spam from an infected computer. The Trojan, which uses peer-to-peer technology to send commands to hijacked computers, has been fitted with its own anti-virus scanner—a level of complexity and […]

Oracle has shipped a monster critical patch update with fixes for more than 100 security vulnerabilities in a wide range of database and server products. The new-look bulletin, which includes CVSS (Common Vulnerability Scoring System) severity scores, patches about 120 bugs in the Oracle Database Server, Oracle Application Server, Oracle Application Express, Oracle Collaboration Suite, […]

David Maynor and Jon “Johnny Cache” Ellch, the two hackers at the center of a Apple MacBook Wi-Fi flaw disclosure controversy, have been credited with helping to fix a “high risk” vulnerability in the Toshiba Bluetooth wireless device driver used by several PC vendors. The duo, who blew the whistle on wireless driver vulnerabilities at […]