Archive for the 'Virus' Category

Security Update for Adobe Reader, Acrobat

Thursday, June 26th, 2008

Adobe has issued a security update for its Adobe Acrobat and free Adobe Reader applications. The patch plugs a critical flaw that Adobe said attackers could leverage to take control of a vulnerable system. The latest update, available here for both Microsoft Windows and Mac OS X systems, applies to the most recent versions of Acrobat and Reader (v. 8.1.2). It also plugs the vulnerability in the following Adobe products: -Adobe Reader 7.0.9 and earlier -Adobe Acrobat Professional, 3D and Standard 8.0 through 8.1.2 -Adobe Acrobat Professional, 3D and Standard 7.0.9 and earlier If you have any of these products installed, take a moment now to update them. As the SANS Internet Storm Center rightly notes, malicious software writers have traditionally been quick to incorporate critical Adobe vulnerabilities into their creations, so it’s probably best not to let any grass grow under your feet on this one.

Read more…

Spam DDoS assault cuts off south Pacific state

Thursday, June 26th, 2008

(Un)happy Talking
Citizens of the Marshall Islands in the South Pacific have been left without a functioning email systems following a denial of service attack on the country’s sole ISP.…

Read more…

Tennis sites hit by drive-by download attacks

Wednesday, June 25th, 2008

You cannot be serious
Two high-profile tennis websites are among scores of victims of a new wave of SQL injection attacks. The website of game regulators ITF and ATP, the professional players tour, were hit by automated attacks in the run-up to this week’s Wimbledon championship.…

Read more…

Almost half of malicious sites tied to 10 networks

Wednesday, June 25th, 2008

China mostly to blame, but so is Google
Almost half the websites pushing malware are hosted by just 10 networks, according to a new report that adds new support to the growing argument that a relatively few number of actors are responsible for most of the net-based threats.…

Read more…

New Trojan Leverages Unpatched Mac Flaw

Tuesday, June 24th, 2008

A tool for exploiting an unpatched security hole in Mac OS X systems has been developed and until earlier today was being distributed through an online forum that caters to Mac hackers, Security Fix has learned. The exploit tool, labeled “Applescript Trojan horse template” by hackers at Macshadows.com, appears to be a collective and ongoing effort to create a package of malicious software that capitalizes on the ARDagent security hole first publicized last week. The vulnerability essentially allows any program to run on a Mac user’s machine without first prompting the user to enter his or her user name and password. The first Macshadows.com post on developing this Trojan, dated May 18. Currently, the Macshadows user forum appears to have been wiped clean, both from the Macshadows.com Web site and from Google’s cache. However, Security Fix obtained screen shots of forum postings from the code’s authors, which are sprinkled […]

Read more…