2006.11.06 Daily Security Reading
by Rodney Campbell on Nov.06, 2006, under Security
Increased Spam Fuelled Through Botnet Activities
MessageLabs, a provider of integrated messaging and web security services to businesses worldwide, has announced the results of its Intelligence Report for October 2006.
New, critical Microsoft Windows 0-day appears
Another new zero-day exploit for Microsoft systems has appeared, capable of compromising fully patched IE 6/7 systems when a user visits a malicious website.
HD Moore’s Kernelfun Blog, a repeat of the Browserfun blog.
Symantec Best at Removing Rootkits; Microsoft Worst
A study done by anti-virus veteran Roger Thompson rates Symantec’s Norton AntiVirus 2007 as the best at detecting and removing stealth rootkits; Microsoft’s Windows Defender was a big disappointment in the study.
Seven shortcomings of virtual security
I’ve seen a spate of virtualization products popping up to protect your computer while you surf the Internet. Roughly similar to Sun’s Java infamous sandbox environment, they use various mechanisms to prevent malware from infecting or modifying your computer while you browse the Web, read e-mail, or use other forms of Internet-based communications (IM, p-to-p, and so on).
Malware writers have used a Wikipedia article and special storage features to attempt to plant malicious code on unsuspecting users’ systems, the online encyclopedia’s organisers have confirmed.
Top 10 Signs You Have an Insecure Web App
I often surf the web and see blatant design errors that make me shake my head. Without even investigating the security of a site, I know without a doubt that the site will be chock full of vulnerabilities. How can I be so sure? I see programming mistakes that illustrate an utter lack of concern for security. They are ugly mistakes that are far too prevalent.
-
Hi! Welcome to Rodney Campbell's Blog!
Thanks for dropping by! Feel free to join the discussion by leaving comments, and stay updated by subscribing to the RSS feed. See ya around!
Follow Me!
