Malware Help. Org | Blog

"The developers of the TrueCrypt open source encryption tool are considering submitting a complaint against Microsoft to the EU Commission if Microsoft is not prepared to lay open the Windows hibernation API. From version 5.1 TrueCrypt supports hibernation for encrypted system partitions.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!

"Microsoft released its March 2008 security bulletin, which includes four bulletins, all deemed critical by Microsoft. The most serious of these affects Microsoft Excel, which alone has six specific "Common Vulnerablities and Exposures" vulnerabilities noted, one of which has been exploited in the wild.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!

"The WinCE/InfoJack Trojan hijacks the infected device’s serial number, operating system and other information and uploads it to an attacker-controlled Web site.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!

"Microsoft’s Secure Windows Initiative unit has emerged from the shadows, promising a new level of transparency, as well as details of software vulnerabilities and security bulletins.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!

"Microsoft is taking a leaf out of the virus writers’ handbook, hoping to use friendly "worms" to distribute software patches surreptitiously.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!

"Microsoft on Tuesday rolled out 11 security updates that patch 17 vulnerabilities in Windows, Office, Internet Explorer, Internet Information Server (IIS) and several other components and technologies. It was the most patch bulletins Microsoft’s has issued since February 2007, even though it yanked one expected update — scheduled last week to fix problems in VBScript and JScript — at the last minute. Five of the 11 were ranked "critical," Microsoft’s highest rating in its four-step threat-scoring system. The others were pegged as "important," the second-highest rating.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!

"Microsoft Corp. announced today that it will release a dozen security updates next week, matching the patch record set a year ago. Seven of the 12 will be tagged with the company’s highest threat ranking. "There’s not a Windows shop anywhere in the world that won’t need to deploy at least one of these patches," said Andrew Storms, director of security operations at nCircle Network Security Inc. And most everyone will be taking all 12."
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!

"Websense Security Labs has discovered that Windows Live Mail accounts have been targeted in recent spammer tactics. In these recent attacks, spammers have managed to create bots that are capable of signing up and creating random Live Mail accounts that could be used for a wide range of subsequent attacks.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!

"…Microsoft Excel files are being used to exploit a zero-day (previously unknown/unpatched) vulnerability and plant keystroke loggers on select (.gov?) networks…bugs in Microsoft Office applications emerged over the last year as standard weapons for criminals conducting corporate espionage and computer attacks against military targets. Last summer, Microsoft’s Office team struggled to keep pace with flaw discoveries and, after a brief lull, it looks like we’ll see much of the same this year.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!

"It’s not science-fiction. It’s a real technology and it cannot be allowed to happen or privacy will vanish. In Microsoft’s vision of tomorrow’s office, according to a report in the London Times, our computers will be constantly monitoring us with wireless sensors. There’s nothing new about Big Brother software. Programs that measure how many keystrokes we make per minute are old hat. If you work in an office and think for one moment that your e-mail, instant messaging or Web-browsing habits are in some way secret, you’re a fool.
Read the rest of this entry »

If you enjoyed this post, make sure you subscribe to my RSS feed!