From the category archives:

Security

Introduction to Website Parasites

by Shanmuga

"Wikipedia defines Parasitism as a “type of symbiotic relationship between organisms of different species in which one, the parasite, benefits from a prolonged, close association with the other, the host, which is harmed.” This definition perfectly describes relationships between hackers and legitimate websites. As it often happens in real life, the host (legitimate website and

Read the full article →

Google engineer posts sample code to show how to bypass DEP in Windows

by Shanmuga

"The disclosure of a new exploit technique that bypasses an important Windows security feature may result in more successful attacks against Microsoft’s newer operating systems, researchers said today.

Read the full article →

Too many passwords?

by Shanmuga

"How many web sites do you log into? Your bank? Facebook, Myspace and any number of other social networking sites? Auction sites? Shopping sites? Maybe lots of others too. Every site, of course, requires you to create a password. And if the site is serious about security, it may even set certain rules. For example,

Read the full article →

Antivirus software often foxed by malicious URLs

by Shanmuga

"Many malicious URLs are now invisible to URL filters and antivirus software alike, a web security company has found after conducting its own tests.

Read the full article →

Microsoft: Don’t press F1 key in Windows XP

by Shanmuga

"Microsoft told Windows XP users today not to press the F1 key when prompted by a Web site, as part of its reaction to an unpatched vulnerability that hackers could exploit to hijack PCs running Internet Explorer (IE). In a security advisory issued late Monday, Microsoft confirmed the unpatched bug in VBScript that Polish researcher

Read the full article →

Websites offered free anti-hijack scans

by Shanmuga

"Web admins and owners are being offered a free service that will scan their sites for malware hijacks, alerting them automatically if malicious code is found. The QualysGuard Malware Detection, launched as a beta this week, uses a combination of ‘static’ and behavioural analysis to take a closer look at web pages under a given

Read the full article →

Microsoft investigates unpatched flaw that affects users running IE7 and IE8

by Shanmuga

"Microsoft on Sunday confirmed it’s investigating an unpatched bug in VBScript that hackers could exploit to plant malware on Windows XP machines running Internet Explorer (IE). The flaw could be used by attackers to inject malicious code onto victims’ PCs, said Maurycy Prodeus, the Polish security analyst with iSEC Security Research who revealed the vulnerability

Read the full article →

Chromium browser remixed as a security Dragon

by Shanmuga

"Windows security software vendor Comodo has added its contribution to the short list of Chromium-based browser remixes that have sprung up in the wake of Google Chrome’s success. Best known for its firewall software, Comodo’s Chromium browser is called Dragon, and it promises better security features than those available in Google Chrome. It is the

Read the full article →

Adobe Flash security woes: How to protect yourself

by Shanmuga

"Adobe’s Flash Player software is on 99 percent of Internet-connected desktops, offering up multimedia and video capabilities on a multitude of popular Web sites such as YouTube. But the Adobe Flash platform has been beset by a rash of security problems that give intruders potential access to computers running the software.Issues have included one recent

Read the full article →

WordPress Installations Under Brute-Force Attack

by Shanmuga

"There is an ongoing attack against some WordPress implementations that is trying to brute-force the passwords for the administrator accounts on the installations. The attack is being driven by an automated PHP script that tries thousands of possible passwords.

Read the full article →

Microsofts Do and donts for Passwords

by Shanmuga

"The three basic things to remember when creating a strong password are the following: 1. Use a combination of letters, numbers and special characters. Also, remember that some dictionaries used in attacks have a "l33t" mode, which allows common letter/number-to-special character substitutions (like changing a-@, i-1 ,o-0 and s=$, for example, password = p@$w0rd). Therefore,

Read the full article →

How to check Websites/Blogs/Web pages for Malware

by Shanmuga

The web today is not a benign place. There are many bots (automatic programs) that are constantly scouring the Web looking for a vulnerable computer. Once the bots find one, whether a home computer or a Web-server, they try to compromise the computer by surreptitiously installing its payload. In the case of a Web-server, it

Read the full article →

8 Best Practices to Avoid Malware on Facebook and Twitter

by Shanmuga

"Thanks to the popularity of social networking sites like Facebook and Twitter, it’s a given that malicious hackers will devise ways to exploit the sites’ numerous users in order to infect their computers with malware. This unwanted software is designed to do a number of terrible things ranging from identity theft to turning computer into

Read the full article →

A Security Wish List for Microsoft Internet Explorer 9

by Shanmuga

"Just what is in store for Internet Explorer 9 from a security perspective remains unknown. But in light of Microsoft’s announcement, some security pros shared their thoughts with eWEEK about what they would like to see in the upcoming version of the Web browser.

Read the full article →

Microsoft denies backdoor in Windows 7

by Shanmuga

"Microsoft today denied that it has built a backdoor into Windows 7, a concern that surfaced yesterday after a senior National Security Agency (NSA) official testified before Congress that the agency had worked on the operating system. "Microsoft has not and will not put ‘backdoors’ into Windows," a company spokeswoman said, reacting to a Computerworld

Read the full article →

10 Lessons Google Must Learn About OS Security

by Shanmuga

"Google is new to the operating system market, so it has to demonstrate that it understands how to build and maintain a secure Web OS. The history of Windows security has shown there are many avenues of attack against a desktop operating system. There are even more potential attack strategies for an online OS. But

Read the full article →

Top Internet Security Trends of 2009

by Shanmuga

"The Security Response team has compiled the top security trends of 2009. We pulled data from the Global Intelligence Network and the experiences of the thousands of analysts and security experts at Symantec to come up with the top trends for the year. While none of these trends will be a surprise to anyone even

Read the full article →

Firefox 3.6 locks out rogue add-ons

by Shanmuga

"Mozilla will add a new lockdown feature to Firefox 3.6 that will prevent developers from sneaking add-ons into the program, the company said. The new feature, which Mozilla dubbed "component directory lockdown," will bar access to Firefox’s "components" directory, where most of the browser’s own code is stored. The company has billed the move as

Read the full article →

10 Reasons Why Windows Security Is Better than Ever

by Shanmuga

"Windows isn’t very well known for providing the kind of security users really want. Windows has long been the favorite target of malicious hackers that have run amok in the operating system. Over the past few years, things have only gotten worse for Microsoft. Until Service Pack 2 was released for Windows XP, users were

Read the full article →

Facebook Tips: Staying Safe While Using Games and Apps

by Shanmuga

"If you’re one of the 63.7 million people playing the popular Farmville game on Facebook, you’ve probably noticed a change in how you earn points. FarmVille’s parent company, Zynga, agreed last week to remove deceiving mobile subscriptions and "scammy" offers that lure players to register for services in exchange for game currency, which helps players

Read the full article →

Flash flaw puts most sites, users at risk

by Shanmuga

"Hackers can exploit a flaw in Adobe’s Flash to compromise nearly every Web site that allows users to upload content, including Google’s Gmail, then launch silent attacks on visitors to those sites, security researchers said today. Adobe did not dispute the researchers’ claims, but said that Web designers and administrators have a responsibility to craft

Read the full article →
Page 1 of 6
1
2
3
4
5
6