1
Thursday, February 17, 2011
Microsoft downplays threat of new Windows zero-day The company said it hasn't found a way to hijack PCs using SMB bug. The flaw in the Windows Server Message Block (SMB) network and file-sharing protocol was disclosed Monday by someone identified only as " Cupidon-3005" on the Full Disclosure security mailing list
Thursday, August 05, 2010
Stuxnet industrial worm was written over a year ago Stuxnet, which targets supervisory control and data acquisition systems made by Siemens AG, was created as early as June, 2009, according to Symantec Corp. researchers. Some claim the malware creators stole encryption keys made by Realtek Semiconductor Corp. and JMicron Technology Corp.
Wednesday, July 28, 2010
Razorback project targets malware, zero-day exploits Sourcefire Inc.’s open source security project includes a defense routing system and could send potentially malicious files to a forensics tool. It is not designed to directly block malware but could work with anti-virus tools
Monday, June 01, 2009
Why security should be mundane Simple and repeatable security is boring, but, a columnist argues, it is also the best defence against threats
Thursday, December 08, 2005
Does zero-day mean zero response? The time it takes for a known vulnerability to be exploited by some sort of malware has fallen precipitously in the past three years. From the time that the vulnerability became known, the Slammer worm took six months to hit, Sasser took three weeks, and the Witty worm took two days. One of 2005’s best-known worms, Zotob, started making the rounds six days after the vulnerability was identified.Today, many IT security observers believe that zero-day attacks are imminent – if, in fact, they haven’t already happened.
Thursday, August 26, 2004
Busting common myths about network IPS Intrusion prevention systems (IPSs) are becoming ubiquitous in the minds of enterprise buyers. However, the problems of intrusion detection systems (IDSs) have not gone away, and many organizations have an overinflated view of these systems. Moreover, the vendors and popular press continue to perpetuate numerous myths around this narrow but useful capability.
1