Zeljka Zorz
Months-old Skype vulnerability exploited in the wild
A Skype flaw patched some 9 months ago with the new version (4.1.0.179) of the VoIP client has been spotted being exploited in the wild. According to M86 Security Labs, the …
Recently published and still unpatched Windows XP flaw exploited in the wild
Less than a week since the controversial release of details of a vulnerability in the Windows Help and Support Center function that affects Windows XP and Windows Server 2003 …
Twitter PDF exploit spam
As evidenced by these real-time results, various Twitter accounts have recently bombarded other users with a message saying “Wow, A marvelous Product” and …
Facebook “101 hottest women” clickjacking attack
Another clickjacking attack taking advantage of the “Like” button option has targeted Facebook users. The lure is very simple – follow the link to see the …
Automated social engineering PoC successful on Facebook and IRC
When it comes to social engineering attacks, one of the main challenges for the attackers is how to maximize the number of targets and the number of victims. In order to reach …
Backdoor in open source Linux IRC server
The public can be forgiven for thinking that Linux-based operating systems are somehow immune to attacks and compromises, since news of such an occurrence pops up …
0-day Windows flaw published by Google researcher
Tavis Ormandy – the well-known Google security researcher who discovered the feature/vulnerability in Java back in April and forced Sun to patch it up swiftly by …
Adobe patches critical Flash flaw
Adobe released a security bulletin revealing the 32 vulnerabilities that it has patched with the release of Flash 10.1(.53.64). Among those is the critical 0-day flaw that has …
Two Mexican botnets taken down
A week ago, Trend Micro was alerted to a phishing attack that was aimed at Spanish-speaking users and was discovered to be originating from a Mexican botnet. The attack was …
Mass SQL injection attack compromises IIS/ASP sites
Thousands of websites and who knows how many visitors were affected by the recently discovered mass SQL injection attack that targeted – among others – The Wall …
114,000 iPad owners’ emails and account IDs exposed
News that vulnerabilities on the AT&T network allowed a group calling itself Goatse Security to harvest emails and AT&T authentication IDs of 114,000 early-adopters …
Drive-by download attack disguised by Canadian Pharmacy website
Red Condor today issued a warning of a new sophisticated email malware threat that spoofs YouTube and uses a redirect on a compromised website to a common Canadian Pharmacy …