Total Care PC Protection by AOL
Today, AOL expects to release a beta version of Total Care, its soup-to-nuts security and PC performance software suite that will compete with similar all-in-one products from Microsoft, Symantec, and McAfee.
Archive for July, 2006
Google helps finding malicious executables
Research from Websense Security Labs has found that thousands of pieces of malicious binaries are available on the web. Websense searched Google with Google’s own application programming interface to find malicious executables indexed by the search engine.
A Google query for ‘Signature: 00004550′ results in numerous links to executable files. The reason this search works is because when Google indexes the executable file, it passes the PE file format of the windows executable.
Vulnerability in McAfee’s ePO
ePolicy Orchestrator is security management software that provides a centralized console for managing McAfee enterprise security product such as Total Protection, a solution McAfee rolled out in April that combines antivirus, antispyware, antispam, firewall and intrusion-prevention features.
The vulnerability, which affects ePO’s Common Management Agent version 3.5.0 and older, stems from a directory traversal design flaw that could allow remote attackers to create any type of file on a compromised system, including Trojans and other malware, said Marc Maiffret, co-founder and CTO at eEye Digital Security, the Aliso Viejo, Calif.-based vendor that discovered the vulnerability.
MySpace worm on the loose
A worm spreading through MySpace is embedding JavaScript code into users’ profiles that redirects visitors to a site claiming the U.S. government was behind the 9/11 terrorist attacks, a security company warned Monday.
The unnamed worm isn’t malicious, said Symantec researchers, but the malformed Shockwave Flash (.swf) file containing the payload embeds JavaScript into the profile of any MySpace user who views the .swf file.
Recent Posts
- Twitter phishing… inside Twitter
- Adobe Flash, Apple Safari fail privacy test
- Military contractor “cyber-defense” gold rush begins
- Real plugs critical holes in Helix Server
- ‘Classmates Reunion’ Used as Malware Ploy
Archives
- January 2009
- December 2008
- November 2008
- October 2008
- September 2008
- August 2008
- April 2008
- March 2008
- February 2008
- January 2008
- December 2007
- November 2007
- October 2007
- July 2007
- June 2007
- May 2007
- April 2007
- March 2007
- February 2007
- January 2007
- December 2006
- November 2006
- October 2006
- August 2006
- July 2006
- June 2006
- May 2006