Current Security Issues

Hackers exploit latest IE zero-day with drive-by attacks

Published March 11, 2010

Hackers are exploiting the just-disclosed unpatched bug in Internet Explorer (IE) to launch drive-by attacks from malicious Web sites. More...

Microsoft fixes eight flaws with its March update

Published March 10, 2010

The eight bugs patched this month are far from the near-record 26 that Microsoft fixed last month when it delivered 13 security bulletins. Both of this month's bulletins are ranked "important," the second-highest rating in Microsoft's four-step severity scoring system, even though the company acknowledged that the eight vulnerabilities could be used to completely compromise a Windows PC. More...

Microsoft: Don't press F1 key in Windows XP

Published March 2, 2010

Microsoft told Windows XP users today not to press the F1 key when prompted by a Web site, as part of its reaction to an unpatched vulnerability that hackers could exploit to hijack PCs running Internet Explorer (IE). More...

Sea World killer whale attack video leads to malware

Published March 2, 2010

News of the Sea World trainer's tragedy sped quickly around the world, and now sick cybercriminals are exploiting the story of 40-year-old Brancheau's death for their own commerical gain. More...

Free VirusTotal Uploader Links to 40 Antivirus Programs

Published February 26, 2010

The VirusTotal.com Web site offers a free but invaluable security service. It will scan any Web download, e-mail attachment or other file you send it with 40-odd different antivirus scanners to let you know whether it's safe for your computer. More...

Criminals Hide Payment-Card Skimmers Inside Gas Station Pumps

Published February 26, 2010

Criminals hid bank card-skimming devices inside gas pumps -- in at least one case, even completely replacing the front panel of a pump -- in a recent wave of attacks that demonstrate a more sophisticated, insidious method of stealing money from unsuspecting victims filling up their gas tanks. More...

Chatroulette: red-hot and controversial

Published February 24, 2010

The social networking Web site and latest Internet craze randomly and repeatedly connects users to strangers from all over the world, via their webcams. But some child advocates are worried that those strangers could include predators talking to kids. More...

Google Buzz criticized for disclosing Gmail contacts

Published February 11, 2010

At issue is a feature that compiles a list of the Gmail contacts who users most frequently e-mail or chat with. Buzz automatically starts following these people and makes the list public, meaning strangers can see who Buzz users have been in contact with. More...

Google Buzz and your privacy

Published February 10, 2010

Google Buzz is Google's answer to two popular social networking tools -- Facebook and Twitter. Before you try it out, you may want to be aware of an important privacy issue. More...

Patch Tuesday brings 13 fixes

Published February 9, 2010

This month, Microsoft has issued 13 Security Bulletins addressing 26 vulnerabilities. Five of the vulnerabilities are rated "Critical," seven are marked as "Important," and the last one is classified as "Moderate." All of the critical vulnerabilities earned their rating through a remote code execution impact, meaning a hacker could potentially gain control of an infected machine. More...

Google to jump on the social networking bandwagon

Published February 9, 2010

This would make Google the latest consumer Internet company to try to graft social-networking features into online communications services. More...

Apple patches critical flaws in iPhone, iPod Touch

Published February 5, 2010

Apple patched five vulnerabilities in the iPhone's operating system, including one in a password-locking feature that has required attention before. More...

Online Scammers Target Tax Payers

Published February 1, 2010

Tax scams come around at this time every year through your e-mail and with just the click of a mouse, scammers can take away thousands of dollars out of your bank account. More...

Johnny Depp Death Rumour Spreads Malware

Published January 26, 2010

Hackers have taken advantage of a fast-spreading Internet hoax to spread their own malware on sites claiming to contain video footage of Johnny Depp's supposed car crash. More...

Data breaches from malicious attacks doubled last year

Published January 25, 2010

Data breaches at U.S. companies attributed to malicious attacks and botnets doubled from 2008 to 2009 and cost substantially more than breaches caused by human negligence or system glitches. More...

Users still make hacking easy with weak passwords

Published January 23, 2010

Analysis of 32 million breached passwords shows the majority are still very simple to crack, with "123456" and "12345" being the two most popular. More...

Microsoft issues emergency IE patch January 21st

Published January 21, 2010

Microsoft will release its emergency patch for Internet Explorer (IE) on Thursday, January 21st. More...

Cyber hacker hits Paula Dockery's campaign site

Published January 21, 2010

The campaign of Sen. Paula Dockery, a Lakeland Republican running for government on a clean-up-government platform, was hit with a sophisticated computer hack this week that clogged her website. More...

Critical Shockwave Player vulnerabilities patched

Published January 20, 2010

Critical vulnerabilities have been identified in Adobe Shockwave Player 11.5.2.602 and earlier versions, on the Windows and Macintosh operating systems. More...

IE6 attack code used to hack Google now public

Published January 16, 2010

The dangerous Internet Explorer attack code used in last month's attack on Google's corporate networks is now public, and could possibly be modified to work on more recent versions of the browser. More...

FBI Warns of Scams Involving Haitian Relief

Published January 14, 2010

Once again the scammers are taking advantage of people's desire to help disaster victims. Read the FBI guidelines before you donate. More...

First Patch Tuesday of 2010

Published January 13, 2010

In the first Patch Tuesday of 2010, Microsoft releases a single critical security update for Windows users. More...

Large-scale attacks exploit Adobe .pdf bug; patch slated for next week

Published January 6, 2010

A week before Adobe is scheduled to patch a critical vulnerability in its popular PDF software, hackers are actively exploiting the bug with both targeted and large-scale attacks. More...

Y2.01K bug trips up symantec: error causes red faces

Published January 5, 2010

Symantec's Endpoint Protection Manager has been hit by an embarassing date bug, and has not been able to accept updates dated since then. More...

White House appoints cybersecurity advisor

Published December 22, 2009

Six months after President Obama pledged to appoint a cybersecurity advisor, the White House announced the appointment of former eBay Chief Security Strategist Howard Schmidt to the post. More...

Facebook users: be careful of the new "recommended" security settings!

Published December 9, 2009

Facebook users are being told about new security changes that give us "more control" over our information. However, their recommended privacy settings leave much to be desired. More...

Microsoft patches 12 bugs in December's "Patch Tuesday"

Published December 9, 2009

Microsoft patched 12 vulnerabilities in Windows, Office, and Internet Explorer (IE), including three critical bugs in its newest browser, IE8. More...

Judge okays $675K fine in P2P suit; also criticizes file-sharing lawsuits

Published December 8, 2009

Federal Judge Nancy Gertner has signed off on a jury's damages award of $675,000 for illegal file sharing; defendant Joel Tenanbaum illegally downloaded and shared 30 songs. More...

Apple issues security updates for Mac OS X

Published December 4, 2009

Apple pushed an update for Leopard and Snow Leopard systems that plugs a large number of security holes in Apple's version of Java. More...

Zbot attack remains biggest e-mail threat

Published December 3, 2009

A massive spam campaign that poses as a message from the Centers for Disease Control (CDC) asking people to register for H1N1 vaccinations remains a big problem. More...

Apple issues week's second patch set, fixes 7 Safari flaws

Published November 13, 2009

Apple issued its second security update in three days, patching seven vulnerabilities in Safari, including one in the Windows version that the company fixed two months ago for most Mac users. More...

Microsoft plugs 15 holes in Windows, Office

Published November 13, 2009

Microsoft released software updates to fix at least 15 security flaws in Windows, Windows Server, and Microsoft Office. Of the 6 security bulletins that fix the 15 flaws, three were tagged "critical" by Microsoft, while the remaining 12 were labeled as "important," the next-lowest rating in the company's four-step severity scoring system. More...

First iPhone worm leaves users "Rickrolled"

Published November 9, 2009

The first worm written for Apple's iPhone has been unleashed and is infecting phones in Australia, but only phones that are "jailbroken." More...

FBI: Online banking attacks reach the $100 million mark

Published November 6, 2009

FBI officials say a mix of banking Trojans and phishing attacks has plagued victims - mainly public institutions and small and midsize businesses - to the tune of $100 million in attempted losses as of October. More...

Windows Autorun feature helps malware soar

Published November 4, 2009

A new report by Microsoft shows that the two most prevalent threats to Windows PCs in the first half of 2009 were malicious programs that have been aided mightily in their spread by a decision by Microsoft to allow the contents of removable media -- such as USB thumb drives -- to load automatically when inserted into Windows machines. More...

Mozilla fixes 16 flaws with Firefox 3.5.4

Published October 28, 2009

Mozilla today patched 16 vulnerabilities in Firefox, 11 of them critical, as it updated the open-source browser to version 3.5.4. More...

IE, Chrome, Safari duped by bogus PayPal SSL certificate

Published October 26, 2009

A hacker has created a counterfeit security certificate that tricks Microsoft Internet Explorer, Apple Safari for Windows, and Google Chrome into thinking a bogus PayPal payment page is the real thing. Mozilla Firefox is not vulnerable to this exploit. More...

Malware Posing as Postal Tracking E-Mail

Published October 19, 2009

A new Trojan is entering e-mail inboxes by posing as a purchase receipt of an online order. More...

Microsoft fixes 34 flaws in its Patch Tuesday delivery

Published October 14, 2009

Microsoft delivered a record 13 security updates that patched 34 vulnerabilities in every version of Windows. More...

Gmail, Yahoo Mail join Hotmail; passwords exposed

Published October 9, 2009

Google's Gmail and Yahoo's Mail were targeted by a large-scale phishing attack, perhaps the same one that harvested at least 10,000 passwords from Microsoft's Windows Live Hotmail, according to a report by the BBC. More...

FBI's 'Operation Phish Phry' snares nearly 100 people

Published October 8, 2009

The Federal Bureau of Investigation on Wednesday charged almost 100 people in Operation Phish Phry, the largest cyber fraud phishing case to date. More...

IRS scam now world's biggest e-mail virus problem

Published October 1, 2009

The most prominent spam-delivered virus in the world right now, the IRS scam email accounts for about 10% of the spam email that's currently making the rounds in cyberspace. More...

Twitter Hit by New Phishing Attack

Published September 28, 2009

Phishers are targeting Twitter users in a new attack involving direct messages sent to Twitter users containing a link to a site requesting user log-ins. More...

UNC data breach exposes 163,000 social security numbers

Published September 28, 2009

The University of North Carolina recently began notifying about 163,000 women of the potential compromise of their Social Security numbers and other personal information after a hacker breached a system containing the data. More...

New phishing attack chats up victims

Published September 21, 2009

Many people are now aware of phishing attacks, so criminals have stepped up their scams by adding fake live-chat support windows to their websites to make them seem more real. More...

Apple patches its different operating systems

Published September 11, 2009

Apple issued Snow Leopard's first security update. In a separate upgrade, Apple patched 33 vulnerabilities in 2007's Leopard, and about half as many in the even older Tiger. More...

Mozilla patches 10 Firefox 3.5 vulnerabilities

Published September 10, 2009

Mozilla patched 10 security vulnerabilities in Firefox 3.5, all but one ranked critical. It also delivered the first update that automatically checks for outdated versions of the popular Flash Player plug-in. More...

It's Patch Tuesday - September 2009

Published September 9, 2009

Microsoft issues five security bulletins, all of which are rated "critical." More...

New attack cracks WPA Wi-Fi encryption in a minute

Published August 27, 2009

Computer scientists in Japan say they've developed a way to break the WPA encryption system used in wireless routers in about one minute. More...

Miami man indicted for massive credit hack

Published August 18, 2009

A 28-year-old Miami man was indicted Monday for the largest credit and debit card theft ever prosecuted in the U.S., with data from more than 130 million credit and debit cards stolen. More...

Apple patches 6 Safari security vulnerabilities

Published August 12, 2009

Apple plugged six security holes, four of them critical, in its Mac and Windows Web browser. More...

Microsoft delivers nine security updates

Published August 11, 2009

Microsoft released nine August 2009 security patches, five of them Critical and all but one affecting Windows. More...

Fake FEMA email targeting government employees

Published August 7, 2009

The US-CERT has identified a "spear fishing" attack targeting government employees, that pretends to come from FEMA. More...

Apple patches 18 Mac vulnerabilities

Published August 6, 2009

Apple has recently patched 18 vulnerabilities in Mac OS X. More...

Fake Internet postcards carrying links to a virus

Published August 5, 2009

Fake Internet postcards circulating through e-mail inboxes worldwide are carrying links to the virus known as Zeus Bot. More...

Mozilla patches three Firefox bugs

Published August 4, 2009

Mozilla has patched Firefox 3.5 and Firefox 3.0 to resolve three security vulnerabilities, including a pair unveiled last week at Black Hat, and a third Mozilla itself revealed last month. More...

Adobe patches 12 Flash bugs

Published July 31, 2009

Adobe patched 12 vulnerabilities in Flash Player, including three it inherited from faulty Microsoft development code and one that hackers have been exploiting for at least a week. More...

Botnet armies driving spam to new heights

Published July 30, 2009

More that 150,000 computers are being infected each day, says McAfee in their latest Threat Report. More...

Microsoft to rush out two out-of-cycle patches today

Published July 28, 2009

Not waiting for its usual second-Tuesday release of security patches, Microsoft today added two new updates to its earlier list of six for July 2009. More...

Adobe confirms Flash zero-day bug in PDF docs

Published July 23, 2009

Adobe is investigating a critical vulnerability in its Flash format that is currently being exploited by hackers using malicious PDF documents. More...

IT exec who sabotaged organ donation records sentenced

Published July 21, 2009

This is why companies have to secure their networks: the IT director of a nonprofit organ procurement center was sentenced last week to two years in prison for intentionally deleting numerous organ donation records and other data after being fired from her job. More...

Microsoft plugs critical DirectShow, Video ActiveX holes

Published July 14, 2009

With 3 Critical and 3 Important patches this month, Microsoft's updates fix 9 vulnerabilities in Windows, Microsoft Office, and several other programs. More...

Popular Children's Web Site Under Attack by Identity Thieves

Published July 8, 2009

Children are the latest victims in the Identity Theft arena: the popular kids website Neopets reports that children are being tricked into revealing their parents' personal information. More...

Cyberattacks hit U.S. and South Korean Web sites

Published July 8, 2009

In a combined attack, 14 major websites in the U.S. and 11 in South Korea have become unstable or inaccessible in the past few days. U.S. sites include the White House, the State Department, and the New York Stock Exchange. More...

Don't be a victim of auction fraud, warns the FBI

Published July 1, 2009

Most online auctions are legitimate. But even a small percentage can add up to big numbers. Last year IC3 received more than 15,000 complaints for online auction scams. More...

Google fixes 'critical' security hole in Chrome

Published June 23, 2009

The latest Chrome release (version 2.0.172.33) fixes a bug that could let a malicious hacker access to your computer with the same privileges as the logged-on user. More...

Spammers cashing in on Twitter, Iran, new iPhone

Published June 19, 2009

As use of social media sites like Twitter and Facebook has grown, so has their abuse. Spammers have been taking advantage of hot stories in the news, and in the past day they've been flooding Twitter with phoney messages about Iran and the latest iPhone 3.0 operating system. More...

Twitter postpones maintenance to continue bringing news from Iran

Published June 17, 2009

Twitter's regularly scheduled downtime was delayed so that the spate of news coming from Iran could continue. More...

International telecom hacker group busted

Published June 15, 2009

Global law enforcement team takes down alleged authors of $55M-plus scam More...

Microsoft June patches are bustin' out all over

Published June 9, 2009

Of the 10 updates announced for June 2009, six are marked critical, three are marked important, and the last is listed as moderate. More...

Public sector is one of the largest targets of email-borne viruses

Published June 4, 2009

The May Intelligence Report from MessageLabs shows new highs in the volume of spam, phishing and virus attacks, with the public sector having one of the highest percentage rates of all virus attacks. More...

Web's Most Dangerous Keyword Searches

Published May 28, 2009

According to McAfee’s recently released report “The Web’s Most Dangerous Search Terms,“ the most dangerous keyword to search for is "screensavers." More...

Apple has huge security update for Mac OS X

Published May 13, 2009

Apple patched 67 vulnerabilities in Mac OS X. Tuesday's update was the largest for Apple since March 2008. More...

Only 1 update from Microsoft this month, but it's CRITICAL

Published May 12, 2009

Microsoft patches a vulnerability in PowerPoint that could allow an attacker to gain control of your computer remotely. More...

Top 10 Worst Computer Viruses

Published May 9, 2009

Vnunet gives us a look back at the ten most notable viruses in the history of computers and the Internet. How many do you remember? More...

REMINDER to Facebook users: Beware of Phishing Attacks

Published May 7, 2009

Last week we warned you about phishing attacks on Facebook. Well, they're back! More...

Two brothers among indictees in $4M spam case

Published May 3, 2009

Two Missouri men who made over $4 million pitching and selling everything from electronics to teeth whiteners have been indicted by a federal grand jury on a variety of e-mail spamming and related charges. More...

Phishers hit Facebook with scam messages

Published April 30, 2009

Facebook users were hit with a phishing attack that tried to steal names and passwords from users of the popular social network. More...

Spammers Piggyback On Swine Flu Outbreak

Published April 28, 2009

Spammers never miss an opportunity to capitalize on a buzzy topic. Already the concern over a recent outbreak of the swine flu has produced a wave of swine flu related spam. More...

Excel flaw - and a passel of others - are covered in this month's patches from Microsoft

Published April 15, 2009

Microsoft released eight patches, five critical, on Tuesday as part of its regular Patch Tuesday update cycle. More...

Twitter Worm Attack Continues: Here's How to Keep Safe

Published April 14, 2009

The malicious worm affecting Twitter over the weekend has now mutated and continues to invade the popular micro-blogging network. More...

Emails From Oprah...and other recent scams

Published April 8, 2009

The FBI warms of recent email frauds, from work-at-home scams to invitations to the Oprah Winfrey Show. More...

2008 Annual Report on Internet Crime Released

Published April 1, 2009

The Internet Crime Complaint Center released their 2008 Annual Report on the number of Internet crime complaints received; not surprisingly, complaints of online crime hit a record high. More...

Security experts are divided over the threat posed by the Conficker worm (Update)

Published March 30, 2009

Although some experts are saying that the hype about the Conficker worm is just that—hype, all are recommending that you take all the steps necessary to protect your computer system from this pervasive worm. More...

Vulnerability in Mozilla's Firefox could allow a hacker to take over your computer

Published March 27, 2009

A new vulnerability has been discovered in the Mozilla Firefox web browser that could allow attackers to execute arbitrary code on affected systems. More...

Mass Fake Delta Airlines Ticket Confirmation Email Message

Published March 10, 2009

Beware of a scam involving the spread of email messages disguised as coming from Delta Airlines. More...

Adobe patches Flash vulnerabilities for three platforms

Published February 26, 2009

Adobe Systems has updated its Flash software to eliminate five flaws affecting Windows, OS X and Linux systems. More...

Attackers exploit unpatched Excel vulnerability

Published February 25, 2009

For the second time in the past five days, security researchers are warning that hackers are exploiting a critical unpatched vulnerability in widely-used software. More...

Hackers exploit unpatched Adobe Reader bug

Published February 23, 2009

Hackers have been exploiting a critical bug in Adobe Reader, the popular PDF-viewing software, for at least nine days, researchers said Friday, but a patch may not be ready for another three weeks. The bug is not hard to exploit, indicating that attacks are expected to spread. More...

As Tax Season Continues, Beware of Scams

Published February 16, 2009

The Internal Revenue Service is warning U.S. taxpayers to be prepared for a steady increase in scams and virus attacks via e-mail, telephone and the Web. More...

Fake CNN malware attack uses Gaza story to dupe users

Published January 12, 2009

Hackers have launched a large-scale spam attack masquerading as CNN.com news notifications about the Israeli invasion of Gaza. More...

Some Kids' Cameras Coming With Viruses

Published December 30, 2008

Some of Fisher-Price's Kid-Tough digital cameras have viruses that are affecting not just the camera, but computers as well. More...

Fake Christmas, holiday greetings spread new malware

Published December 29, 2008

Beware of spam with subject lines such as "Merry Xmas!" and "Merry Christmas card for you!" More...

Microsoft issuing an emergency patch today for Internet Explorer vulnerability

Published December 17, 2008

Microsoft will release a patch this afternoon, Dec. 17, for a zero-day vulnerability affecting Internet Explorer that has been under attack by hackers. More...

Mozilla issues eight patches for Firefox browser

Published December 17, 2008

Mozilla issued eight patches for its Firefox Web browser, three of which fix problems classified as critical. More...

Microsoft issues hefty security update - 6 Critical and 2 Important

Published December 10, 2008

Microsoft released its December 2008 security patches, with 6 marked Critical and 2 marked Important. More...

Shopping Safely Online

Published December 5, 2008

Online shopping has become a popular way to purchase items without the hassles of traffic and crowds. However, the Internet has unique risks, so it is important to take steps to protect yourself when shopping online. More...

Hackers use Obama win for massive malware campaign

Published November 6, 2008

Hackers have launched a major malware campaign that tries to trick users into installing an update to Adobe Systems Inc.'s Flash, but actually plants a Trojan horse on unprotected PCs. More...

Facebook worm takes advantage of google's reputation

Published October 30, 2008

Facebook users are under attack by a new worm written to take advantage of Google's reputation. More...

Microsoft to rush out emergency Windows patch

Published October 23, 2008

Microsoft will rush out an emergency security patch for Windows users on Thursday, October 23rd. More...