- gcluley: Has Google said your PC is infected with DNS Changer malware? http://t.co/9muMA7zt46 minutes ago
- SophosSupport: Advisory: Sophos Endpoint v 9.5 and 9.7: automatic upgrade to v 10, reboot required: http://t.co/8KxlQ0Nq54 minutes ago
- SophosLabs: 4 yrs jail for man who masterminded Bredolab botnet of 30 million computers http://t.co/yq2q5tkG #huzzah!about 1 hour ago
- SophosLabs: Learn more about analog computing - and Bob Moog! http://t.co/B0dQjMdkabout 2 hours ago
- gcluley: DDoS attack brings down UK webhosting firm 123-reg http://t.co/kMwKEhRS (via @regvulture)about 2 hours ago
WWW
Automated SEO poisoning attacks explained
We've talked many times on this blog about how hackers exploit hot trending news stories using blackhat search engine optimisation (SEO) techniques to poison search engine results. Often this is with the intention of spreading scareware (also known as fake Read more…
Critical Firefox security hole fixed - have you updated?
Mozilla has responded to concern about a critical security vulnerability in Firefox 3.6, by releasing version 3.6.2 of its popular browser ahead of schedule. Firefox 3.6.2 fixes a vulnerability first discovered by security researcher Evgeny Legerov last month, which could Read more…
German Government: Don't use Firefox
The German government has advised computer users not to run Firefox and run an alternative browser instead, because of a critical security flaw. The advice, which comes from BürgerCERT, part of the German Federal Office for Security in Information Technology Read more…
Protecting against the Internet Explorer zero day vulnerability
A few days ago Microsoft warned its users of an unpatched security hole in its products that could leave Windows users exposed to attacks by cybercriminals. The Internet Explorer vulnerability, which has the CVE reference CVE-2010-0806 and fortunately does not Read more…
Windows and Mac users urged to update Safari
Apple has released version 4.0.5 of its Safari browser, fixing a number of issues with its browser for Windows and Mac OS X including - most importantly - a grand total of 16 security vulnerabilities. If you dilly-dally over updating Read more…
Hackers exploit Oscar film awards to spread scareware
Last night saw Kathryn Bigelow's hard-hitting film "The Hurt Locker", about a bomb disposal team in Iraq, scoop the major gongs at the Academy Awards. It shouldn't probably be any surprise to hear that movie buffs around the world used Read more…
Sea World killer whale attack video leads to malware
Dawn Brancheau, a trainer at Sea World in Orlando, was killed yesterday after being attacked by a killer whale. News of the tragedy sped quickly around the world, and now sick cybercriminals are exploiting the story of 40-year-old Brancheau's death Read more…
Malware-spiked adverts hit Star Tribune website
The Star Tribune, the largest newspaper in the state of Minnesota, has confirmed that visitors to its website (www.startribune.com) were hit by malicious adverts earlier this week. The "malvertising" attack, which began on Sunday, spurred the newspaper into disabling all Read more…
European Internet Explorer users invited to choose another browser
Starting next week, European users of Internet Explorer may expect to see an invitation to choose an alternative browser for surfing the worldwide web. As part of a settlement of a long-running anti-competition dispute with the European Union, Microsoft has Read more…
Mozilla admits Firefox add-on false alarm
As I reported on this blog at the time, last week Mozilla warned that two Firefox add-ons had been found to be infected by malware. This week Mozilla has updated its blog in order to explain that one of those Read more…
Bill Cosby has NOT died, but rumours fuel hacker scareware attack
A hoax has spread rapidly over the internet this weekend, claiming that comedian Bill Cosby has died at the age of 72. However, hunting for information about the story can lead your computer into a nasty malware infection. In what Read more…
Mozilla admits Firefox add-ons contained Trojan code
Mozilla has issued a warning that two add-ons available from AMO (addons.mozilla.org, the Mozilla Add-ons website) were infected by malicious code capable of infecting Windows computers. According to a security notice on AMO's blog, the Master Filer add-on was infected Read more…
Microsoft warns of Internet Explorer vulnerability
It feels like we've only just got our heads around the last security vulnerability in Internet Explorer (the one used in "Operation Aurora"), and now here comes another one. A security advisory published by Microsoft warns of a vulnerability in Read more…
How to choose a strong password
Password security is in the news again, as it is revealed that hackers had managed to break into the accounts of many Twitter users. Many of the affected Twitter users had previously registered on P2P file-sharing sites - and hackers Read more…
The world's top 10 dirtiest web-hosting countries
My apologies if you were expecting this to be details of which nations had the most porn sites, this is actually all about the top ten countries hosting malware on the web, passing on virus infections to innocent computer users. Read more…
Petition calls for Internet Explorer 6 to be dropped by British Government
An online petition has been launched calling on British Prime Minister Gordon Brown to encourage government departments to move away from Internet Explorer 6. The petition, hosted on the official Downing Street petitions website, follows calls from many experts for Read more…
Leet Chrome bug finders can bag $1337 reward from Google
Google has launched a new initiative to encourage vulnerability researchers to report any security holes they find in the Google Chrome browser. Anyone who find a bug in Chrome or Chromium, the open source code used as the foundations of Read more…
Facebook unnamed app: Hackers poison search results
Thanks to Clu-blog reader Jamie for contacting me regarding a scare that is currently spreading bewteen Facebook users. Users of the social-networking site are warning each other of what is rumoured to be a rogue application, spying on their activities Read more…
Second man admits involvement in Scientology DDoS attack
A second man has admitted his role in a distributed denial-of-service attack (DDoS) against websites belonging to the highly controversial Scientology organisation that struck the sites in January 2008. According to media reports, 20-year-old Brian Thomas Mettenbrink of Nebraska has Read more…
TechCrunch hacked again, as intruders turn potty-mouthed
Top technology blog TechCrunch has been hacked for the second time in 24 hours, with visitors being greeted by an offensive message directed at site founder Michael Arrington. Part of the message posted by the hacker reads: So Arrington, how Read more…

