exploits news from FierceCIO
News
Released: Exploit code to bypass DEP security in Windows
Google security software engineer Berend-Jan Wever has published proof-of-concept code on how to bypass Microsoft's data execution prevention technology, or DEP. First introduced in Windows XP... Read more...
Adobe to push out new Acrobat security patches today
Hackers are using malicious PDF documents to break into Windows PCs, says Adobe. The company made the admission even as it promised to patch a newly uncovered security flaw in its popular PDF reader... Read more...
Serious flaw discovered in Microsoft IIS
Code was posted at the well-known Milw0rm website on Monday that will cause Microsoft's Internet Information Services (IIS) server to be remotely exploited. Fortunately, the vulnerability appears to... Read more...
Researchers offer tool to break into Oracle database systems
Security experts Chris Gates and Mario Ceballos plan to release tools for breaking into Oracle Database systems during their presentation on "Oracle Pentesting Methodology" at the Black Hat and... Read more...
Microsoft addresses many bugs in this month's Patch Tuesday
Earlier this week, Microsoft released eight security updates--patching a staggering 23 vulnerabilities spread across Windows, Internet Explorer and some other Microsoft software, including portions... Read more...
New botnet targets home routers and modems
A new piece of malware is making its rounds, this time targeting consumer routers and DSL modems. First discovered by the folks behind the DroneBL DNS Blacklist services, Psybot ignores PCs and... Read more...
Hackers hit over 200,000 sites
More than 200,000 websites have been invaded by criminal gangs that have acquired administrative log-in credentials and have used the compromised domains to attack unsuspecting users' PCs. Ian Amit,... Read more...
Who's responsible for spam and malware?
Traditionally, the debate over Internet security has involved the battle between the industry that seeks to protect companies and individuals from intruders, and the companies that make their profit... Read more...
Researcher to demonstrate chip-specific attack code
Security
research Kris Kaspersky plans to demonstrate how processor bugs can be
leveraged to remotely attack a computer with nothing more than JavaScript or
TCP/IP packets. The scary thing here... Read more...
Phishers get nabbed
Thirty-eight people in the U.S. and Romania have been charged in two federal indictments, alleging they used a complicated Internet phishing scheme to steal thousands of credit and debit card... Read more...






