Christmas IE Zero-Day Thwarted. Ho ho ho.

By Andrew Brandt Yesterday, two different 0 day exploits against Internet Explorer were published, just in time for the holidays when most of you (and many security researchers as well) are taking time off from work. The exploit, named CVE-2010-3971, is fairly serious, affecting the latest builds of IE versions 6 through 8. Well, I’d [...]

Zero-Day Malware Drops Payloads Signed with a Forged Microsoft Certificate

By Andrew Brandt Security Websites are buzzing with news that a new zero-day exploit against Adobe Reader and Acrobat is circulating today, causing computers to become infected with malware simply by visiting certain Web pages. While the exploit itself is worthy of note, nobody is talking about the payload it downloads: It installs a trio [...]

Follow

Get every new post delivered to your Inbox.

Join 545 other followers