Security

A zero-day or "0day" attack is a computer threat that tries to exploit computer application vulnerabilities for which no security fix is yet available. Zero-day exploits are used by attackers before the software vendor knows about the vulnerability. ... The term derives from the age of the exploit. When a vendor becomes aware of a security hole, there is a race to close it before attackers discover it or the vulnerability becomes public. A "zero day" attack occurs on or before the first or "zeroth" day of vendor awareness, meaning the vendor has not had any opportunity to disseminate a security ... (view more)

New spyware disguising itself as a Flash plug-in for the Mozilla Firefox web browser is infiltrating computers in an attempt to monitor the search patterns of victims worldwide. The nameless spyware is being called "sneaky" because it also appears ... as legitimate. According to Sophos, everything about the new spyware is designed to dupe users. It even shows up in the list of Firefox extensions after download completion under the faux name "Adobe Flash Player 0.2". (Source: pcworld.com ) New Spyware: Anything but Legitimate However, what's installed is anything but legitimate. The spyware is ... (view more)

In an effort to expedite stolen personal identities and financial records of unsuspecting users, online deviants are using an Instant Messaging component of their attack software, coupled malware. According to RSA Security, the Zeus Trojan informs ... hackers when their desired information has been poached. With Zeus, hackers can act faster in completing their time-sensitive illegal acts, which could lead to even more victims being targeted. Internet security firms are very familiar with the Zeus Trojan, blaming it for an endless trail of online bank account heists. Most believe Zeus is the ... (view more)

Radisson hotels, operators of about 400 franchised locations in 65 countries, recently reported significant data breaches exposing sensitive customer data. An open letter to guests from Radisson chief operating officer Fredrik Korallus reveals that ... Radisson's computer system was victimized by hackers between November 2008 and May 2009. Stolen customer information includes credit and debit card numbers. (Source: zdnet.com ) Limited Number of Hotels Involved According to the letter, a limited number of hotels in the U.S. and Canada were involved in the incident. Other information accessed may ... (view more)

NOTE: Be sure to grab the our supplemental reports 'Top 8 Freeware Antivirus Reviewed' and 'Top 10 PC Security Essentials' at the end of this article to learn how to better protect your PC online -- or click here to go to our Top 10 Reports now! If ... you're a fan of Jessica Biel, you may want to take care when searching for her name online. She's the celebrity whose name is most likely to produce spyware infected search results. The news was revealed by security firm McAfee, which has carried out a survey of the most dangerous search terms based on individuals for the past three years. Paris ... (view more)

Two days ago we reported the case of Albert Gonzalez, a recently-apprehended hacker who went on a record-breaking credit card heist that cracked as many as 130 million accounts. Now, we're learning more about the man being the scheme, a veritable ... hacking prodigy raised on the craft from an early age. Albert Gonzalez was indicted in New Jersey earlier this week for what most consider to be the biggest credit card hack since the turn of the 21st century. Known around the Internet as the "soupnazi," a take on the curmudgeonly but very popular Seinfeld character, Gonzalez has been hacking for a ... (view more)

The gang accused of one of the biggest online security heists ever have been indicted over the incident. The alleged ringleader, a government informant gone bad, has also been charged with other high-profile breaches. Albert Gonzalez was formally ... charged with breaking into the networks of payment processing firm Heartland Payment Systems, regional supermarket Hannaford Brothers, and three national retailers including 7-Eleven. His alleged loot from these attacks was 130 million credit and debit card numbers. Two other accomplices are listed in the indictment but not named, referred to only as ... (view more)

Another Microsoft Patch Tuesday has come to pass, and with it a fairly long list of fixes. A total of nine patches have been made available for five issues marked "critical". An incredible 19 problems have been addressed by the entire day's release. ... The nine patches address holes in Windows, MS Office software, ISA Server, Microsoft Visual Studio, the .Net Framework, BizTalk Server, and also Remote Desktop Client for Mac. MS Office Flaw Very Serious It's possible none of the fixes are more important than one Microsoft made public last month. Affecting Microsoft Office, the issue specifically ... (view more)

Two researchers have revealed tools that reportedly allow people to eavesdrop on video conference calls and intercept surveillance camera video. The only requirement for using the free tool is that you be in the same building as the caller or call ... receiver. UCSniff for Voice over IP (VOIP) Networks UCSniff is a free tool that available for Linux and Windows. According to Jason Ostrom, director of the Viper Lab at Sipera Systems, the tool offers a graphical user interface (GUI) that makes 'sniffing' video easy. It works by tricking the voice-over-IP (VOIP) network carrying the video into ... (view more)

The security technology used to protect information stored on the UK's prospective national ID card was reportedly hacked and the data cloned by a computer expert in just 12 minutes. The Daily Mail newspaper hired computer expert Adam Laurie to test ... the security that allegedly protects the information on the chip that is embedded in the card being issued to foreign nationals. Laurie was able to copy the data on the card in minutes with a Nokia mobile phone and a laptop computer. Data on Chip Easily Manipulated With the help of another technology expert, Laurie was able to create a cloned card ... (view more)