We are monitoring a spam campaign that is using the names of delivery services like FedEx and DHL to send the receiver to a website that installs malware. With subjects like “Not possible to make delivery” or “Shipping service”, the emails make heavy use of social engineering by creating a sense of emergency in order […]
Source Article. Zscaler finds a ‘big number’ of Google Play apps with overly aggressive adware Google did not respond to a request for comment, but Sorin Mustaca, data security expert for AV vendor Avira, said Google has been working with AV companies since buying VirusTotal. The collaboration has focused on detecting suspicious apps on Google Play as […]
Finally, after two years from the first release of the feature and hoping that the users will switch to https, Facebook enforces now https to all users by default. This feature means that your browser is told to communicate with Facebook using a secure connection, as indicated by the “https” rather than “http” in https://www.facebook.com. This uses Transport […]
I wrote many times about Java, their vulnerabilities, how to disable it… Just search in this blog for the term Java. I’ve been asked many times why do I think that we are seeing these zero day vulnerabilities. The problem The problem of Oracle is that they bought a technology that was […]
After publishing the article in Security Insider under the shield of (ISC)2, I was surprized to see in the monthly newsletter a reference to the article. Source: Security Insider (HTML, PDF) Originally published in English: (ISC)2 Blog Republished in this blog: http://sorin-mustaca.com/2013/05/29/security-for-free/ “News and Events in your region” Zahlt kostenlose Sicherheit […]
Cybercriminals increasingly are attacking enterprises at their weakest point: the end user device. New forms of malware and social engineering attacks threaten your users every day, and even more so as they expand their use of Web-based applications. 1. Drive-by downloads. Users are visiting known websites that have a good reputation and don’t even think that it […]
Did you just buy a computer and wonder how can you make it secure? Here are some steps which you can follow to make this computer really yours. Really yours means that you can start using it and storing personal information on it without having to be afraid of someone snooping in it. 1. (Re)Install […]
The growth of the smart devices (smartphones, iPhones, tablets, intelligent TVs and so on) brought not only joy to the owners. The average consumer of these devices is not security aware. He will try any software and will take any offer, even those which sound too good to be true. 1. The biggest threat for […]
Microsoft and Adobe released this week plenty of patches for their software. Microsoft released as planned the MS13-052 to 058 bulletins which resolve six critical vulnerabilities in Microsoft software. The most severe vulnerability could allow remote code execution if a user views shared content that embeds TrueType font files. An attacker who successfully exploited this vulnerability could […]
The malware landscape is evolving on a very rapid pace and these days, the technologies released 2 or 3 years ago are becoming slowly obsolete. That’s why providing security only through engine and signature updates is no longer considered enough. In order to ensure that our customers are using the best protection available, we released […]
You must be logged in to post a comment.