2006.09.04 Daily Security Reading

by Rodney Campbell on Sep.04, 2006, under Security

Growing Phishing Threats And Critical Vulnerabilities

MessageLabs has announced the results of its MessageLabs Intelligence Report for August 2006. In this month’s findings, MessageLabs observed the continuing trend for online criminals to develop sophisticated new phishing attacks and trojans that exploit widespread vulnerabilities, such as the publicised MS06-040 and prey on the popularity of instant messaging software, social networks and ecommerce sites.

Top Ten viruses most frequently detected in August

August has witnessed the same trend observed over the last few months with regard to computer threats. The current apparent calm in malware activity is simply due to a new strategy from malware creators, who are now trying to avoid massive epidemics that draw the attention of users and the media, while simultaneously launching a large amount of new malicious code.

INFOSEC Year In Review (IYIR)

Professor Mich Kabay collects, absracts and classifies news reports into annual databases and provides them online for research purposes. Here is an Aggregate Report of 1997~2006 as a 14MB PDF of the entire (2000+ page) database. These may prove tremendously useful for those seeking anecdotal reference material. Here is the entire IYIR Access Database for the Years 1997~2006.

Privacy Web Browser 'Browzar' Branded Adware

I reported on this browser late last week – however Browzar has been branded "adware" by many because it directs web searches to online adverts. Some technical experts also say Browzar, which claims to leave no trail of webpages visited, does not work. Browzar's developers say they are examining the feedback but strongly deny that it is adware.

Q&A: ISS founder on IBM and beyond

Internet Security Systems (ISS) last week entered an agreement to be acquired by IBM for $1.3 billion in cash, a deal expected to close by the end of the year. Network World Senior Editor Ellen Messmer recently talked with Chris Klaus, founder and chief security advisor at ISS, about what he plans to do next – and it could involve an online virtual world he hopes you’ll visit, too.

Spam Numbers Rise, Although Porn Is Down

A survey shows that while emails pushing porn are down, 70 percent of all email received is spam, compared to 62 percent the previous quarter. Phishing is also on the rise.

Anti-Virus Testing and Consumer Reports

Consumer Reports recently came under heavy fire from some in the anti-virus industry for creating some 5,500 new virus variants.

Penetration Testing – A Systematic Approach

The question most commonly asked by any organization is “Why would I ever need a penetration test?” after all it costs a lot of money in hiring an external consulting firm or to invest in expensive tools to perform a penetration test. You must realize that it is very important for any organization to justify the cost involved for such an activity.