17 February 2010 http://www.h-online.com/security/news/item/Top-25-Programming-Errors-list-updated-933535.html Just as they did last year, over thirty international security organisations have come together, to publish a list of the 25 most dangerous programming errors leading to vulnerabilities that can be exploited for cybercrime and espionage. The 2010 CWE/SANS Top 25 MDPE (Most Dangerous Programming Errors) has been updated with a number …
Category Archive: hacking
Feb
18
BOT-WAR : New Russian botnet tries to kill rival
‘Kill Zeus’ removes rival software from PCs, giving Spy Eye access to usernames, passwords By Robert McMillan IDG News Service February 9, 2010 http://www.computerworld.com/s/article/9154618/New_Russian_botnet_tries_to_kill_rival IDG News Service – An upstart Trojan horse program has decided to take on its much-larger rival by stealing data and then removing the malicious program from infected computers. Security researchers …
Feb
17
De-cloaking in Internet Explorer
I ran across a pretty interesting article on RSnake’s blog about using a URL to get users to disclose personal information. Here is the original article: http://ha.ckers.org/blog/20090810/de-cloaking-in-ie70-via-windows-variables/ I tested this in IE8 and the posting claims it works in IE6 and IE7 as well. I tested in Firefox with and without NoScripts enabled and it …