Microsoft to Release Emergency Patch for Critical IE Flaw

According to Brian Krebs’ Security Fix blog, Microsoft is releasing an out of band patch to fix the critical flaw in all versions of Internet Explorer that we discussed on [GAS] last week.  This is great news.  While the number of home computers compromised by this attack is only about 1 in 500, security companies […]



IE7 0-Day Exploit Compromising Thousands of Hosts

By PatB Contributing Writer, [GAS] Hackers love to play cat and mouse with security firms.  A case in point is the current Internet Explorer 7 unpatched vulnerability being exploited worldwide.  On Tuesday, hackers waited until Microsoft released their monthly patches before revealing an undisclosed vulnerability in the web browser software, giving villains the maximum amount […]

Network Analysis: The Future is Now, and it’s FREE

Anyone in the cyber field that has been involved in a network investigation to determine the source and scope of a compromise knows that the process is time intensive.  Traditionally, such investigations require logfiles from various sources:  routers, firewalls, intrusion detection systems, and maybe packet captures from a sniffer if you have one.  Reconstructing the […]



66% of used hard drives still hold sensitive data

By Mark O’Neill Contributing Writer, [GAS] Security researchers have found in tests that if you buy a second-hand hard drive on eBay, you will probably end up getting a lot more than just the hard drive. In their tests, the researchers found that 66% of the second hand hard drives still contained sensitive data which […]

Google Adwords Phishing Scams

By PatB Contributing Writer, [GAS] I got a very interesting piece of spam in my inbox this morning, and it took me a few moments to realize it was a phishing attack designed to make me disclose my Google Adwords password. Here is a screenshot of it. Hovering over the link, you can see that […]

Researchers sniff computer passwords from 65 feet away

By Mark O’Neill Contributing Writer, [GAS] Swiss researchers have discovered 4 ways to find out the passwords of computer users remotely through their wired keyboards.  They claim that at least 11 models of keyboard are vulnerable to at least one of the 4 attacks that they carried out. They also claim that online banking and […]

RealDVD and a Brief History of Infringement

by Casey Lynn Contributing Writer, [GAS] The more I read about the RealDVD lawsuit (which I blogged last week), the more I feel like I’m listening to a broken record. Haven’t we heard this all before? Most recently, Wired pointed out how RealDVD is like a bong shop. After all, RealDVD clearly has a notice […]

Skype May No Longer Be Secure

By PatB Contributing Writer, [GAS] MSN, Yahoo IM and AIM all use clear text in the chat discussions, which means anyone along the path of communication can read what it is you are typing,  including your boss if you use chat at work.  Many people, including myself, use Skype as an IM chat client because […]