Skip to Content

AOL Tech

vulnerability posts

Computers, Web

New Cyber Threat Study Delivers Surprising Results


The SANS Institute, an IT security education and research group, has released a study of computer and network vulnerabilities that can only be described as massive. Involving some 15,000 organizations, the study is one of the first to offer hard data about the the number and severity of digital threats across the entire computing landscape.

According to the data collected by SANS, the biggest threats out there right now don't stem from exploited operating systems, but rather the vulnerabilities of applications and the server-based software that powers the Internet. For all of its faults, Windows isn't the problem. By the same token, Apple isn't the solution. Most attacks on today's computers focus on vulnerabilities in Web browsers, Flash, Acrobat Reader, Microsoft Office. Alternatively, they go right to the source and weasel their way onto legitimate sites.

Read more →

Computers, Windows Software, Mac Software, Downloads, Web

Yet Another Security Flaw Hits Firefox 3.5 Web Browser

More Firefox Flaws Lead Some to Question its SecurityHere at Switched, we're big fans of Firefox, the once alternative Web browser from Mozilla that, within a few years, has become hugely popular, with nearly one in four Web surfers using it today. We quickly downloaded the 3.5 release when it was made available a few weeks ago -- alas, a raft of security warnings are making us wonder whether that was necessarily the best idea.

Not long after the eagerly-anticipated 3.5 release, a major security vulnerability was found -- a flaw that could have allowed shady Internet sites to infiltrate your computer and, possibly, install spyware. That flaw was patched last week, but now, just a few days later, another security hole has been found. It's called the "Unicode Data Remote Stack Buffer Overflow Vulnerability," and, as of now there's no fix from Mozilla.

Should you be worried? Probably not, as it's unlikely that more than a handful of sites are using this exploit, and they're surely relegated to the darkest corners of the Web. This is really just more of a black eye for the browser, which was pledged as a more secure alternative to Microsoft's Internet Explorer. Still, you should always be careful and be wary before you go to random sites you've never heard of -- and, when Firefox prompts you about an important security update in a day or two, you'd best install it. [From: SecurityFocus, via DownloadSquad]

Computers, Web

Serious Internet Explorer Flaw Leaves Windows Users Vulnerable

Serious Internet Explorer Flaw Leaves Windows Users Vulnerable
You know things are bad when Microsoft is trying to draw attention to its latest security flaw. A new vulnerability is affecting Internet Explorer users who are running Windows XP or Windows Server 2003 (do the latter even exist anymore?), allowing hackers to take control of victims' PCs remotely.

The risk of infection and hijacking is very serious since a user simply has to visit a Web site to fall prey to it. Criminals have been exploiting the security hole for about a week, primarily through links included in spam. Microsoft is working on the problem, but since the flaw was just recently discovered it may be a little while before it figures out how to plug the hole without breaking other features. Of course, we know from experience that Microsoft likes to take its sweet time with these things.

The flaw lies in how Internet Explorer and its notorious ActiveX controls handle video playback. Microsoft is encouraging users to disable the vulnerable ActiveX controls -- even in versions of Windows not known to be affected by the security problem -- until it can release an emergency patch later this month.

Read more →

Computers

PowerPoint Users Vulnerable to Trojan Attacks

PowerPoint is Latest MS Software with Vulnerability Once merely the bane of presentation attendees, Microsoft's PowerPoint presentation tool is now the bane of security experts everywhere, and the latest in a long line of Microsoft vulnerabilities. Microsoft has issued a warning, telling people to be careful when opening PowerPoint presentation files. This latest security hole allows hackers to run malicious code remotely if a user opens one of the affected presentation files (files usually ending in .ppt).

Although Microsoft hasn't yet released a patch for this flaw, there are some things you can do to avoid trouble. First, be wary of e-mails with .ppt attachments from people that you don't know; it's always a good idea to be careful with any file coming from an unknown source. Similarly, be cautious around messages that look like they've been forwarded, even if it's from a friend or family member.

Read more →

Computers

Adobe's Reader and Acrobat Under Virus Threat, Fix a Month Away

Adobe Warns of Flaws in PDF Reader, Fix a Month AwayJust about every week we have some new browser vulnerability to report, with some new flaw appearing in IE or Firefox that could let a hacker access your precious infos. Today, it's another flaw that's been discovered, but not in one particular browser. Instead, it's in something that's rather more commonly used: Adobe's Reader and Acrobat. According to Adobe's indications, the software programs -- designed for viewing and creating PDF files -- have a serious security flaw that is currently being exploited by hackers!

The software suffers from what's called a buffer overflow attack, which could allow malicious PDF files to commandeer your computer and install bad software that could monitor your on- and offline doings. Adobe not only indicated that this is a possibility, but that hackers are currently exploiting this risk. As a result, Adobe has asked anti-virus companies to update their software to look for these files, as the company itself won't be able to provide an update until March 11. Yikes! So, until then, you may want to be especially selective when it comes to viewing PDFs. [From: Download Squad]

Related Links:

Computers

'Clickjacking' Threat Hits Firefox and Chrome

Firefox, Chrome Found Susceptible to ClickjackingAnother day, another security risk, and while it pains us to bring you all this dire news so frequently, we figure someone has to keep you in the loop. Today's warning has to do with a new type of subversive Internet attack called clickjacking, in which you're tricked into clicking on links or buttons you can't see, possibly granting others access to your personal information. Two of the web's most popular browsers, Firefox and Chrome, have been found to be vulnerable.

Clickjacking is tricking a Web user into clicking on something they didn't want to, possibly on something they can't even see. It's possible to create a hidden overlay over a Web page and, within that hidden page, load up something like the login screen to MySpace. To the user the Web page might appear to be showing a game or the like that requires you to click on various objects, but in reality the user might be clicking on options in MySpace to make his or her information public or, disconcertingly, to change their password. Firefox and Chrome currently have no mechanism for preventing this kind of attack, but, surprisingly, Internet Explorer, a browser many consider to be less secure than the competition, is not susceptible to the attack.

Google has pledged to release a fix in short order, and we presume Firefox will be patched quickly as well. But, the best news is that nobody is actually aware of this sort of exploit being used in the wilds of the Internets so, for now at least, we wouldn't lose any sleep over this one. [From: CNET News]

Related Links:

Switched Video

Follow Switched on Twitter

Deals of the Day

Latest Reviews from CNET.com

CNET provides the latest tech news, unbiased reviews, videos, podcasts, software, and downloads, making tech products easy to find, understand and use.

Top Product Reviews

  • Home Audio Reviews

    9.0 out of 10

    Definitive Technology BPX
    Works great with Dolby Pro Logic and Dolby Digital. Full Review

    9.0 out of 10

    Denon AVR-4306 (black)
    Incredibly well-featured 7.1-channel receiver; excellent sound quality; three HDMI inputs; converts analog video to HDMI output; upconverts analog video to 720p/1080i HD resolution; iPod and USB MP3 player connectivity; Internet radio and MP3/WMA streaming audio via built-in Ethernet port; XM Satellite Radio compatible; touch-screen remote; multizone, multisource operation; browser-based control via home network; accurate autocalibration routine. Full Review

    8.8 out of 10

    KEF KHT3005 (black)
    The KEF KHT-3005 is one compact, beautifully designed speaker package with solid aluminum satellites that feature unique driver technology to produce incredible clarity. Meanwhile, the equally astounding dual 10-inch, 250-watt powered subwoofer delivers ultradeep bass. Full Review

  • Cell Phone Reviews

    8.7 out of 10

    SignalBoost Mobile Professional Amplifier Kit
    The Mobile Professional Amplifier delivers a powerful signal boost to your cell phone. Also, it offers a compact design and easy setup. Full Review

    8.6 out of 10

    Wi-Ex zBoost YX510-PCS-CEL cell phone signal extender
    The Wi-Ex zBoost YX510-PCS-CEL significantly boosts your cell phone reception and is easy to operate. Also, it uses a wireless connection to your phone. Full Review

    8.3 out of 10

    LG VX6000 (Verizon Wireless)
    Compact and stylish; impressive battery life; solid audio quality; sharp color screen; built-in camera; USB ready; affordable. Full Review

  • Digital Camera Reviews

    9.3 out of 10

    Canon EOS 1D Mark III
    Extremely fast, 10-megapixel continuous shooting; very low noise; highly customizable; well-designed body with weather sealing; 3-inch LCD; abundant optional accessories. Full Review

    9.3 out of 10

    Nikon D3 (body only)
    Full-frame sensor; well designed, pro-level weather-sealed body; very low noise, even at extremely high ISOs; fast. Full Review

    9.0 out of 10

    Canon EOS-1Ds Mark III
    Very low noise, high quality images; 21.1 megapixels; live view shooting; pro-level build-quality and performance. Full Review

  • Desktop Reviews

    8.9 out of 10

    Velocity Micro Edge Z30 (Intel Core i7)
    Best value among midrange gaming PCs; Velocity Micro's consistently high build quality; compact case makes few sacrifices; second graphics card slot previously uncommon at this price. Full Review

    8.5 out of 10

    Apple iMac (24-inch, 2.8GHz)
    A minor specification update results in some significant performance gains; graphics upgrade an option on this 24-inch model; sleek, polished design didn't receive an update, but we won't start clamoring for a new design until the current one is at least 12 months old. Full Review

Featured Galleries

Nissan Land Glider
Vintage Keyboards
Retro Computer Logos
Vintage Computer Festival
Motorola CLIQ
iPod touch
iTunes 9
Video iPod Nano
The Beatles: Rock Band

 

Switched Desktop

Get the New Switched Desktop

Latest tech news, Switched mail, and more.

AOL Tech Network

Resources

Autoblog

Daily Finance

Download Squad

Engadget

Joystiq

Urlesque

Fanhouse Main

WalletPop

Gadling