Sponsored White Papers, Webcasts, and Downloads
- ZDNet Author Biography
Ryan Naraine is a journalist and social media enthusiast specializing in Internet and computer security issues. He is currently security evangelist at Kaspersky Lab, an anti-malware company with operations around the globe. He is taking a leadership role in developing the company's online community initiative around secure content management...- more about Ryan Naraine »
ZDNet Resources
- Microsoft is 5th most spam-friendly ISP
- Spammers are abusing Microsoft's online services at such an alarming rate that a non-profit spam fighting group now lists Microsoft as the world's 5th most spam-friendly ISP Internet Service Provider. The latest update of Spamhaus.org's list of the world's worst spam networks shows Microsoft at #5 because...
- Tags: Ryan Naraine
- Blog posts 2008-11-21
- Verizon snoops peek at Obama's cell phone records
- Nosy Verizon employees improperly accessed and peeked at Barack Obama's personal cell phone records, the company said in a statement acknowledging the privacy breach. In the statement, Verizon Wireless chief executive Lowell McAdam apologized to the President-elect and vowed that the errant employees will be disciplined. The...
- Tags: Employee, Phone, Verizon Communications Inc., Cell Phone, E-mail, Cellular Phones, Security, Online Communications, Consumer Electronics, Personal Technology, Ryan Naraine
- Blog posts 2008-11-21
- iPhone update kills 12 security bugs
- Apple has released iPhone OS 2.2 with patches for 12 documented security flaws, some very serious. The vulnerabilities covered by the patch which also affect iPod Touch could allow remote code execution, information theft, software crashes and weakened encryption settings. The skinny on this...
- Tags: Apple iPhone, Security, Issue, SMS, Arbitrary Code Execution, Security Bug, Application Termination, Text Messaging/SMS/MMS, Telephony, Cellular Phones, Consumer Electronics, Personal Technology, Online Communications, Networking, Ryan Naraine
- Blog posts 2008-11-21
- Under worm attack, US Army bans USB drives
- Under sustained attack from what is described as a rapidly spreading network worm, the U.S. army has banned the use of USB sticks, CDs, flash media cards, and all other removable data storage devices, according to internal e-mail messages seen by Wired's Noah Shachtman. According to the...
- Tags: Malware, USB Flash Drive, Worm Attack, USB, Cyberthreats, Spyware, Adware & Malware, E-mail, Viruses And Worms, Security, Online Communications, Ryan Naraine
- Blog posts 2008-11-20
- Malware found in Lenovo software package
- Computer maker Lenovo is shipping a malware-infected software package to Windows XP users, according to warning from anti-virus researchers at Microsoft. The malicious file was identified by Microsoft as Win32/Meredrop, a Trojan dropper that is used to install and execute multiple malicious executables on an infected computer....
- Tags: Lenovo Group Ltd., Malware, Microsoft Windows, Spyware, Adware & Malware, Cyberthreats, Microsoft Windows XP, Tools & Techniques, Viruses And Worms, Security, Operating Systems, Software, Management, Ryan Naraine
- Blog posts 2008-11-19
- Microsoft kills OneCare, replaces it with freebie 'Morro'
- Microsoft today announced plans to kill its Windows Live OneCare PC care and security suite and replace it with a free anti-malware utility. The new product, code-named "Morro," will be designed for a smaller footprint that will use fewer computing resources, making it ideal for low-bandwidth scenarios...
- Tags: PC, Microsoft Windows Live, Malware, Microsoft Corp., Microsoft Windows Live OneCare, Microsoft Windows, Spyware, Adware & Malware, Cyberthreats, Viruses And Worms, Security, Operating Systems, Software, Ryan Naraine
- Blog posts 2008-11-18
- Adobe AIR hits 'critical' security turbulence
- Buried in today's flurry of feel-good Adobe news is this less flattering nugget: Adobe AIR is vulnerable to several critical vulnerabilities that could expose users to code execution attacks. The company released AIR 1.5 with fixes for previously discussed flaws in Flash Player (which is embedded into...
- Tags: Adobe Systems Inc., Adobe AIR, Macromedia Flash Player, Scripting Languages, Security, Software/Web Development, Web Development, Ryan Naraine
- Blog posts 2008-11-17
- Apple turns to Google for Safari anti-phishing
- Apple has quietly teamed up with Google to add anti-phishing features into the latest version of the Safari browser. The feature, turned on by default in Safari 3.2, displays a warning page see screenshots below when Safari users surf to a fraudulent Web site. It is powered...
- Tags: Google Inc., Apple Safari, Apple Inc., Phishing, Cyberthreats, Spam, Viruses And Worms, Security, Spam And Phishing, Ryan Naraine
- Blog posts 2008-11-17
- VoIP vulnerabilities in Microsoft Communicator
- Researchers at VoIPshield Labs have pinpointed a wide range of denial-of-service vulnerabilities in Microsoft Communicator, the unified communications that features business-grade instant messaging , voice, and video tools. The flaws, rated "high severity," could cripple VoIP-powered communications on Office Communications Server 2007, Office Communicator and Windows Live Messenger....
- Tags: Denial Of Service, VoIP, Vulnerability, Microsoft Corp., Security, Ryan Naraine
- Blog posts 2008-11-17
- Sun plugs holes in StarOffice
- Two weeks after the OpenOffice.org team shipped patches for code execution flaws in office suite, Sun Micrososystems has followed up with a high-priority update for StarOffice, which is based on the open-source code. Sun's patch, available for Windows, Linux and Solaris, address highly-critical vulnerabilities that could expose...
- Tags: Sun Microsystems Inc., OpenOffice.org, Arbitrary Code Execution, StarOffice, OpenOffice, Patches, Open Source, Office Suites, Software, Ryan Naraine
- Blog posts 2008-11-14
- Apple fixes 12 Safari security flaws
- Apple has release Safari 3.2 to fix at least a dozen security flaws, some very serious. The update, available for Windows XP, Windows Vista and Mac OS X Tiger and Leopard, address vulnerabilities that could be exploited to take full control of a compromised machine. ...
- Tags: Apple Safari, Apple Inc., Arbitrary Code Execution, Buffer-overflow, TIFF, Application Termination, Security, Viruses And Worms, Ryan Naraine
- Blog posts 2008-11-13
- Google Chrome vulnerable to data theft flaw
- Google has seeded a new version of its Chrome browser to developers with fixes for a pair of security issues that could expose users to data theft. The issue, rated as a "moderate" risk could allow hackers to use HTML files to steal arbitrary files from a...
- Tags: Google Inc., HTML, Flaw, Google Chrome, File, Security, Ryan Naraine
- Blog posts 2008-11-13
- Firefox security makeover: 11 vulnerabilities, 4 critical
- Mozilla has released a new version of its flagship Firefox browser to fix a total of 11 vulnerabilities that expose users to code execution, information stealing or denial-of-service attacks. Four of the 11 flaws covered with the new Firefox 3.0.4 are rated "critical" because of the risk...
- Tags: Mozilla Firefox, Vulnerability, JavaScript, Web Browser, Mozilla Corp., Web Browsers, Security, Internet, Ryan Naraine
- Blog posts 2008-11-12
- Why did Microsoft wait 7 years to fix SMBRelay attack flaw?
- One of the code execution vulnerabilities fixed in this month's Microsoft Patch Tuesday release dates back to 2001 when it was first disclosed by Cult of the Dead Cow hacker Sir Dystic pictured left. If that wasn't cause for worry, get this: An exploit for the bug...
- Tags: Flaw, Issue, Microsoft Corp., Security Administration, Patches, Security, Ryan Naraine
- Blog posts 2008-11-12
- MS Patch Tuesday: Critical Windows, Office flaws fixed
- Microsoft's scheduled batch of patches for November crossed the wires today with fixes for at least four documented vulnerabilities affecting millions of Windows and Office users. As previously reported, the company released two security bulletins -- one rated critical, one rated important -- with fixes for flaws...
- Tags: Web, Attacker, Microsoft Office, Flaw, Vulnerability, Microsoft Windows, Microsoft Corp., Security, Ryan Naraine
- Blog posts 2008-11-11
- Apple ships patch for iLife security flaws
- Apple has shipped a major iLife security update to fix three documented vulnerabilities that could expose Mac OS X users to arbitrary code execution attacks. The flaws patched with the new iLife Support 8.3.1 could be exploited via specially crafted TIFF or JPEG images, Apple warned in...
- Tags: Security, Apple Macintosh, Apple iLife, Apple Inc., Arbitrary Code Execution, Image, TIFF, Application Termination, Apple Mac OS, Operating Systems, Software, Ryan Naraine
- Blog posts 2008-11-10
- 'Memoryze' utility pinpoints malware code in live memory
- Jamie Butler, a Windows internals expert who co-wrote the definitive book on rootkits, has created a free forensics tool capable of finding malicious code in live memory. The utility, called Mandiant Memoryze, was released at this year's Hack in the Box conference in Kuala Lumpur, Malaysia. ...
- Tags: Memory, Malware, Tool, Mandiant Memoryze, Rootkits, Flash Memory, Microsoft Windows, Security, Spyware, Adware & Malware, Operating Systems, Software, Ryan Naraine
- Blog posts 2008-11-10
- CNET Download.com not so 'spyware-free'
- On its home page, CNET's Download.com promises that all software available on the site "has been tested to ensure it's 100% free of spyware, viruses, and other malware." Unfortunately, there appears to be a kink in the system that allows the display of a known adware program called...
- Tags: Adware, Kaspersky Lab, Malware, CNET Download.com, Spyware, Adware & Malware, Spyware, Cyberthreats, Viruses And Worms, Security, Ryan Naraine
- Blog posts 2008-11-10
- Rigged PDFs exploiting just-patched Adobe Reader flaw
- Just three days after Adobe shipped a patch with fixes for a critical Adobe Reader vulnerability, hackers are using booby-trapped PDF files to fire exploits against Windows users. [ SEE: Heads up: Patch your Adobe Reader now ] The in-the-wild attacks, first spotted by...
- Tags: Adobe Systems Inc., Adobe PDF, Flaw, Adobe Acrobat Reader, Microsoft Windows, Security, Operating Systems, Software, Ryan Naraine
- Blog posts 2008-11-07
- 'Highly critical' vulnerabilities in VLC media player
- A pair of "highly critical" vulnerabilities in the cross-platform VLC Media Player could put millions of users at risk of remote code execution attacks, according to a warning from security researchers. The issues, reported in versions 0.5.0 through 0.9.5, could let hackers take complete control of compromised...
- Tags: Vulnerability, Buffer-overflow, Media Player, Media Players, Security, Digital Music, Digital Media, Viruses And Worms, Consumer Electronics, Personal Technology, Ryan Naraine
- Blog posts 2008-11-07
White Papers and Webcasts
"Intel® Xeon® processor-based servers are optimized for virtualization and allow IT to load more virtual machines without sacrificing speed. They can also help you save time and money while delivering great performance, flexibility, and headroom for growth.
