Malware and Vulnerabilities Topic Center

Get the latest news, advice and in-depth analysis on malware, including information on viruses, worms, Trojans and zero-day vulnerabilities

Researchers uncover 'SafeNet,' a new global cyberespionage operation

Security researchers from Trend Micro have uncovered an active cyberespionage operation that so far has compromised computers belonging to government ministries, technology companies, media outlets, academic research institutions and nongovernmental organizations from over 100 countries.
Read more...

New Mac spyware found on Angolan activist's computer

Previously unknown Mac OS X spyware, signed with a valid Apple Developer ID, has turned up on the laptop of an activist from Angola at a human rights conference in Norway.

In a sea of malware, viruses make a small comeback

The computer virus seems to be making a subtle comeback.

Pushdo botnet is evolving, becomes more resilient to takedown attempts

Security researchers from Damballa have found a new variant of the Pushdo malware that's better at hiding its malicious network traffic and is more resilient to coordinated takedown efforts.

Oracle renumbers Java patch updates, confuses users even more

Oracle has changed the numbering of its Java security updates, prompting one expert to say, "As if Java updates weren't confusing already."

Researchers uncover large cyberfraud operation targeting Australian bank customers

Security researchers from Russian cybercrime investigations firm Group-IB have uncovered a cyberfraud operation that uses specialized financial malware to target the customers of several major Australian banks.

Microsoft rushes Internet Explorer 8 patch release

Just 11 days after issuing an advisory, Microsoft has released a patch for a bug in Internet Explorer 8 that bedeviled the U.S. Department of Labor earlier this month.

Adobe releases critical security updates for Reader, Flash Player and ColdFusion

Adobe has released scheduled security updates for its Reader, Acrobat, Flash Player and ColdFusion products on Tuesday in order to fix many critical vulnerabilities, including one that is already actively exploited by attackers.

Android threats growing in number and complexity, report says

The Android threat landscape is growing in both size and complexity with cybercriminals adopting new distribution methods and building Android-focused malware services, according to a report from Finnish security vendor F-Secure.

It's better to call ahead before sending malware, Symantec finds

Hackers are finding it pays to call ahead before sending malware-laden email.

Security Manager's Journal: Upgrading, and looking for the best we can afford

Several of the company's security technologies are reaching end of life. It's a new experience for our manager to be improving security measures instead of closing gaps.

Targeted attacks up over 2012, SMBs increasingly at risk: Symantec

The number of targeted attacks almost doubled in 2012 compared to the prior year.

At RSA, specious arguments against security awareness

A debate requires intelligent dialogue from representatives on both sides of an issue. That's not what happened at the RSA conference panel on security awareness.

IT Concerns About Targeted Malware Rising

IT and security professionals are increasingly concerned about targeted malware and data breaches. What's worse is that their confidence in their ability to identify and stop them is waning.

Security Manager's Journal: R&D's new security lab is a promising step

For once, security isn't an afterthought, as the R&D department plans its own sandbox for testing the company's software products.

Kenneth van Wyk: Staying out of the belly of the Internet beasts

It's true: The Internet really is out to get us all. Here are a few steps you can take toward being safer every time you use the Web. (Insider; registration required)

Microsoft to roll out Windows Store app patches quickly

Microsoft will release security updates for applications in its Windows Store as those patches are available in order to speed up the updating process.

Security Manager's Journal: Spam makes a comeback

Out of the blue, phishing attacks previously caught in the spam filter are getting through to employee inboxes.

Chinese Government's Link to Cyber Espionage Clearer Than Ever

It's a common belief in the information security world that the Chinese government is behind many of the advanced persistent threats that target companies around the world in an effort to steal their IP and trade secrets. Now one security firm has come forward with years of evidence to link a prolific APT group to a unit inside the Chinese government.

Three charged with distributing Gozi virus

Three people allegedly involved for years in cybercriminal activities in Eastern Europe have been charged in a U.S. court for creating and distributing the Gozi virus that infected more than 1 million computers and allowed cybercriminals to steal millions of dollars over a five-year period.