Eye on Microsoft: More Security Catastrophes
- Dr. Roy Schestowitz
- 2009-09-01 08:41:23 UTC
- Modified: 2009-09-01 08:41:23 UTC
Summary: Security-related items from the news (highlights in red are ours)
●
Conficker, back with a vengeance as top worm
The infamous Conficker worm first spread its malicious infection across the Internet more than eight years ago and just last month it shot back into prominence, infecting 43 percent of machines in use worldwide in the space of four weeks and, for good measure, it now installs rogue security software on compromised machines.
●
Skype snooping trojan detected
“What this threat is doing is actually grabbing the sound coming from the audio devices plugged into the computer,” Selvaraj wrote. “It does this by hooking various Windows API calls that are used in audio input and output.”
●
Skype Trojan can log VoIP conversations
Symantec claims to have found the public release of source code for a Trojan that targets Skype users..
Security giant Symantec claims to have found the public release of source code for a Trojan that targets Skype users.
●
Microsoft ATL/MFC ActiveX Type Confusion Vulnerability
Remote exploitation of a type confusion vulnerability in Microsoft Corp.'s ATL/MFC ActiveX code as included in various vendors' ActiveX controls, could allow an attacker to execute arbitrary code within Internet Explorer (IE). Microsoft's Component Object Model (COM) was designed to allow interoperability between disjointed software components. It is a standardized interface solution to the programming dilemmas involved in object oriented programming, distributed transactions, and inter-language communications. Microsoft's Active Template Library (ATL) is a set of C++ templates that simplify developing COM objects.
Related posts:
- Journalists Suggest Banning Windows, Maybe Suing Microsoft Over DDoS Attacks
- When Does it Become Appropriate to Take Windows off the Information Highway?
- Microsoft's Blame-Shifting Strategy Precedes More Trouble
- Leave Microsoft Alone
- Never Blame Microsoft, Blame Users and Exploits
- Botnets and Bounties Versus Real Security
- Is Windows to Blame for Cracking of Federal Aviation Administration (FAA)?
- Windows Problems Take Down Airplanes, JFK Airport, Houston Municipal Courts
- Turkey, France, United Stated Under Attack by Microsoft Windows Insecurities
- Microsoft Adopts Malware Techniques to Advance .NET
- Windows Botnets Go Out of Control, Obama Web Site Delivers Windows Malware
- One Windows Worm, One Week, and Possibly 250,000,000+ New Windows Zombies
- Death by Microsoft Windows
- UNIX/Linux Offer More Security Than Windows: Evidence
- US Army Becomes Zombies Army; London Hospitals Still Ill (Windows Viruses)
- Eye on Microsoft: Another Messy Week for Security
- Cybercrime Rises and Vista 7 is Already Open to Hijackers
- Vista 7: Broken Apart Before Arrival
- Vista 7 Security “Cannot be Fixed. It's a Design Problem.”
- Department of Homeland Security 'Poisoned' by Microsoft; Vista 7 is Open to Hijackers Again
- Liability for Software When Life is at Stake
- Microsoft Windows Zombies Also Knocked Facebook and Gawker Offline, More “Critical” Microsoft Flaws Discovered
- Bad Day for Twitter: Attack from Microsoft Windows Zombies, Texas Lawsuit Over Software Patents
- Off Topic: A World Where Almost One in Two PCs is a Windows Zombie PC
Recent Techrights' Posts
- [Meme] The Heart of Staff Rep
- Rowan heartily grateful
- Microsoft's Windows Falls to All-Time Low and Layoffs Reported by Managers in the Windows Division
- One manager probably broke an NDA or two when he spoke about it in social control media
-
- Gemini Links 18/04/2024: Google Layoffs Again, ByteDance Scandals Return
- Links for the day
- Gemini Links 18/04/2024: Trying OpenBSD and War on Links Continues
- Links for the day
- IRC Proceedings: Wednesday, April 17, 2024
- IRC logs for Wednesday, April 17, 2024
- Over at Tux Machines...
- GNU/Linux news for the past day
- North America, Home of Microsoft and of Windows, is Moving to GNU/Linux
- Can it top 5% by year's end?
- Management-Friendly Staff Representatives at the EPO Voted Out (or Simply Did Not Run Anymore)
- The good news is that they're no longer in a position of authority
- Microsofters in 'Linux Foundation' Clothing Continue to Shift Security Scrutiny to 'Linux'
- Pay closer attention to the latest Microsoft breach and security catastrophes
- Links 17/04/2024: Free-Market Policies Wane, China Marks Economic Recovery
- Links for the day
- Gemini Links 17/04/2024: "Failure Is An Option", Profectus Alpha 0.5 From a Microsofter Trying to Dethrone Gemini
- Links for the day
- How does unpaid Debian work impact our families?
- Reprinted with permission from Daniel Pocock
- When you give money to Debian, where does it go?
- Reprinted with permission from Daniel Pocock
- How do teams work in Debian?
- Reprinted with permission from Daniel Pocock
- Joint Authors & Debian Family Legitimate Interests
- Reprinted with permission from Daniel Pocock
- Bad faith: Debian logo and theme use authorized
- Reprinted with permission from Daniel Pocock
- Links 17/04/2024: TikTok Killing Youth, More Layoff Rounds
- Links for the day
- Jack Wallen Has Been Assigned by ZDNet to Write Fake (Sponsored) 'Reviews'
- Wallen is selling out. Shilling for the corporations, not the community.
- Links 17/04/2024: SAP, Kwalee, and Take-Two Layoffs
- Links for the day
- IRC Proceedings: Tuesday, April 16, 2024
- IRC logs for Tuesday, April 16, 2024
- Over at Tux Machines...
- GNU/Linux news for the past day
- Inclusion of Dissent and Diversity of Views (Opinions, Interpretations, Scenarios)
- Stand for freedom of expression as much as you insist on software freedom
- Examining Code of Conduct violations
- Reprinted with permission from the Free Software Fellowship
- Ruben Schade's Story Shows the Toxicity of Social Control Media, Not GNU/Linux
- The issue here is Social Control Media [sic], which unlike the media rewards people for brigading otherwise OK or reasonable people
- Upgrading IRCd
- We use the latest Debian BTW
- The Free Software Community is Under Attack (Waged Mostly by Lawyers, Not Developers)
- Licensing and legalese may seem "boring" or "complicated" (depending on where one stands w.r.t. development), but it matters a great deal
- Jonathan Cohen, Charles Fussell & Debian embezzlement
- Reprinted with permission from disguised.work
- Grasping at Straws in IBM (Red Hat Layoff Rumours in 2024)
- researching rumours around Red Hat layoffs
- GNU/Linux Continues to Get More Prevalent Worldwide (Also on the Desktop)
- Desktops (or laptops) aren't everything, but...
- Who is a real Debian Developer?
- Reprinted with permission from Daniel Pocock
- Links 16/04/2024: Many More Layoffs, Broadcom/VMware Probed (Antitrust)
- Links for the day
- Links 16/04/2024: Second Sunday After Easter and "Re-inventing the Wheel"
- Links for the day
- Upcoming Themes and Articles in Techrights
- we expect to have already caught up with most of the administrivia and hopefully we'll be back to the prior pace some time later this week
- Links 16/04/2024: Levente "anthraxx" Polyák as Arch Linux 2024 Leader, openSUSE Leap Micro 6 Now Alpha, Facebook Blocking News
- Links for the day
- Where is the copyright notice and license for Debian GNU/Linux itself?
- Reprinted with permission from Daniel Pocock
- Halász Dávid & IBM Red Hat, OSCAL, Albania dating
- Reprinted with permission from the Free Software Fellowship
- Apology & Correction: Daniele Scasciafratte & Mozilla, OSCAL, Albania dating
- Reprinted with permission from the Free Software Fellowship
- Next Week Marks a Year Since Red Hat Mass Layoffs, Another Round Would be "Consistent With Other Layoffs at IBM."
- "From anon: Global D&I team has been cut in half."
- Over at Tux Machines...
- GNU/Linux news for the past day
- IRC Proceedings: Monday, April 15, 2024
- IRC logs for Monday, April 15, 2024