shadowserver

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

Georgia President's web site under DDoS attack from Russian hackers

From Russia with political love? It appears so according to a deeper analysis of the command and control servers used by the attackers. During the weekend, Georgia President's web site was under a distributed denial of service attack which managed to take it offline for a couple of hours. The...

Tags: Web, Russia, Server, Web Site, Hacker, Distributed Denial Of Service, Georgia, Attack, Russian, Shadowserver, C&C, C&C Server, Web Site Development, Security, Internet, Dancho Danchev

Blog posts 2008-07-22

Over 1.5 million pages affected by the recent SQL injection attacks

In an attempt to mitigate the impact of the recent waves of SQL injection attacks, and provide more transparency into the approximate number of affected pages, the Shadowserver Foundation is starting to maintain a list of all the malicious domains used in the continuing efforts by copycats to inject as...

Tags: Domain, SQL, SQL Injection, Shadowserver, Security, Dancho Danchev

Blog posts 2008-05-20

Additional Resources

Adobe Reader 9 and Acrobat 9 zero day exploited in the wild

Yesterday, Adobe confirmed the existence of a critical vulnerability affecting Adobe Reader and Acrobat versions 9.0 and earlier, originally detected by the Shadowserver Foundation last week. The onging targeted attacks have since been confirmed by both, Symantec and McAfee urging users to disable JavaScript in Adobe Reader...

Tags: Adobe Systems Inc., Adobe Acrobat, Adobe Acrobat Reader, Attack, Security, Dancho Danchev

Blog posts 2009-02-20

IE7 XML parsing zero day exploited in the wild

IE7 XML parsing zero day exploited in the wildThank goodness for Protected ModeFlaws such as this can easily be present in any browser. Good thing that IE on Vista runs in Protected Mode so that the exploit can't do much damage.Not sure if Chrome's security model includes an equivalent...

Tags: Web browsers, Microsoft Internet Explorer 7, Protected Mode, protected mode, exploit, IE7 XML parsing

Discussion threads 2008-12-10

IE7 XML parsing zero day exploited in the wild

A couple of hours ago, two working proof of concept exploits for MS Internet Explorer XML Parsing Remote Buffer Overflow were posted at Milw0rm, with international hacking communities quickly catching up and starting to use it. The second PoC also works on Vista, in particular both exploits were tested on...

Tags: Microsoft Internet Explorer 7, Domain, Microsoft Windows Vista, XML, Microsoft Windows Vista (Longhorn), Hacking, Security, Operating Systems, Microsoft Windows, Software, Dancho Danchev

Blog posts 2008-12-10

Zombie PCs: 'Time to infection is less than five minutes'

A fascinating -- and horrifying -- new article in The New York Times offers the lowdown on "zombie computers," the half-a-million-or-so machines that are converted, assembled into systems called "botnets" and forced to do a shadowy figure's bidding, namely in the form of automated programs that send the majority of...

Tags: Infection, PC, Microsoft Corp., Zombie, Computer, Productivity, Internet, Security, Viruses And Worms, Andrew Nusca

Blog posts 2008-10-21

DDoS + Web 2.0 == Buckets o' traffic

Denial of Service attacks are based upon a simple idea: generate the maximum amount of traffic using the minimum amount of work. At one time this was as simple as sending a spoofed ICMP echo packet to a broadcast address or similar shenanigans. Modern DDoS attacks rely upon...

Tags: Web, Web 2.0, Network, Distributed Denial Of Service, Social Networking, Security, Online Communications, Marketing, Advertising & Promotion, Adam O'Donnell

Blog posts 2008-09-05

Coordinated Russia vs Georgia cyber attack in progress

In the wake of the Russian-Georgian conflict, a week worth of speculations around Russian Internet forums have finally materialized into a coordinated cyber attack against Georgia's Internet infrastructure. The attacks have already managed to compromise several government web sites, with continuing DDoS attacks against numerous other Georgian government sites, prompting...

Tags: Web, Russia, Web Site, Site, Cyberattack, Distributed Denial Of Service, Georgia, Attack, Alania TV, RIA Novosti, Web Site Development, Web Technology, Security, Internet, Dancho Danchev

Blog posts 2008-08-11

Adobe Flash drive-by attacks redux

Adobe has finally issued an almost-definitive statement on the reports of a zero-day attack targeting its flagship Flash Player, suggesting kinda that the vulnerability is already patched. In a progress report posted to the official Adobe PSIRT blog, David Lenoe stops short of making definitive statements on...

Tags: Adobe Systems Inc., Vulnerability, Macromedia Flash Player, Malware, Attack, Malware Attack, Spyware, Adware & Malware, Cyberthreats, Security, Viruses And Worms, Ryan Naraine

Blog posts 2008-05-28

Some great security apps are still free

Some great security apps are still freeThanks, I actually learned of a few new ones!But what about 'ol faithful Spybot, Spyware Blaster, Adware, and AVG? TIA.Doesn't your college call all of that stuff Crapware?http://blogs.zdnet.com/Ou/?p=234

Tags: Viruses and worms, Spyware, adware & malware, Spyware, security, File Shredder

Discussion threads 2007-07-25

Declaring war on botnets

This mornings New York Times carried a John Markoff article on the growing threat of zombie networks. Internet crimes are on the increase and botnets, large networks of computers that have been compromised by hackers and turned to the hackers purposes are increasingly the tool of choice. ...

Tags: General, Security, Web Technology, Polls, Linux, Microsoft, botnet, computer, Internet

Blog posts 2007-01-08