Drive-by Download

Google, Facebook join new coalition to combat "bad ads"

By

Leading tech companies have joined forces to create the Ads Integrity Alliance, a coalition that aims to protect web users from malicious ads.

Citadel trojan uses child porn scare to extort cash

By

The banking trojan Citadel now is being used to trick users into believing they have violated U.S. law and must pay a fine to unfreeze their computers,

WordPress gets updated for security issues

By

WordPress installations received a security upgrade on Friday to patch a number of vulnerabilities.

Report: Top-ranking websites serve malware, too

By

Visiting a well-trafficked, seemingly trusted website won't necessarily save web surfers from getting malware installed on their computers, according to security firm Barracuda Networks.

WordPress attacks try to infect users with dangerous rootkit

By

Automated attackers are trawling the web for vulnerable WordPress blogs so they can silently redirect users to dangerous exploits. So far, however, the number of victims is in the hundreds.

Internet Explorer fixes get top billing in Microsoft update

By

Microsoft on Tuesday released eight fixes to address 23 vulnerabilities that lie across its software and operating system components.

MySQL.com hacked to distribute malware

By

Visitors to MySQL.com on Monday were greeted with a drive-by download that attempted to silently install malware on their machine.

Flash exploits might signal APT activity

By

An Adobe Flash vulnerability that was fixed this week is being leveraged in widespread but targeted drive-by downloads and spear phishing attacks.

New Google Chrome version notifies of unpatched plug-ins

By

Google's latest version of Chrome warns users if they are attempting to run a plug-in that is out of date.

Ten years of evolving threats: A look back at the impact of notable malicious wares of the past decade

Ten years of evolving threats: A look back at the impact of notable malicious wares of the past decade

As security firm Fortinet celebrates 10 years in business, Fortiguard Labs took a look at the 10 most intriguing threats during the past decade and showed how their feature sets have evolved, Darwin-like, over time.

Active exploits targeting Apple QuickTime 0-day

By

Attackers are now actively exploiting a recently published zero-day vulnerability in Apple QuickTime, security firm Websense disclosed Tuesday.

Up to five million parked domains served malware widget

By

An estimated hundreds of thousands to millions of Network Solutions parked domains were actively serving malware to visitors due to an infected widget, according to researchers at a security firm.

Report: Some 1.3 million malicious ads served daily

By

An estimated 1.3 million malicious advertisements, or malvertisements, are served to websites each day, according to data gathered by web security firm Dasient. Malvertisements are disguised as legitimate ads and delivered via ad networks to well-known websites. Users can be hit simply by visiting the target website, as 59 percent of malvertisements aim to spread via drive-by download. About 41 percent of malvertisements propagate rogue anti-virus programs, according to Dasient. Additionally, users are twice as likely of getting infected by a malvertisement during the weekend, and the average lifespan of one is 7.3 days. — AM

Lada Gaga, Rihanna lyrics sites used to foist Java exploit

By

Soon after a zero-day Sun Java vulnerability was revealed, attackers are launching exploits on the web with their first stop a song lyrics site.

Sign up for our newsletters

POLL