Hot answers tagged

6

Flash has been a high-value target for exploit developers for years, particularly because of its near-ubiquitous installation base and the fact that (historically) it will generally run automatically whenever a page with Flash content is loaded. This makes it very easy for a large number of systems to be targeted and compromised with a single exploit. As it ...


5

I drove a project that looked at this while I was at Microsoft. The answer is that the vast majority of breakins do not use 0 day. We used malware as a proxy for breakins, because data was more accessible and puts the use of 0days in perspective. The data here doesn't break out sophisticated attackers, but the arguments you put forth as to why no one ...


5

EMET software participates in a defence-in-depth approach of security. It adds an effective supplementary security layer when an attacker manages to successfully exploit a vulnerable software without being blocked by the anti-virus. However, in such domain is an endless race, since while EMET is getting more popular, attackers will try to craft their ...


5

I think that the answers you get here are mostly speculations. But the question is interesting nevertheless. I see the following main reasons: Other usual attack vectors like Java or ActiveX were harder to exploit because the relevant functionality was either switched off or layers of interaction were added (i.e. click to play, warnings with unsigned code ...


4

The answer is to take responsibility for your own security. If you rely only on software vendors for your security your trust is arguably misplaced and you might be disappointed quite often. You are in control of your system as an individual and it is therefore your responsibility to take the necessary measures to protect what is important to you. Most ...


4

One of the methods you can use to create a baseline would be to go to sites like PacketStorm find say the last 50 vulnerabilities/exploits disclosed, then find out whether or not they have CVEs issued on Mitre. A baseline will give you just that, a baseline average. There are a few things to take into considerations: Not all exploits/vulnerabilities are ...


3

The relative costs depend very much on what the vulnerability is. To demonstrate this, I'm going to refer to two semi-recent vulnerabilities: the Bash "Shellshock" bug, and the glibc "Ghost" gethostbyname() bug. Shellshock The Shellshock bug was caused by an intricate flaw in Bash's function parsing that could be used to make Bash execute code directly ...


3

Instead of placing your trust in Rogers (or any internet provider), you can certainly take responsibility for your own security. Purchase your own router/firewall appliance, and connect all your home machines to it. Then connect your router to the Rogers router. That way, even if your Rogers' router is compromised, the infection remains isolated outside ...


2

The short answer to your question is: Leave Flash enabled on your mother's computer - but check the option for only running Flash content when the user (your mother) tells it to run. That way, when she's at a known page and she needs to run the plugin, all she has to do is right click and click "run this plugin". Firefox may even do this by default now. You ...


2

Use Google Chrome - it has "PepperFlash" built in, and it's always up to date (as long as you reboot every day). She can use the sites you need, and you can uninstall the regular flash so that she doesn't get tricked into opening a website that will infect her computer. I did this a year ago with my parents, and haven't had any issues since.


2

Email is certainly the most common method of pushing malware to a network, but it is not the only one. Also, while malicious files can be delivered as attachments to emails, they can also be presented as links that end users click on, resulting in a drive-by download or perhaps a more traditional virus that the user then has to download and execute manually....


2

The most reliable way is to stop using the product or service that has the vulnerability until it is patched. Obviously this is often very inconvenient. You must make a risk assessment of your own situation to decide if it is worth it.


2

Part of the reason is more people looking for vulnerabilities I think: Throughout 2015, vulnerability disclosure programs and the security community have been immensely helpful in identifying CVE’s. Approximately one-third of our reports this year were via Project Zero alone. Many of these were non-trivial as many of the reported bugs required ...


1

Honestly it really depends on the company. Every company handles their vulnerabilities differently, even some researchers who follow the process get screwed by it, just like this guy who filed a bug for Instagram. For those entered through the bug bounty program (if they have one), they will generally publish the information on their site or email to the ...


1

Breaking in is all about research. You need to spend time surveying a network and it's various points of entry or access. Part of that will be reviewing the hardware firmware and software running. The first point of attack I might pick would be wifi. I would find out the model of access point they use and then download the firmware. Once I have the ...



Only top voted, non community-wiki answers of a minimum length are eligible