Hot answers tagged

38

A zero-day attack is an attack that relies on an undisclosed vulnerability in the design or implementation of a system in order to violate its security. Most commonly, such attacks consist of using zero-day exploits to access information systems or execute code on privileged systems. Such exploits are called 'zero-day' because security administrators have ...


13

Amazon advisory links to the original XEN advisory on which one can read: Systems running only x86 PV guests are not vulnerable. So no problem for the PV instances. Regarding the HVM ones, Amazon explains that for performance reasons they managed to replace the HVM hardware drivers by the PV ones for storage and network operations (see PV on HVM). ...


6

Flash has been a high-value target for exploit developers for years, particularly because of its near-ubiquitous installation base and the fact that (historically) it will generally run automatically whenever a page with Flash content is loaded. This makes it very easy for a large number of systems to be targeted and compromised with a single exploit. As it ...


5

ESET released a report about the vulnerability here. Their key findings are: Linux/Moose targets consumer routers and modems including the hardware provided by Internet Service Providers (ISPs) to consumers The threat is built for deep network penetration spreading past firewalls It can eavesdrop on communications to and from devices connected ...


5

EMET software participates in a defence-in-depth approach of security. It adds an effective supplementary security layer when an attacker manages to successfully exploit a vulnerable software without being blocked by the anti-virus. However, in such domain is an endless race, since while EMET is getting more popular, attackers will try to craft their ...


5

I think that the answers you get here are mostly speculations. But the question is interesting nevertheless. I see the following main reasons: Other usual attack vectors like Java or ActiveX were harder to exploit because the relevant functionality was either switched off or layers of interaction were added (i.e. click to play, warnings with unsigned code ...


4

I drove a project that looked at this while I was at Microsoft. The answer is that the vast majority of breakins do not use 0 day. We used malware as a proxy for breakins, because data was more accessible and puts the use of 0days in perspective. The data here doesn't break out sophisticated attackers, but the arguments you put forth as to why no one ...


4

"Average length of time that an announced vulnerability has widespread exploitation", T "Attractiveness of server as a target", A, on a qualitative scale of 1-5 (higher number representing more attractiveness). "Ease of exploitation", E, using the CVE score as a basis of common comparison (T/A) x E = N Considering that T is now considered to be measured ...


4

The answer is to take responsibility for your own security. If you rely only on software vendors for your security your trust is arguably misplaced and you might be disappointed quite often. You are in control of your system as an individual and it is therefore your responsibility to take the necessary measures to protect what is important to you. Most ...


3

This is the slow loris attack of incomplete HTTP GET Requests. How to protect your server: Update your Apache Server, there are many updates for this attack, this attack was discovered in like 2011. Other options are to reduce timeout on your Apache Server, etc. This attack works on timeout. Here tells you how to protect your Apache from DoS/DDoS (slow ...


3

Instead of placing your trust in Rogers (or any internet provider), you can certainly take responsibility for your own security. Purchase your own router/firewall appliance, and connect all your home machines to it. Then connect your router to the Rogers router. That way, even if your Rogers' router is compromised, the infection remains isolated outside ...


2

Part of the reason is more people looking for vulnerabilities I think: Throughout 2015, vulnerability disclosure programs and the security community have been immensely helpful in identifying CVE’s. Approximately one-third of our reports this year were via Project Zero alone. Many of these were non-trivial as many of the reported bugs required ...


2

The short answer to your question is: Leave Flash enabled on your mother's computer - but check the option for only running Flash content when the user (your mother) tells it to run. That way, when she's at a known page and she needs to run the plugin, all she has to do is right click and click "run this plugin". Firefox may even do this by default now. You ...


2

Use Google Chrome - it has "PepperFlash" built in, and it's always up to date (as long as you reboot every day). She can use the sites you need, and you can uninstall the regular flash so that she doesn't get tricked into opening a website that will infect her computer. I did this a year ago with my parents, and haven't had any issues since.


2

Email is certainly the most common method of pushing malware to a network, but it is not the only one. Also, while malicious files can be delivered as attachments to emails, they can also be presented as links that end users click on, resulting in a drive-by download or perhaps a more traditional virus that the user then has to download and execute ...


2

The most reliable way is to stop using the product or service that has the vulnerability until it is patched. Obviously this is often very inconvenient. You must make a risk assessment of your own situation to decide if it is worth it.


1

Breaking in is all about research. You need to spend time surveying a network and it's various points of entry or access. Part of that will be reviewing the hardware firmware and software running. The first point of attack I might pick would be wifi. I would find out the model of access point they use and then download the firmware. Once I have the ...


1

Satisfiability Modulo Theories (SMT) are mathematical concepts that looks at how something can be computed. These theories relates to things that you will find in many programming languages like real and integer numbers, lists, etc and which are essential to computers. SMT solvers (like Z3) are computer programs that automatically generate proofs for ...



Only top voted, non community-wiki answers of a minimum length are eligible