News from the Labs // iDefense Labs

Microsoft Corp. has released two Security Bulletins encompassing four vulnerabilities. This report provides an initial summary of these pending issues.

Microsoft Corp. has released 11 Security Bulletins encompassing 20 vulnerabilities. This report provides an initial summary of these pending issues.

Microsoft Corp. has released four Security Bulletins encompassing eight vulnerabilities. This report provides an initial summary of these pending issues.

Microsoft Corp. has released 11 security bulletins encompassing 26 vulnerabilities. This report provides an initial summary of these pending issues.

Microsoft Corp. has released four security bulletins encompassing nine vulnerabilities. This report provides an initial summary of these pending issues.

Prior to 2008, the old Challenge Program had awarded cash prizes for the best research submission targeting a specific technology over a 90 day period. Many iDefense VCP contributors had complained that 90 days was simply not enough time to properly research a good vulnerability, and informed the VCP that more time was needed. Recognizing that this was a fundamentally valid assertion, iDefense decided to ‘take the hint’ and restructure the entire iDefense VCP Challenge Program.

As of July 1, 2008 the new VCP Challenge Program takes effect, considering all qualifying research submissions through the end of the calendar year (31 December). Thereafter, the Challenge will consider all qualifying research accepted and compensated by the VCP Program that were received between the first day of January and the last day of December in each subsequent year. Following the acceptance deadline the iDefense Labs Vulnerability Research Team (VRT) will determine the winners and award the prizes. iDefense will award all cash prizes within thirty (30) days of the Challenge deadline. Under no circumstances will any submission be considered for any of the current year’s Challenge prizes if the contributor has not accepted the iDefense VCP’s offer for compensation for the submission.

Microsoft Corp. has released seven security bulletins encompassing 10 vulnerabilities. This report provides an initial summary of these pending issues.

Targeted social engineering attacks against corporations have reached new highs during April and May 2008. These e-mail-based attacks, often referred to as "spear phishing" or "whaling,' target individual users and contain personal information such as name, company, mailing address and phone number. Many of these attacks target senior executives and other high profile individuals

On May 27, 2008, Symantec moved to Threatcon 2 based on information that a new and unpatched vulnerability in Adobe's Flash player was being exploited in the wild. Based on analysis of the sites provided by Symantec and exploit sites gathered from internal data, it is clear that an older vulnerability is currently being exploited. The vulnerability in question was found by Mark Dowd of ISS in a paper in which he describes a novel technique for exploiting null pointer dereference bugs.

Microsoft Corp. has released four security bulletins encompassing six vulnerabilities. This report provides an initial summary of these pending issues.

Microsoft Corp. has released eight security bulletins encompassing 10 vulnerabilities. Please note that Microsoft combined two similar iDefense Exclusive reports into one fix. Also note that iDefense has created a separate Threat report to include third-party ActiveX kill bits. This report provides an initial summary of these pending issues.

Microsoft Corp. has released four security bulletins encompassing 12 vulnerabilities. This report provides an initial summary of these pending issues.

Microsoft Corp. has released 11 security bulletins encompassing 17 vulnerabilities. This report provides an initial summary of these pending issues.

Microsoft Corp. has released two security bulletins encompassing three vulnerabilities. This report provides an initial summary of these pending issues.

Title:	News from the Labs
URL:	labs/index.php
To:
From:
	You may add notes or comments below:
	Send me a copy of this email
	Anti-spam Validation:
	Privacy Statement