The time between discovery of a vulnerability and the emergence of an exploit keeps getting shorter—sometimes a matter of only hours. This increases pressure on IT managers to rapidly patch production systems in conflict with configuration management and best practices for quality ...

マルウェア作成者は、新しい脆弱性が一般に公開されると、すぐにそれを悪用しようとします。最近 Performance Counters for Linux（PCL）で見つかった、Linux Kernel Local Privilege Escalation Vulnerability（Linux ...

Malware authors are notorious for quickly leveraging new exploits in the public domain for nefarious purposes. The recent discovery of a Linux Kernel CVE-2013-2094 Local Privilege Escalation Vulnerability (CVE-2013-2094) in the

Today, Kaspersky published a paper titled “The NeTTraveler (aka ‘TravNeT’).” The paper provides analysis on a targeted attack campaign that is targeting various organizations worldwide, such as governments, industries, and non-government organizations. This research is ...

Today Norman and the Shadowserver Foundation released a joint detailed report dubbed Operation Hangover, which relates to a recently released

ESET 社の先日のブログによれば、標的型のサイバースパイ攻撃がインドから発信されているようです。複数のセキュリティベンダーがその活動を追跡していますが、この攻撃はかなりの広範囲にわたって 4 年以上前から続いていたと見られています。シマンテックの遠隔測定によると（図 1）、攻撃はパキスタンに集中しており、特に政府系機関が狙われています。

ESET recently blogged about a targeted cyber/espionage attack that appears to be originating from India. Multiple security vendors have been tracking this campaign. The attack appears to be no more than ...

Hello, welcome to this month's blog on the Microsoft patch release. This month the vendor is releasing 10 bulletins covering a total of 33 vulnerabilities. Eleven of this month's issues are rated ’Critical’. As always, customers are advised to follow these security ...

In April 2013, Symantec was alerted to a series of sophisticated social-engineering attacks targeting a limited set of organizations in Europe. The most distinguishing feature of these attacks is that the victim will receive a phone call from the attacker who impersonates an employee or ...

Microsoft 社は、Internet Explorer 8 に影響する脆弱性の悪用についての報告に対応して、セキュリティアドバイザリ 2847140 を公開しました。Internet Explorer 6、Internet Explorer 7、Internet Explorer 9、Internet Explorer 10 など、その他のバージョンは影響を受けません。当初の報告によると、米国政府のある省庁に関連する Web ...