How was Microsoft Windows exploited in 2014?

Today, we published our research about Windows exploitation in 2014. This report contains interesting information about vulnerabilities in Microsoft Windows and Office patched over the course of the year, drive-by download attacks and mitigation techniques. The report includes the following information. Vulnerabilities discovered and patched in Microsoft Windows and Office. Statistics about patched vulnerabilities and … More How was Microsoft Windows exploited in 2014?

Java zero day vulnerability = time to disable Java, in your browser at least

Now is the time to disable Java in your web browser, or even remove it from your system if that is practical. Why? The bad guys are hard at work trying to exploit a zero day vulnerability in the latest version of Java (version 1.7, Update 6.). This vulnerability is the subject of a US-CERT … More Java zero day vulnerability = time to disable Java, in your browser at least

CyberThreats Daily: New graphics engine imperils users of Firefox and Chrome

Experts are advising users of the Mozilla Firefox and Google Chrome browsers to disable a recently added graphics engine that can be exploited to take control of end user computers. The web standard known as WebGL opens the browsers to serious attacks, including the remote execution of malicious code. The technology made its debut in … More CyberThreats Daily: New graphics engine imperils users of Firefox and Chrome