A famous quotation from the The Art of War is "If you know both yourself and your enemy, you will come out of one hundred battles with one hundred victories." A malware author following the principles of Sun Tzu might say "If you know both yourself and your victim and use social engineering...

The day after I got back from a 16 day trip to Europe, I opened a letter from an unknown company who informed me that information about my bank account had been removed by one of their employees. The employee sold the information to a data broker who then sold the data to some direct marketing companies...

A chill ran up my spine when I came to my front door and it was already open. A USB cable lay strewn across the doorway. I could hear a stereo speaker eerily buzzing inside. I pushed the swinging door aside and confirmed my fear. I was robbed! After a wonderful weekend of camping and fishing, I returned...

A recent vulnerability within the Windows shell is being exploited in the wild. The vulnerability is made accessible to attackers via ActiveX controls in Microsoft Internet Explorer and allows the arbitrary execution of code. Reports have surfaced that this vulnerability is being actively exploited in...

Microsoft has released a security bulletin MS06-055, Vulnerability in Vector Markup Language Could Allow Remote Code Execution (925486). Microsoft is issuing a patch to protect systems against the vulnerability, and advises users to update their systems immediately. This vulnerability allows an attacker...

On August 31st the CA Security Advisor Team observed the appearance of another family of the perennial "IRC bot". This new worm could spread via link spam utilizing assorted instant messenger clients. It also had the ability to exploit the then recently patched vulnerability in the Server Service...

News regarding the VML exploit is flying around and reports from the security community indicate that exploit distribution is on the rise and infections are only getting worse as the world waits for October 10th. Meanwhile, we thought we'd offer our readers an example scenario of what can happen...

Our research team has impressed me with the expansive breadth and quality of their knowledge and experience in computer security. When blog technology caught on we all saw this as a method for us to get information to our customers more quickly. But beyond speed, I think you’ll be impressed too by the...