WTF FTW!

Happy Kernel Code Execution Via Internet Explorer

Happy Kernel Code Execution Via Internet Explorer 😛

Read more:

• http://www.microsoft.com/technet/security/Bulletin/MS09-065.mspx
• http://www.w3.org/Submission/2008/SUBM-EOT-20080305/#FileFormat
• http://www.iss.net/threats/354.html

Prevention/Solution..

Update ur Windows.. How? Errr… Here

Rest In Peace Str0ke (milw0rm)

*********************UPDATED**************************
******************************************************
OMG!!!! I’ve just got Punk’d!!!
Str0ke is alive! http://twitter.com/str0ke/status/5422531377
Sorry Str0ke! Sorry everyone!
******************************************************

Many of us have wondered where str0ke has been and why milw0rm has not been updated in a good while. I recently was informed that str0ke has been hospitalized due to a strange condition with his heart, which he has had since he was a child.

Sadly….

I’ve just received information that str0ke @ milw0rm has passed away due to cardiac arrest early this morning at 9:23 AM. We @ blacksecurity are deeply saddened by the loss of a good hearted friend.

We wish nothing but blessing to his wife and 4 children.

RIP str0ke 1974-04-29 – 2009-11-03 09:23

:o(

Owh ya, Str0ke’s funeral is this Friday

[source: BlackSecurity]

Please Upgrade to Firefox 3.0.15 or 3.5.4

Have you update your Firefox? Kindly tell me if you haven’t 😉

Naahh.. Just kidding.. Updates are available now.. Patch.. Patch.. and Patch.. Before its too late

Read more here:

• Fixed in Firefox 3.0.15
• Fixed in Firefox 3.5.4

[credit: IMG source]

Microsoft Announcing the Release of the Enhanced Mitigation Evaluation Toolkit (EMET)

Even as you read this, people around the world are hunting for vulnerabilities in software applications.  Odds are some of them will be successful.  Depending on their motives and what they find, your software and systems may be put at risk.  So how do you protect your software from unknown vulnerabilities that may or may not exist?  One option is to use security mitigations.

Microsoft offers a number of different mitigation technologies that are designed to make it more difficult for an attacker to exploit vulnerabilities in a given piece of software.  Take a look at Michael Howard’s article “Protecting Your Code with Visual C++ Defenses” (http://msdn.microsoft.com/en-us/magazine/cc337897.aspx) for a brief overview of some of these technologies.

Supported mitigations include:

• SEHOP
• Dynamic DEP
• NULL page allocation
• Heap spray allocation

[Read more: HERE]