Today we released eight security bulletins addressing 13 unique CVE’s. Two bulletins have a maximum severity rating of Critical while the other six have a maximum severity rating of Important. The table is designed to help you prioritize the deployment…
Dynamically loading libraries in an application can lead to vulnerabilities if not secured properly. In this blog post we talk about loading a library using LoadLibraryEx() API and make use of options to make it safe.
Know the defaults:
The library fil…
I am making a presentation to the class about “SSL 2.0 deprecated protocol” and I really have no idea how this exploit is used or how the attacker can use this vul. I understand the impact of this vul, but I need a complete explanation on …
I have a UDP client application that is long-lived: Ideally, it keeps streaming to a server forever. I’m using Datagram Transport Layer Security (DTLS) to secure the UDP communication.
How often does DTLS refresh the session keys establi…
The Enhanced Mitigation Experience Toolkit, best known as EMET, helps raise the bar against attackers gaining access to computer systems. Since the first release of EMET in 2009, our customers and the security community have adopted EMET and provided u…
We’ve received a number of customer inquiries about the workaround steps documented in Security Advisory 2963983 published on Saturday evening. We hope this blog post answers those questions.
Steps you can take to stay safe
The security advisory lists …
Fairly frequently, the contact form on my blog gets comments that look similar to this (each field represents a text box users can enter into the HTML form on the blog):
Name: ‘ceguvzori’
Email: ‘gwizwo@avbhdu.com’
Website: ‘QrSkUP…
I am working on a client/server chat application that supports both single user chat as well as group chat.
We planned to encrypt messages in single user chat with the public key of the receiver and decrypt them using the private key of th…
Summary
FireEye Research Labs, the intelligence behind our Mandiant
Consultancy services, identified a new Internet Explorer (IE)
zero-day exploit used in targeted attacks. The vulnerability affects
IE6 through IE11, but the attack is target…
Summary
FireEye Research Labs, the intelligence behind our Mandiant
Consultancy services, identified a new Internet Explorer (IE)
zero-day exploit used in targeted attacks. The vulnerability affects
IE6 through IE11, but the attack is target…
