Exploits blog posts
IE Zero-Day Fixit Tool available
Published September 20, 2012
Yesterday, Microsoft announced that it would be issuing an out-of-band patch on Friday, in response to the latest zero-day Internet Explorer vulnerability discovered this past weekend. For those users concerned about waiting, Microsoft released a FixIt tool on Wednesday that will temporarily neutralize the threat. Microsoft “FixIt” tools, are automated solutions that can diagnoses and repair problems on end user machines. There are several FixIt tools available, that can fix a wide…Read more
New IE Zero-Day vulnerability discovered.
Published September 18, 2012
Security researcher Eric Romang has discovered a new zero-day vulnerability in Internet Explorer, which he claims will affect fully patched versions of Microsoft Internet Explorer 7, 8 and 9. The exploits, developed over the weekend for the Metasploit exploit toolkit, have been linked to Nitro, the same group of hackers from China who were exploiting two Java zero-days in late August. “Since Microsoft has not released a patch for this vulnerability yet, Internet users are strongly advised to…Read more
Disable Java…NOW!!!
Published September 04, 2012
Unfortunately, it appears that Java is once again unsafe. Over the weekend, the good folks over at security firm FireEye spotted a new attack that exploits a vulnerability in Java to install a Trojan named Poison Ivy, which communicates with C&C servers in China and Singapore. Since there’s no fix in sight, it is highly recommended that users turn off/disable Java in their browsers. This might keep certain websites from operating 100% but, it will help prevent possible “drive-by…Read more
New Java exploit to debut in BlackHole exploit kits
Published July 09, 2012
Brian Krebs over at KrebsOnSecurity.com has just issued a warning regarding a new Java exploit, powered by The Blackhole Exploit Kit. It is very important to make sure your Java is constantly up-to-date and patched since it is one of the most common vulnerabilities related to malicious attacks. For more details, you can check out Brian Krebs' original post on the Java exploit We here at New River Computing would like to thank Mr. Krebs for all of his great work on keeping everyone informed with…Read more