by certifiedbug on April 25, 2012
in Microsoft
Microsoft Security Blog
Today we released the latest volume of the Microsoft Security Intelligence Report (SIR) containing a large body of new data and analysis on the threat landscape. This volume of the SIR includes:Latest industry vulnerability disclosure trends and analysis
- Latest industry vulnerability disclosure trends and analysis
- Latest data and analysis of global vulnerability exploit activity
- Latest trends and analysis on global malware and potentially unwanted software
- Latest analysis of threat trends in more than 100 countries/regions around the world
- Latest data and insights on how attackers are using spam and other email threats
- Latest global and regional data on malicious websites including phishing sites, malware hosting sites and drive-by download sites
In addition, we have included a section in the report focused on how the threat called Conficker continues to propagate.
http://blogs.technet.com/b/security/archive/2012/04/25/microsoft-security-intelligence-report-volume-12.aspx
by certifiedbug on October 18, 2011
in Microsoft
Microsoft Security Intelligence Report
Analysis from January to June 2011.
Volume 11 of the Microsoft® Security Intelligence Report (SIRv11) provides in-depth perspectives on software vulnerabilities and exploits, malicious code threats, and potentially unwanted software in Microsoft and third-party software. Microsoft developed these perspectives based on detailed trend analyses over the past several years, with a focus on the first half of 2011.
This document summarizes the key findings of the report. The full report also includes deep analysis of trends found in more than 100 countries/regions around the world and offers ways to manage risks to your organization, software, and people.
Zeroing in on Malware Propagation Methods
Worldwide Threat Intelligence
Vulnerability Disclosures
Exploits
Document Exploits
Malware and Potentially Unwanted Software
Operating System Infection Rates
Threat Families and Categories
Enterprise Threats
Email Threats
Malicious Websites
Download the report: Security Intelligence Report (SIR) Volume 11 [PDF]
Download library has earlier SIR volumes.
by certifiedbug on September 22, 2011
in Microsoft
The Official Microsoft® Blog
Rustock Civil Case Closed: Microsoft Refers Criminal Evidence to FBI
22 Sep 2011
As you may have read in this morning’s edition of CNET, on Sept. 13th, Judge James L. Robart, of the U.S. District Court for the Western District of Washington ruled that the domain names and Internet protocol addresses used to host the botnet would be effectively removed from the defendants’ control. This case not only enabled the take down of a botnet known to be one of the single largest sources of spam on the Internet, but it is now helping to ensure that this botnet will never be used for cybercrime again. However, we’re not stopping here.
We are also turning over all of the evidence we collected during discovery and our investigation to the FBI, to help ensure those responsible for operating the Rustock botnet are held accountable for their actions. It is important to note that Microsoft ‘s $250,000 reward offer for information that leads to the arrest and conviction of Rustock’s operators remains in effect, but now any tips should be sent directly to the FBI at MS_Referrals@ic.fbi.gov.
Article:
http://blogs.technet.com/b/microsoft_blog/archive/2011/09/22/rustock-civil-case-closed-microsoft-refers-criminal-evidence-to-fbi.aspx
Certifiedbug, July 18, 2011. Microsoft Offers $250,000 Reward for Information on Rustock
Another great article from Brian Krebs.
Fake Antivirus Industry Down, But Not Out
Many fake antivirus businesses that paid hackers to foist junk security software on PC users have closed up shop in recent weeks. The wave of closures comes amid heightened scrutiny by the industry from security experts and a host of international law enforcement officials. But it’s probably too soon to break out the bubbly: The inordinate profits that drive fake AV peddlers guarantee the market will soon rebound.
http://krebsonsecurity.com/2011/08/fake-antivirus-industry-down-but-not-out/
