Exploits of the Java Runtime Environment (JRE) have been extensively used in drive-by-download toolkits such as Blackhole and Red Kit. New vulnerabilities discovered in 2013, such as CVE-2013-1493 and CVE-2013-0422, are popular, and we still see lots of older exploits such as CVE-2012-1723, CVE-2012-4681, and CVE-2012-0507. These vulnerabilities are already fixed in the latest JRE. Read more…
Tags: CVE 2012-1723, CVE-2013-0422, CVE-2013-1493, exploit, jar, java, Java Runtime Environment
Add Apple to the list of high-profile companies hit by hackers as of late, right on the heels of a similar attack on Facebook just last week. According to Reuters, this is the widest known cyber attack to ever target corporate Apple computers. In other words: This is a big deal. For both Facebook and Read more…
Tags: AllAcess, Apple, facebook, iOS, java, Java exploit, Java virus, SiteAdvisor, twitter
Wait…what! You heard it right: According to a recent security report, Internet users are 182 times more likely to get a virus from clicking on online ads than visiting an adult website. At first glance, this sounds extremely counterintuitive (and it is). In theory, wouldn’t your risk go up when visiting shady sites? Yes and Read more…
Tags: Cisco, java, malware, mcafee all access, McAfee SiteAdvisor, Online Ads, virus
In a recent post for ZDNet, tech writer Ed Bott published a scathing criticism of Oracle’s automatic installation of supporting software with Java updates. Specifically, when you use Java’s automatic updater to install crucial security updates for Windows, third-party software is always included. One of these software packages is the Ask Toolbar, which I’ll talk Read more…
Tags: Ask Toolbar, java, McAfee Security Scanner
All too often, cyber attacks are crimes of opportunity. This was exactly the case when late last week, hackers created a fake website to fool users into downloading a virus instead of the latest version of Java. As many of you read here in the blog, Oracle recently released a patch for a critical Java Read more…
Tags: consumer threats, java, Java update, virus
Last week, a new security issue surfaced for a popular programming language known as Java. This Java security issue is classified as a zero-day threat, and it spreads malicious files to unprotected computers. A zero-day threat is an attack that exploits a previously unknown vulnerability in a computer application (in this case Java), which means that the attack Read more…
Tags: AllAccess, java, malware, SiteAdvisor, Zero-Day
Exploit kits are toolkits that are used to build malware components such as binaries and scripts. They automate the exploitation of client-side vulnerabilities, targeting browsers and programs. These exploit kits provide an effective way for cybercriminals to distribute malware without the users consent. Among these kits, the Blackhole exploit kit is one of the most Read more…
Tags: Adobe Reader, Exploit Kit, exploits, java, Red Kit, vulnerabilities, vulnerability
On June 1, McAfee Labs discovered a new Microsoft Internet Explorer zero-day attack that is active in the wild and exploits a use-after-free vulnerability. We have successfully reproduced it with the latest IE8 and Windows 7. We have confirmed it’s a zero day and have been working with the Microsoft security team for their solutions. Read more…
Tags: ASLR, exploit, Internet Explorer, java, msvcr71.dll, ROP, use after free, vulnerability, Zero-Day
Most of today’s malware works on Windows and its apps, because it can affect a lot of people around the world. However, other platforms are becoming more popular every day and attracting bad guys who are starting to create malicious code for other systems. (For a few examples, see BlackHoleRAT, HellRaiser RAT, and a fake-alert Read more…
Posts tagged under java