VB Blog

VB2016 paper: Mobile applications: a backdoor into the Internet of Things?

Posted by   Martijn Grooten on   Nov 29, 2016

While the Internet of Things blossoms with newly connected objects every day, the security and privacy of these objects is often overlooked, making the IoT a major security concern. Unfortunately, reverse-engineering so-called smart devices is not an easy task. In her VB2016 paper, Axelle Apvrille presented a novel way of analysing smart devices: by looking at the accompanying mobile app. Today, we publish both Axelle’s paper and the video recording of her VB2016 presentation.

Read more  

VB2016 paper: Wave your false flags! Deception tactics muddying attribution in targeted attacks

Posted by   Martijn Grooten on   Nov 21, 2016

Today, we publish the VB2016 paper and presentation (recording) by Kaspersky Lab researchers Juan Andrés Guerrero-Saade and Brian Bartholomew, in which they look at some of the deception tactics used in targeted attacks.

Read more  

Throwback Thursday: The Politics of Anti-Virus

Posted by   Helen Martin on   Nov 10, 2016

President-elect of the United States Donald Trump made a number of promises about cybersecurity during his electoral campaign. What comes of those pledges remains to be seen, but one thing is certain: there will be a team of hard-working, dedicated individuals working behind the scenes to protect the computer systems of Federal government agencies, as there have been for years. Back in 1999, VB published a report describing a day in the life of the Affiliated Computer Services Government Solutions Group (ACS GSG) - the group responsible for providing full service computer support to US Federal government agencies across the United States.

Read more  

VB2016 paper: The TAO of Automated Iframe Injectors - Building Drive-by Platforms For Fun

Posted by   Martijn Grooten on   Oct 18, 2016

We publish Aditya K. Sood's VB2016 paper on the use of iframe injectors by cybercriminals to deliver drive-by downloads.

Read more  

“Cybersecurity is, at its core, a people problem,” says VB2016 keynote speaker

Posted by   Virus Bulletin on   Sep 26, 2016

An interview with VB2016’s keynote speaker Christine Whalley - Director, Governance and IT Risk Management at Pfizer

Read more  

Throwback Thursday: Following the Breadcrumbs

Posted by   Helen Martin on   Sep 22, 2016

In 1999, Christine Orshesky described how one large organization decided to find out how and where the viruses within it were being obtained so it could do more to protect its networks.

Read more  

VB2016 preview: Cryptography mistakes in malware

Posted by   Martijn Grooten on   Sep 15, 2016

At VB2016, two talks will discuss mistakes made by malware authors in cryptographic implementations. Ben Herzog and Yaniv Balmas will present a paper in which they look at a number of these mistakes, while Malwarebytes researcher hasherezade will present a last-minute paper on making use of some of these mistakes to crack ransomware.

Read more  

GPS technology is more at risk from cyber attack than ever before, security expert demonstrates at VB2016

Posted by   Virus Bulletin on   Sep 14, 2016

Next month at VB2016, HPE Security's Oleg Petrovsky will speak about attacks on GPS. We conducted a short interview with Oleg and asked him about GPS, about the conference, and about his ultimate dinner party.

Read more  

BSides Denver: Join and Support the Security Community

Posted by   Martijn Grooten on   Sep 13, 2016

If you are coming to VB2016 in Denver, why not spend an extra day in the Mile-High City and join the free BSides Denver conference, which takes place on Saturday?

Read more  

VB2016 'Last-Minute' Papers Announced

Posted by   Martijn Grooten on   Sep 13, 2016

We are excited to announce the addition of the "last-minute" papers to the VB2016 programme: nine presentations covering hot research topics, from OS X attacks to exotic APTs, breaking ransomware and the current state of BGP.

Read more  

Search blog

Service or bust

So confident is Trend Micro of its virus detection abilities that it is offering a financial penalty-backed detection guarantee.
So confident is Trend Micro of its virus detection abilities that it is offering a financial penalty-backed detection guarantee. So confident is Trend Micro of its virus detection… https://www.virusbulletin.com/blog/2002/10/service-or-bust/

October

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2002/10/

Viruses - Some Good

Just occasionally, a virus infection can have some positive effects...
Just occasionally, a virus infection can have some positive effects... Much like biological viruses, it turns out that infections by computer viruses can lead to increased measures… https://www.virusbulletin.com/blog/2002/09/viruses-some-good/

Bring on the DEET

The latest award for the most tenuous product-pushing story goes to BitDefender, whose marketeers claim a 'mosquito-borne disease could easily become a computer infection.'
The latest award for the most tenuous product-pushing story goes to BitDefender, whose marketeers claim a 'mosquito-borne disease could easily become a computer infection.' The… https://www.virusbulletin.com/blog/2002/09/bring-deet/

Virtually There

The Infosecurity show and exhibition has gone virtual with the launch of the first Infosecurity World Online exhibition. But where are the sweets?
The Infosecurity show and exhibition has gone virtual with the launch of the first Infosecurity World Online exhibition. But where are the sweets? The Infosecurity show and… https://www.virusbulletin.com/blog/2002/09/virtually-there/

September

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2002/09/

The youth of today...

Five Israeli teenagers have been charged in connection with writing and disseminating W32/Goner.
Five Israeli teenagers have been charged in connection with writing and disseminating W32/Goner. According to Israeli newspaper Ha'aretz, five youngsters have been charged with… https://www.virusbulletin.com/blog/2002/08/youth-today/

Bugs galore

Symantec's acquisition of SecurityFocus last month has unsettled a number of contributors to the BugTraq vulnerability list. So much so that they created a new one.
Symantec's acquisition of SecurityFocus last month has unsettled a number of contributors to the BugTraq vulnerability list. So much so that they created a new one. At the news of… https://www.virusbulletin.com/blog/2002/08/bugs-galore/

Third time unlucky

NAI's third attempt to re-acquire McAfee.com was scuppered yesterday when 96% of McAfee.com shareholders rejected NAI's latest exchange offer for McAfee.com shares.
NAI's third attempt to re-acquire McAfee.com was scuppered yesterday when 96% of McAfee.com shareholders rejected NAI's latest exchange offer for McAfee.com shares.NAI's third… https://www.virusbulletin.com/blog/2002/08/third-time-unlucky/

August

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2002/08/

Retail Therapy

Symantec has been on a blow-out shopping spree...
Symantec has been on a blow-out shopping spree... Symantec has been on a blow-out shopping spree. Perhaps it was its purchase of Mountain Wave earlier this year that put the… https://www.virusbulletin.com/blog/2002/08/retail-therapy/

Erratum: Windows XP comparative review: McAfee VirusScan

After re-testing, McAfee's VirusScan product gains a VB 100% award.
After re-testing, McAfee's VirusScan product gains a VB 100% award. Unfortunately an error occurred in Virus Bulletin's Windows XP comparative review (see VB June 2002, p.21):… https://www.virusbulletin.com/blog/2002/07/erratum-windows-xp-comparative-review-mcafee-virusscan/

Crying wolf revisited

While one AV vendor comes in for a roasting, the others enjoy the rare taste of the moral high ground.
While one AV vendor comes in for a roasting, the others enjoy the rare taste of the moral high ground. Last month was Network Associates' turn to come in for a roasting over its… https://www.virusbulletin.com/blog/2002/07/crying-wolf-revisited/

Quarter byte squaw?

Worryingly, many sysadmins seemed unaware both of the Apache 'chunked encoding' bug and of their systems' vulnerability...
Worryingly, many sysadmins seemed unaware both of the Apache 'chunked encoding' bug and of their systems' vulnerability... This month has seen the elevation of what was thought… https://www.virusbulletin.com/blog/2002/07/quarter-byte-squaw/

July

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2002/07/

Windows XP Professional comparative review

After re-testing, Panda Antivirus Platinum's on-access scanner product gains a VB 100% award.
After re-testing, Panda Antivirus Platinum's on-access scanner product gains a VB 100% award. Since the publication of the Windows XP comparative review in the June edition of… https://www.virusbulletin.com/blog/2002/06/windows-xp-professional-comparative-review/

Shakira cynicism

As reports begin to appear of the latest VBSWG variant climbing prevalence tables, VB has received a particularly relevant comment from sys-admin Scott Francis.
As reports begin to appear of the latest VBSWG variant climbing prevalence tables, VB has received a particularly relevant comment from sys-admin Scott Francis. As reports begin… https://www.virusbulletin.com/blog/2002/06/shakira-cynicism/

As complex as Euler's formula

IT news website Slashdot's report of Simile's cross-platform capabilities was met with the usual host of ill-informed, biased and naïve comments from users of the site.
IT news website Slashdot's report of Simile's cross-platform capabilities was met with the usual host of ill-informed, biased and naïve comments from users of the site. IT news… https://www.virusbulletin.com/blog/2002/06/complex-euler-s-formula/

June

Anti-virus and security related news provided by independent anti-virus advisors, Virus Bulletin
https://www.virusbulletin.com/blog/2002/06/

Outraged of Slovakia

Is there really any need to include virus samples in product tests? CNET seems to think it's not worth the bother.
Is there really any need to include virus samples in product tests? CNET seems to think it's not worth the bother. Recently VB received an email from an outraged user declaring… https://www.virusbulletin.com/blog/2002/05/outraged-slovakia/

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.