Archive for the ‘Microsoft’ Category

Oct9
by Robert McArdle (Senior Malware Researcher)

Anybody want to know Trend Micro's top secret internal strategic plans for our upcoming projects? How about our financial returns for the next quarter? Well, sorry, obviously we are not going to give that sort of information out publicly—we'd need to be crazy to do something like that. On the other hand, if you want a heads up on Microsoft's upcoming Windows 8 and Windows 9 OSs (128-bit, apparently) just wander over to the LinkedIn social networking site. PC Pro has published a short ...


Sep9
by Jonathan Leopando (Technical Communications)

Microsoft's monthly patch cycle for September has come out, and it's something of a mixed bag for users. While there were only 5 advisories, all of them were rated as Critical by Microsoft, because if exploited all five could be used to execute arbitrary code on user systems. The patches fix vulnerabilities in the JScript Scripting Engine (MS09-045), the DHTML Editing Component ActiveX control (MS09-46), the Windows Media Format runtime (MS09-47), the TCP/IP stack (MS09-48), and the Wireless LAN AutoConfig service ...


Aug11
by Macky Cruz (Technical Communications)

Today's Patch Tuesday from Microsoft comes with 9 security advisories, 5 of which are tagged as critical, 4 as important. Collectively, 19 flaws are addressed in these advisories, 15 of which are critical. This set of advisories also includes the bulletin that addresses the previously exploited Microsoft Office Web Components bug. The critical advisories include patches for vulnerabilities in Microsoft Office Web Components (MS09-043), Remote Desktop Connection (MS09-044), Internet Name Service (MS09-039), Windows Media File Processing (MS09-038), and Active Template library ...


Jul30
by JM Hipolito (Technical Communications)

Hotmail users need to be wary about a malicious spam run that specifically targets users of the said webmail. Senior Security Analyst Rik Ferguson reports that spam messages arrive with text indicating that it has file attachments that are image files with the JPEG format. In truth however, the file names of attachments are actually links that connect to shortened URLs, which in turn connect to malicious URLs. Connecting to the malicious URLs, which are now blocked, leads to the download ...


Jul29
by Jonathan Leopando (Technical Communications)

It's not the second Tuesday of the month, but Microsoft has rushed out several patches for Internet Explorer. These are related to the zero-day exploit that was revealed earlier in the month; however it appears that the underlying vulnerability was not fixed; independent security researchers have discovered the underlying flaw and are ready to release at this week's Black Hat security conference in Las Vegas. Microsoft is preempting the exploitation of this possible issue by taking the highly unusual step ...



© Copyright 2009 Trend Micro Inc. All rights reserved. Legal Notice