On their web site Apple Computers warn that a small number of iPods available for purchase after September 12 have been shipped with a virus on board. The virus only affect users connecting their iPod to a Windows computer.

Read More

Many readers have probably experienced, and now Sophos has warned of, an aggressively distributed spam campaign that uses the name of the popular MySpace social networking site in an attempt to phish information from music lovers. The emails have been spammed out to hundreds of thousands of computer users around the globe in the last week, luring them into clicking on links to a website posing as an online music store.

Read More

As Microsoft issued an out-of-cycle patch for the much discussed VML vulnerability a new vulnerability in PowerPoint is being exploited in what looks like targeted attacks.

Read More

A patch fixing a recently exploited vulnerability in the company's implementation of the Vector Markup Language, which could lead to complete system compromise, has been issued between normal updates. It should be applied immediately.

Read More

A new phishing scam using a fake greeting card notification message lures users to spoofed site that contains a Trojan. This is one of several scams implementing VML IE exploits.

Read More

The Stratio-AN worm has been aggressively distributed by its author since the early hours of Monday morning (September 25th).

Read More

A cracker has discovered another new vulnerability in IE 6 and posted sample exploit code.

Read More

Core Security Technologies has released an advisory describing a serious vulnerability in older version of this client software. If exploited, the vulnerability can lead to full system compromise. Users should urgently upgrade to the latest version of the software though they will lose this 'classical look'.

Read More

On their web site Symantec has reported a new zero day exploit in Word 2000 running under Windows 2000.

Read More

Websense Security Labs has received reports of a new wave of email scams disguised as Microsoft Security Bulletins. Users receive an email message which urges the immediate installation of a cumulative security patch for the "plug and play" vulnerability. Although the Microsoft patch number is similar to a previous alert issued in June, the website and the code that gets downloaded and installed are different.

Read More