The FireBlog

Symantec Offers Zero-Day Protection That Doesn't Rely On Threat Signatures

Beginning in February, Symantec's will provide Symantec Online Network for Advanced Response (SONAR) as a free add-on to Symantec's Norton AntiVirus 2007 and Norton Internet Security 2007 products.  According to this article in InfoWorldThis zero-day protection tool will look at the behavior of programs running on the computer in order to decide whether they are malicious versus Symantec's traditional signature-based antivirus protection techniques, which compare the program's code to a database of known malware. The software is based on technology received from its acquisition of WholeSecurity in 2005.

Anatomy of a DNS DDoS Amplification Attack

"Anatomy of a DNS DDos Amplification Attack" is a great article that describes in great detail the nuts and bolts of DNS DDos attack and how to survive and reduce the threat of this devastating attack.  For security experts and professionals this is a must read as this particular type of attack can affect large parts of the Internet and cost millions and millions of dollars. 

Microsoft To Release Patch For Zero-Day XML Flaw On November 14th

On November 14th, Microsoft will release a important bulletin with a "critical" fix for a security hole in its XML Core Services software, the company stated on its Web site Thursday morning. This particular vulnerability is a zero-day flaw that's already being exploited for attacks.  This fix is part of their monthly security patch strategy that provides advanced notification of potential threats and fixes. 

New Zero-day Exploit For Microsoft Systems Has Appeared

Their are reports of a vulnerability in the XMLHTTP 4.0 ActiveX Control for Windows.  This control is part of Microsoft XML Core Services 4.0.  Microsoft reports that it is aware of limited attacks that are attempting to use the reported vulnerability.   See link below:

http://www.microsoft.com/technet/security/advisory/927892.mspx

More Web flaws in 2006

According to a story by Robert Lemos of Security Focus, "The latest data from the Common Vulnerabilities and Exposures (CVE) project shows the latest numbers from the vulnerability database found that 4,375 security issues had so far been cataloged in the first nine months of 2006, just shy of the 4,538 issues documented last year."