Astiostech – Blog, News and Updates
#TeamOpenSourceMalaysia
There’s a simple exploit code on SMB2 protocol (implemented in the newer OSes of Microsoft) that can easily remote BSDO a Windows server or client. SRV2.SYS fails to handle malformed SMB headers for the NEGOTIATE PROTOCOL REQUEST functionality. The NEGOTIATE PROTOCOL REQUEST is the first … “Windows SMB2 'SRV2.SYS' Remote Denial of Service Exploit (and screen shots on Windows 2008 SP2)”
Read MoreImmunet, a startup by Symantec senior execs take Antivirus to the cloud. Immunet attempts to aggregate the results and “opinions” of threats from people using this service. This means, if Bob gets an infection from Saudi Arabia, Immunet alongside your antivirus will then update everyone … “Immunet – Antivirus Cloud Computing”
Read MoreIt’s interesting how one AV product suppress the other in just a matter of months. Look at the graphs produced by those so called independent testers. A sample here. Its a big war of AV companies out there. My problem is, it’s sickening to know … “My views on free VS. premiere security products.. and Microsoft’s Antivirus?”
Read MoreMicrosoft Office OWC10.Spreadsheet ActiveX BorderAround() Heap Corruption Vulnerability The specific vulnerability exists in the OWC10.Spreadsheet.10 ActiveX control installed by Microsoft Office. By accessing specific methods in a certain order heap corruption occurs leading to remote code execution. If exploited, complete control of the affected system … “Possible new breed of mass spreading worms ? New vulnerabilities found in MS products.”
Read MoreHave you ever wondered what does Event 4790 or 4767 in your security audit is all about? Well, i do, but i don’t know many many more. These IDs are super important, say for instance the famous 4740. This event ID should always be tracked. … “Security Event Logs – Windows 2008 and Nagios”
Read More