Update: Duqu exploits zero-day flaw in Windows kernel

Computerworld – The Duqu trojan infects systems by exploiting a previously unknown Windows kernel vulnerability that is remotely executable, security vendor Symantec said today. Symantec said in a blog post that CrySys, the Hungarian research firm that discovered the Duqu Trojan earlier this month, has identified a dropper file that…

read more

Researcher finds major security flaw in Facebook

A security penetration tester discovered a major flaw in Facebook that could allow a person to send anyone on the social-networking site malicious applications. Nathan Power, a senior security penetration tester at technology consultancy CDW, discovered the vulnerability and publicly disclosed it Thursday on his blog. The flaw was reported…

read more