Showing 9 results for: 2012 ×Secure Web Gateway ×

Blackhole Exploit Kit v2

A few days ago a new version of THE most common exploit kit was released. Unlike most exploit kit authors, who try to keep a low profile, the author of Blackhole publishes his work in Russian forums and even writes...

It's a sunny (zero) day for Java

Java exploits have been used for distributing malware for a while. See for example our blog post from last month. Today a new Java 0-day vulnerability has surfaced up. It came with a public PoC armed and ready for exploitation,...

Wham Bam, the Cutwail/Blackhole Combo

Over the past few weeks we have seen a resurgence of malicious spam with links leading off to the Blackhole exploit kit. Last week about 2% of spam hitting our traps fell into this category, which is pretty significant given...

Internet Explorer Vulnerabilities Gone Wild

It's a busy time for Internet Explorer: Patch Tuesday addressed quite a few issues in IE, and an additional advisory for a 0-day vulnerability which has been exploited in the wild, also in Internet Explorer, soon followed. Naturally, when IE...

Rogue Certificates Set on Flame

It was only a matter of time before we felt Flame's aftershock. Yesterday morning it finally happened. Microsoft published an emergency Security Advisory 2718704 and an associated patch that revokes trust from three intermediate CA certificates: Microsoft Enforced Licensing Intermediate...

Putting Out the Flame

There's a lot of buzz going around in the security field about a big piece of malware, code named "Flame" or "Skywiper". Let's make some sense and try to extinguish the flame wars. There is an excellent paper that was...