zero

Another Adobe Reader security hole emerges

Updated 4:35 p.m. PDT with Adobe saying Windows, Mac and Unix versions of Reader are affected and more details.

Security experts are recommending that people disable JavaScript in Adobe Reader following reports of a vulnerability in the popular portable document format reader on Tuesday.

The vulnerability appears to be due to an error in the "getAnnots()" JavaScript function and exploiting it could allow someone to remotely execute code on the machine, according to an advisory from the US-CERT.

"US-CERT encourages users and administrators to disable JavaScript in Adobe Reader to help mitigate the risk," … Read more

Zero Motorcycles hosts first-ever 24 Hours of Electricross

Zero Motorcycles, manufacturers of the Zero X electric motorcycle, are planning to make history this weekend by hosting the first-ever 24-hour electric motorcycle endurance race, dubbed the 24 Hours of Electricross.

A total of 10 teams from around the globe will line up on the grid early Saturday morning and race in 1-hour shifts for 24 straight hours, potentially setting a world record for longest and largest electric motorcycle endurance race. The Santa Clara Fairgrounds, where the race is being held, typically doesn't allow 24-hour races; there are noise ordinances in place because of the residential areas in close … Read more

Microsoft warns of PowerPoint zero-day flaw

Hackers have launched attacks targeting an unpatched flaw in Microsoft PowerPoint, the company warned Thursday.

The vulnerability, which affects Microsoft Office 2000 SP3, 2002 SP3, and 2003 SP3, can be exploited by getting a person to open a PowerPoint file rigged for the attack. When the file is opened, PowerPoint will access an invalid object in memory. That then allows an attacker to remotely execute code on the system.

In a security advisory, Microsoft said that at present, attacks are not widespread but are tailored to affect specific victims.

"Microsoft is investigating new reports of a vulnerability in Microsoft … Read more

Dell Wasabi adds spice to portable printing

Sure, Polaroid might be 6 feet under (or is it?), but casual photo enthusiasts can still enjoy instant gratification with Dell's Dell Wasabi PZ310 Mobile Printer, just announced today.

The Wasabi uses Zero-Ink (ZINK) technology that replaces cumbersome print cartridges with dye crystals embedded right into the proprietary ZINK paper. The crystals are heated as the paper passes through the printer, rendering clear, sharp images in less than a minute for each 2-inch by 3-inch photo.

ZINK also licenses its technology to other companies for their own unique products. For example, look for cameras and ZINK printers to converge … Read more

Zap introduces zero-emissions, all-electric van

It's not for road trips, but the van that Zap has introduced at the National Automobile Dealers Association convention might just ease the carbon burden for very local transport.

The Zap Shuttle, which can hold five people, is touted as the nation's first 100 percent plug-in, rechargeable electric van. It's meant to replace small shuttle vans that you see going from airport terminals to rental lots and around other short-range areas such as corporate headquarters, college campuses, indoor warehouses, and sports arenas.

The mini-van has optional accessories, such as solar panels, for prolonged use. It has a … Read more

Microsoft looking into WordPad zero-day flaw

Microsoft is investigating reports of a flaw in the WordPad Text Converter for Word 97 files, the company said on Tuesday. A Microsoft blog stated "we are aware of very limited and targeted attacks seeking to exploit this vulnerability."

On Wednesday security researchers reported finding a zero-day flaw affecting Microsoft Internet Explorer 7.

According to Microsoft Security Advisory 960906, the flaw only affects users of Windows 2000 Service Pack 4, Windows XP Service Pack 2, Windows Server 2003 Service Pack 1, and Windows Server 2003 Service Pack 2. This issue does not affect Windows XP Service Pack 3, … Read more

Zero-day exploit hits Internet Explorer

One flaw not addressed in yesterday's Patch Tuesday is a heap overflow within the XML parser reported on Wednesday by Bojan Zdrnja of the SANS Internet Storm Center.

The exploit in the wild on Wednesday creates an XML tag, then waits 6 seconds in an attempt to thwart antivirus engines. The exploit could then crash the browser and run malicious code when the browser is restarted. The user must be running Windows XP or Windows Server 2003, and using Internet Explorer 7.

Zdrnja writes that "at this point in time, it does not appear to be wildly used, … Read more

Buzz Out Loud 859: Don't get your flops in a watt

Rafe and Molly square off over the reuse of air conditioning technology, the fail whale sinks a deal between Facebook and Twitter, Gmail is cracked, and an enterprising astronaut creates the ultimate in must-have space tech: a zero-G coffee cup.

Listen now: Download today's podcast EPISODE 859

Twitter rebuffs a Facebook poke? http://news.cnet.com/8301-17939_109-10106391-2.html

Gmail exploit may allow attackers to forward e-mail http://news.cnet.com/8301-1009_3-10106275-83.html http://www.makeuseof.com/tag/breaking-gmail-security-flaw-more-domains-get-stollen/

EU strikes down French “3 strikes” copyright infringement law http://tech.slashdot.org/article.pl?sid=08/11/23/1952248

Has … Read more

Security Bites 120: When social networks host malware

In this week's Security Bites podcast, Robert Vamosi speaks with Ryan Naraine, security evangelist for Kaspersky and Zero Day blogger for ZDNet, about malicious software.

Naraine recently spoke at a conference on emerging security threats sponsored by the Georgia Tech Information Security Center about the increasing risks of malware on social networks, such as Facebook pages that to lead people to Google pages with additional links to malware sites (a two-step infection process), and the more straightforward approach of Facebook being used for botnets.

In this podcast, Naraine and Vamosi talk about the changing nature of threats today and … Read more

The 404 216: Where no one can hear you scream

Today, Dead Space producer Rich Briggs joins us for the second half of the show to talk about one of the scariest games we've played in recent memory.

But first, we dish out the dirt on video gamer enemy No. 1, Jack Thompson. It seems old Jacky has finally been disbarred from practicing law in the great state of Florida; good riddance. Next, Wilson enlightens us as to why the Internet may be killing our brains and how he knows the guy who can help.

The second half of the show features an interview with Dead Space producer Rich Briggs. We ask Rich all about his terrifyingly good game and what went into making one of the creepiest games of all time. We take live questions from that chat room and see what horror movies influenced Rich and the rest of the Dead Space team.

Finally, our Dan Ackerman contest winner is announced and Zen from Arizona has taken first prize. Check one of his winning submission (Ackerman/Palin), along with some other entries below.

 

EPISODE 216 Download today's podcast Read more