Blog

Mashable: It looks like cross-browser, bookmark syncing service Xmarks won’t be going out of business after all. Just over a month after announcing that the service would be closing its doors and shutting down operations come January 2011, the company has announced that it is in the final stages of selling Xmarks to a new owner who is focused on keeping the tool running smoothly. Xmarks announced the news on its official blog, noting that exact details can’t be revealed just yet, but that the service is alive and “things are on track for a ‘new and improved’ Xmarks.” The Xmarks blog says that the Xmarks service will evolve into offering free and premium components. Details about what will be included in the premium offering are promised to come at a later date. ...

Mashable: Microsoft CEO Steve Ballmer has sold 12% of his stake in the tech giant in a transaction worth over $1.3 billion. According to a filing with the SEC, Ballmer has sold 49.3 million Microsoft shares over the last three days, bringing his total ownership to 358.9 million shares, or approximately 4.2% of the company. Essentially, he sold 12% of his shares at a price between $26 and $28. Knowing that the media would notice such a large transaction, Ballmer posted a statement on Microsoft’s website, saying that he sold $1.3 billion in Microsoft shares for financial diversification and tax planning. ...

Will believe that? I hope you don’t

There are always peculiar things malware researchers discover while analyzing new samples. VirusTotal 24/43 Let’s remember the filename as HD Porn TV for later Our victim runs it thinking they will see the latest porno in HD quality. Instead they get a new browser ‘theme’ with a Turkish flavor: Internet Explorer: Firefox: The bad guys hijack Winsock: And filter traffic through: ...

Tom Kelchner, Sunbelt blog: Alert reader Laurie (my boss actually) forwarded a copy an email she received from a friend. It said the sender was “…pleased to announce the newest version of Antivirus 2010 for Windows.” There was a link to click, of course. Something called “Antivirus 2010” for sale in November is very odd for three reasons: It’s nearly 2011 and legitimate AV companies are putting out their 2011 versions. There was a rogue security product last year called “Antivirus 2010.” (VIPRE detection: FraudTool.Win32.Antivirus2010 (v)) Although a lot of companies make a product named Anti-Virus 2010, they usually put their name in front of it, such as “Kaspersky Anti-Virus 2010” or “Norton AntiVirus 2010.” The Antivirus 2010 rogue graphic interface from 2009: ...

The Redmond company today published its announcement for the upcoming November Patch Tuesday. Microsoft wants to release 3 security bulletins which deal with 11 security vulnerabilities within Office and PowerPoint (up to the brand new Office 2011 for Mac) and Forefront Unified Access Gateway. A patch for the just recently detected 0-day vulnerability in Internet Explorer is not in the list. Adobe meanwhile ships an update for the Flash Player to version 10.1.102.64 today and plans one for the Reader and Acrobat next week. The Flash update is available via the Download Center and fixes the“authplay” vulnerability which got public last week. But the company has to deal with a new security vulnerability as well. It’s not yet exploited and it remains currently unknown whether it is exploitable to infect PCs with malware, but Adobe investigates the flaw. On a public security list a so-called Proof-of-Concept (PoC) has been published which just shows a Denial-of-Service attack. ...

Google Operation System blog: Google Chrome is the first browser that has a meaningless version number. Since Chrome is automatically updated, most people use the latest version of the software a few days after it’s released. Google’s help articles aren’t the only ones that ignore Chrome’s version number. Yahoo has recently released a report that recommends developers to assume that Chrome users are running the latest version. “Chrome has been progressing rapidly through versions, and Google has communicated its intent to continue rapid development and short release cycles. As a result, we’ve modified our strategy for Chrome to advise testing on the latest [generally available] release of Chrome as soon as it is issued, with prior versions moving to X-grade as soon as they are superseded.” ...

Ed Bott’s Microsoft Report posted something interesting in ZDNet: You want a good, solid, free antivirus program? Microsoft Security Essentials fills the bill nicely. Unfortunately, even though it was officially released more than a year ago, it’s still one of the best-kept secrets in personal computing. Its installed base of 30 million users worldwide might sound big in raw numbers, but it’s a drop in the bucket compared to the billion-plus Windows PCs in use. ...

SANS.edu: We received a couple of reports about Microsoft’s “Smart Screen” flagging harmless sites as malicious. Initially, we considered the possibility of an infected ad service. But it may be a bug in Smartfilter as well. Some reports on twitter show that the problem has been resolved. Please let us know if you have sample URLs that are still affected. To disable smart screen: Select “Internet Options” from the “Tools” menu. Select the “Advanced” tab and find the “Enable SmartScreen Filter” setting (about the 10th item from the bottom. Scroll all the way down). Needless to say: This will also remove the smart screen protection from real-evil sites, not just from appear-to-be-evil-to-smartscreen-today sites. The setting should only be changed if you can’t wait for the problem to be fixed.