Stories about: eEye Digital Security

A rootkit that hides from Windows on the hard drive's boot sector is infecting PCs, security researchers said Wednesday. Once installed, the cloaking software is undetectable by most current antivirus programs.

A look at the all time greatest controversies in the history of the networking industry.

When Apple introduced the latest version of its Safari browser two weeks ago, it took the hacking community just hours to start reporting bugs in the beta code. On Friday, the iPhone is likely to get even closer scrutiny from many of the same security researchers. Here's a list of the top items on the typical iPhone hacker's to-do list.

When a major vulnerability affecting every flavor of Windows -- including Vista -- breaks, it only seems like chaos ensues. Okay, so it is chaos. Witness the so-far short-lived flaw in Windows' animated cursors (ANI), which picked up enough steam over the weekend to power a turbine or two. IT staff, small business users and consumers have been trying to figure out which way is up, and whether this is a Big Deal or just another security industry siren blaring in the background. This FAQ on the flaw, explains what it is, which machines are at risk and what you can do to protect yourself.

As we all know, not everyone is fortunate enough to have a blank check for security-related procurement and implementation. As security executives, we are often called upon to pull a rabbit out of the hat on short notice and make security issues disappear. Making the best of your allocated budget may at times call for primary or supplementary solutions that are freely available. This strategy cuts procurement time completely out of the loop as well. Here's a list of security tools available on the Web for free that you should add to your toolbox.

Insecure coding and loose deployments of enterprise management applications could turn antivirus, patch management and systems management applications into powerful and malicious botnets, according to research presented at the Black Hat Briefings Conference in Las Vegas.

Zero-day exploits such as those targeting an unpatched vulnerability in Microsofts Internet Explorer Web browser are exposing some of the limitations of the company's monthly patch release schedule, users and analysts said Tuesday.

Vulnerability management starts with tools that assess security in network gear and applications, but it's a road that forks, one way leading to host- or agent-based scanners and the other to network-based or agentless scanners.

Viruses that target handhelds can be even more dangerous than their cousins that attack PCs, spawning self-replicating programs that hide easily, a security researcher told an audience of security professionals at the Black Hat Briefings conference in Las Vegas last week.

With the spread of the dangerous new W32/Blaster Windows worm slowing, attention is shifting to Microsoft Corp.'s efforts to help its customers patch vulnerable systems, with some accusing the company of providing inadequate protection and unreliable information about protecting their computers.