OpenSSL Heartbleed, what the hell has happened here?

Just one day before of Windows XP end of life, the vulnerability with CVE-2014-0160 was published. A lot of blogs have talked about the OpenSSL vulnerability called "Heartbleed Bug". A lot of security administrators have spent our last days focused on patching this security issue... I believe everything has been already said... In this post, I'd...

Read More

Why you shouldn't open files directly from a ZIP file

A few days ago I read this post: WinRar File extension spoofing ( 0DAY ). Here, the author describes for example, how to create a ZIP file with a file inside it which has a JPG extension but when it is opened directly from WinRar, an EXE file is executed. This vulnerability effects Winrar v4.20 and others could be affected. In this post, we will...

Read More

Microsoft XP has died but millions of Zombies-XP are out there

Introduction After 12 years, support for Windows XP ends today, April 8, 2014. That means there will be no more security updates or technical support for Windows XP. So XP has officially died but millions of computers with this operating system installed are still "alive" and will be unprotected against new threats from right now, these are the...

Read More