* Storm: the largest botnet in the world? * Number of malicious e-mails bearing bad links balloons tenfold
Today’s bug patches and security alerts:
Apple Ships iPhone Security Updates
Apple today issued a software update to plug at least 10 security holes in the iPhone, including at least seven fixes for Safari, the device’s built-in Web browser. Security Fix blog, 09/27/07.
Also:
New update breaks hacked iPhones
iPhone’s Bluetooth bug under the hacker microscope
**********
Six new updates from Ubuntu:
libmodplug (buffer overflow, code execution)
elinks (information disclosure)
xfsdump (race condition, file overwrite)
**********
Four new fixes from rPath:
kdebase (authorization bypass)
**********
Three new patches from Mandriva:
kdebase (authorization bypass)
t1lib (buffer overflow, code execution)
**********
Three new updates from Gentoo:
Lighttpd (buffer overflow, code execution)
**********
Today’s malware news:
Storm: the largest botnet in the world?
Storm may not be the most creative or malicious piece of malware ever written, but it’s on track to become the most productive; threat researchers’ recent estimates put the number of PCs it has infected at more than 1 million. Network World, 09/28/07.
A couple of third-party reports on the Storm Worm (aka Peacomm, aka Nuwar, aka Tibs, aka Zheltin, aka CME-711). Arbor Networks’ Security to the Core blog, 09/27/07.
**********
From the interesting reading department:
Number of malicious e-mails bearing bad links balloons tenfold
The percentage of threats arriving in e-mails that rely on links to malicious sites — rather than arriving as file attachments — has ballooned tenfold since the first quarter of the year, a security company said today. Computerworld, 09/27/07.
