Violet Blue

Violet Blue is the author of The Smart Girl's Guide to Privacy. She contributes to ZDNet, CNET, CBS News, and SF Appeal.

Larry Seltzer

Larry Seltzer has long been a recognized expert in technology, with a focus on mobile technology and security in recent years

Latest Posts

Microsoft fits 7 patches into .ANI emergency update

Microsoft's out-of-band update for the critical -- and under attack -- animated cursor (.ani) vulnerability has finally  crossed the finish line, one week ahead of Redmond's own schedule but more than three months after it was first reported by a private security research company.

April 3, 2007 by Ryan Naraine


eEye fires CEO Ross Brown

eEye Digital Security has shaken up its top management, firing chief executive officer Ross Brown less than six months after promoting him to the top slot.Kamal Arafeh, who previously managed eEye's sales operations, will be the new CEO.

April 2, 2007 by Ryan Naraine


Sana Security gets $12M, new CEO

Sana Security has scooped up $12 million in a fifth round of funding and hired telco crash survivor Don Listwin to take over the corner office. Sana, which excels at behavior blocking software, is banking on the new CEO to find new customers for its Active Malware Defense Technology and figure out an exit strategy in a very tricky security market.

April 2, 2007 by Ryan Naraine


JavaScript bug-hunting tool leaks out

The source code for Billy Hoffman's Jitko has leaked out onto the Internet.Hoffman was due to release the code for the JavaScript bug hunting tool at SchmooCon last month but after "higher-ups" and Spi Dynamics "change their minds," the tool was withheld from attendees.

April 2, 2007 by Ryan Naraine


Week of Windows Vista bugs?

On the Full Disclosure mailing list comes this announcement from a group of anonymous security researchers: During one week (2007-04-02/08), new undisclosed vulnerabilities / flaws / exploitation techniques discovered in the latest versions of the Microsoft Windows Vista operating system and softwares will be publicly disclosed on this page. This project is launched as a challenge by an unofficial team of security experts.

March 30, 2007 by Ryan Naraine


Trojan masquerades as IE 7 downloads

Spammers are using fake Internet Explorer 7 (Beta 2) downloads to lure Windows users into downloading a nasty backdoor Trojan.The fake downloads are part of a massive spam run that includes an official-looking graphic (see image below) linked to Web sites that auto-launch an executable named "ie7.

March 29, 2007 by Ryan Naraine


Microsoft confirms Windows zero-day, drive-by exploits

[UPDATE: March 29, 2007 @ 1:15 PM Eastern] Microsoft has confirmed that this is indeed a zero-day flaw that will require a security update. Although Internet Explorer is the primary attack vector, this is a vulnerability in the way Windows handles animated cursor (.

March 29, 2007 by Ryan Naraine