Friday, June 25, 2004

Tulip IDE 0.3. Tulip is a PHP-GTK based editor for PHP. It has an interface that allows you to set up your projects and deal with them in a distinct way through an intuitive file explorer tree. It has CVS controls, making it possible to create, update, and delete remote files seamlessly from a CVS server, allowing the programmer to manage several big projects with individual organization for each project. It has controls that lock work files, enhancing security in a networked development environment. It has auto-completion, syntax highlighting, and syntax hints, features provided through GtkScintilla, and configuration files containing all of the syntax rules. It has an embbed Database navigator with which you can access MySQL or PostgreSQL, make queries, and edit or delete records. [freshmeat.net] 2:23:59 PM    comment []  trackback []

What You Should Know About Download.Ject What You Should Know About Download.Ject - "Reports indicate that Web servers running Windows 2000 Server and IIS that have not applied update 835732, which was addressed by Microsoft Security Bulletin MS04-011, are possibly being compromised and being used to attempt to infect users of Internet Explorer with malicious code." 2:20:05 PM    comment []  trackback []

freshmeat.net: Project details for b2evolution freshmeat.net: Project details for b2evolution -  b2evolution, is a multi-lingual, multi-user, multi-blog engine. It was developed to provide a free, feature rich, extensible, and easy-to-install solution for efficient Web publishing of information ranging from professional news feeds to personal weblogs. b2evo can easily be installed on almost any LAMP (Linux, Apache, MySQL, PHP) host in a matter of minutes. 2:08:35 PM    comment []  trackback []

Major Internet Attack Under Way. Security experts say Russian hackers are using a sophisticated attack to compromise major E-commerce Web sites, which then infect visitors with hacker tools designed to steal passwords and financial data, and possibly spew spam. [InternetWeek] 2:02:55 PM    comment []  trackback []

BBC: "Users are being told to avoid using Internet Explorer until Microsoft patches a serious security hole in it. ...the list of compromised sites involves banks, auction and price comparison firms and is growing fast." [Scripting News] 2:02:16 PM    comment []  trackback []

BLOG:CMS 1.1.4 (Forum). A Weblog system. [freshmeat.net] 1:59:53 PM    comment []  trackback []

MS issues warning on Web attacks, pushes XP SP2 beta. Microsoft Corp. acknowledged Thursday that Internet Information Server (IIS), a component of the Windows 2000 Server, and holes in the Internet Explorer Web browser are being used in widespread attacks that are compromising Web pages and using them as launching pads for malicious computer code. [InfoWorld: Top News] 1:48:32 PM    comment []  trackback []

25 Jun JS/Scob-A JS/Scob-A is a Java script trojan that is reported to be appended to HTML files on IIS machines.   JS/Scob-A downloads a file from a Russian website, this website is no longer accessible.  [Latest virus alerts from Sophos] 12:43:59 PM    comment []  trackback []

US-CERT Current Activity US-CERT Current Activity:"US-CERT is aware of new activity affecting compromised web sites running Microsoft's Internet Information Server (IIS) 5 and possibly end-user systems that visit these sites. Compromised sites are appending JavaScript to the bottom of web pages. When executed, this JavaScript attempts to access a file hosted on another server. This file may contain malicious code that can affect the end-user's system. US-CERT is investigating the origin of the IIS 5 compromises and the impact of the code that is downloaded to end-user systems." 12:41:05 PM    comment []  trackback []

WWW.Danger.Net (washingtonpost.com). washingtonpost.com - It looks like the Internet is turning into a world wide minefield this morning. [Yahoo! News - Technology] 10:59:20 AM    comment []  trackback []

New Worm/Trojan Targets IE and IIS   Infoworld is reporting this morning that a new web attack is under away, infecting major websites and downloading malware onto unsuspecting browsers.  The article inscludes this quote: "Security experts have said that the attack only affects users of certain versions of Microsoft Corp.'s Internet Explorer browser. Additionally, Cluley said that it appears that the threat only affects Web servers running Microsoft IIS 5 (Internet Information Services) Web Server software and not Microsoft IIS 6, which comes with Windows 2003 Server. " According to the article major, but unnamed, websites have been hacked and are downloading a trojan to browsing visitors.  The trojan includes a keystroke logger that captures info input, including financial data, from the keyboard and sends it to the hacker's websites. More information: From ZDNet: Researchers warn of infectious Web sites - Security researchers warned Web surfers on Thursday to be on guard after uncovering evidence that widespread Web server compromises have turned corporate home pages into points of digital infection. From CNN: Experts studying Internet attack - Government and industry experts warned late Thursday of a mysterious, large-scale Internet attack against thousands of popular Web sites. The virus-like infection tries to implant hacker software onto the computers of all Web site visitors. From Symantec: JS.Scob.Trojan - JS.Scob.Trojan is a trojan that can be attached to existing files on a Web server. Samples of the trojan have been found attached to image files (JPEG, GIF), and HTML files. When attached to other files, the trojan is detected as JS.Scob.Trojan!inf. From Beta News: New Malware Causes Concern. Developing | NetSec Inc. has detected a new vulnerability that is infecting users of Microsoft Windows with malware. By visiting a malicious website with the Internet Explorer web browser, users can become silently infected with arbitrary code that is embedded in images on web pages. Once installed, the code begins to log keystrokes and then calls home to servers which then upload even more payload onto infected systems. From Yahoo!: Experts Study Developing Internet Attack (AP). AP - Government and industry experts warned late Thursday of a mysterious, large-scale Internet attack against thousands of popular Web sites. The virus-like infection tries to implant hacker software onto the computers of all Web site visitors. From Eweek: Web Graphics Exploit Marching Across Internet. A new Windows vulnerability—delivered from graphics on Web pages—is being exploited across the Internet. Analysts expect a widepread denial-of-service attack to be launched shortly. Earlier from InfoWorld: New attack hitting Web users through major sites.  Internet users visiting some of the most popular sites on the Web may unwittingly be downloading malicious code that compromises their computers and sets up a relay network for a future onslaught of spam, a security services company warned Thursday. 9:25:24 AM    comment []  trackback []

Subscribers to Sun's Java Tools Program to Get Free Opteron Workstation. Sun announces that it will give a new AMD Opteron-based w1100z workstation to developers who sign up for a three-year subscription to the Sun Java Studio Enterprise program. [eWEEK Technology News] This is probably the first shot in a new campaign from Sun to give away hardware to software subscribers.  Will others follow? 8:50:18 AM    comment []  trackback []