ESET Threat Blog

September 2009 saw some key security analysis raining directly onto the Adobe PDF platform, particularly with SANS pointing towards remote code execution within PDFs as one of the top threat vectors:

Adobe Acrobat, Reader, and Flash Player Remote Code Execution Vulnerability (CVE-2009-1862)
Adobe Reader Remote Code Execution Vulnerability (CVE-2009-1493)

Kudos to Adobe for patching these security holes. What … Read More…

Not one of our Top X lists, this time, but one featured in an article on the SANS site. SANS have been banging the drum for safer coding for quite a while – in fact, they do quite a few courses on safe coding in various development contexts. Admittedly, that gives them a financial incentive to fly … Read More…

Don’t disclose sensitive information on public websites like FaceBook or LinkedIn. Even information that in itself is innocuous can be combined with other harmless information and used in social engineering attacks.
Rather than expand on that point, for now, I’m going to point to another "10 ways to protect yourself" resource: the more good advice on … Read More…