MS05

As our Finnish friends at F-secure have already mentioned this in their blog, we won’t go over MS05-009’s details again.

You have to update MSN Messenger to the latest version for the vulnerability to be fixed.

The reason that we bring this up is that WindowsUpdate doesn’t update MSN Messenger as it isn’t a standard part of Windows.

Although there is an automatic update notification system present in MSNM, it can take a long time for it to actually inform the user about a newer version.

Given the severity of the vulnerability we recommend everyone to update MSN Messenger manually. You can get the latest version at http://messenger.msn.com/Download/.

Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.

Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.

Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on victims.

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.