The mobile high-tech threat: Smishing

What's the best way to disguise a phishing attempt so no one can tell where a request for personal information or a password really came from? Easy: Send it via text message.

"Smishing" is the name being given to the not-entirely-new but growing practice of sending phishing come-ons and scams via SMS message. And spammers are apparently finding it an increasingly easier proposition to text a phishing message to you rather than to email it traditionally. learn more

Source : http://tech.yahoo.com

MA-154.042009: MyCERT Special Alert - Vulnerability in Microsoft Office PowerPoint Could Allow Remote Code Execution - 0-day Exploit

A critical vulnerability has been identified in Microsoft Office PowerPoint. This vulnerability would cause the application to crash and could potentially allow an attacker to take control of the affected system.

The vulnerability is caused when Microsoft Office PowerPoint accesses an invalid object in memory when parsing a specially crafted PowerPoint file. This creates a condition that allows the attacker to execute arbitrary code.

Essentially, an attacker can trick unsuspecting users into launching a specially crafted document with MS Power Point. learn more

Source :http://www.mycert.org.my