Readers might like to follow on a daily basis the "Month of kernel bugs" by HD Moore. Moore is announcing a different kernel bug every day for the month of November.
Personally, I feel he should be reporting these to the vendors, but nonetheless, the bugs are very interesting. Today's bug, was reported to Microsoft in 2004 and hasn't been repaired yet.
Previous announced kernel bugs address Mac's, Linux and Solaris.
Readers should also note that kernal attacks are extremely serious since the kernel is at the heart of the operating system. While the number of kernal attacks as a proportion of the existing malware attacks is low, they are gaining momentum and will be used in more targeted attacks.
Note the blog a few days ago about the effectiveness of anti-spyware vendors being able to detect rootkit kernal attacks and then remove them. The likelihood of a successful kernel attack against your enterprise is currently high.
Guy
www.authenticationworld.com
guy.huntington@authenticationworld.com
del.icio.us