Security Advisor News

21 October 2011
OSX/Flashback.C False Positive
DAT 8630 was published at 1.45PM PST on October 20, 2011 and contained within it a faulty signature for OSX/Flashback.C. A MAC OSX file format was mistakenly matched as a Malware component resulting in multiple files being renamed or quarantined depending upon the policy settings. The resulting impact is a potentially unbootable system. DAT 8632 has been published at 4:30AM PST on October 21, 2011 to remedy the faulty signature. In the event that your system did not update to DAT 8630 or did not report a detection for OSX/Flashback.C you will not be impacted by this false positive. Update: Remediation scripts and additional recovery logic is available via our Support department. Please contact your Support representative for further assistance.
08 November 2010
Contact information for the CA Product Vulnerability Response Team
For reporting a suspected security issue in a CA product.
12 October 2010
CA Anti-Spyware Scorecard v3.0
Describes the characteristics evaluated against applications detected by CA Anti-Spyware.
12 October 2010
CA Anti-Spyware Vendor Appeals Frequently Asked Questions
FAQ for vendor appeals
12 October 2010
CA Anti-Spyware Vendor Appeals Process
Vendors who feel that their products are being incorrectly detected by CA Anti-Spyware should submit a Vendor Appeal.
12 October 2010
Security Advisor Alert Level Descriptions
Overview of threat condition levels.
12 October 2010
Spyware Attributes - Modifying Behaviors
Attributes are perhaps best thought of as meta-behaviors. They can modify various behaviors, increasing or decreasing risk and possibly affecting whether a product passes or fails the scorecard.
12 October 2010
Spyware Behaviors - the Building Blocks of Spyware Analysis
Behaviors are the building blocks of our analysis. The behaviors exhibited by objects are what make them work in concert as an application, and they allow us to assign a coherent, granular risk to a given program.
12 October 2010
Spyware Cookie Scoring Procedure
While accurate analysis of a cookie's impact on privacy is impossible without a full audit of the issuing company's data practices, this scoring procedure attempts to approximate the results.
12 October 2010
Spyware, Adware and User Permission: Meeting CA Anti-Spyware Requirements
CA Anti-Spyware, and products built with its engine, identify potentially unwanted products as Spyware2 based on a set of criteria that describe behaviors commonly observed in known Spyware products.
09 September 2010
State of the Internet 2010: A Report on the Ever-Changing Threat Landscape
2010 Internet Security Outlook
12 March 2010
In-depth Analysis of Hydraq
This In-depth Analysis of Hydraq issued by CA, Inc. describes the underlying attack technique and technical details of the threat discovered targeting high-profile corporate networks last January 2010.
12 October 2007
Stealth Attack: Defending Your Business from Social Engineering
Stealth Attack: Defending Your Business from Social Engineering.
17 September 2007
Submit a Malware Sample
Find out how to submit a malware sample to CA for analysis.
22 August 2007
The Latest Trends in Spyware
The latest trends in spyware threatening the Internet today.