Author Archives: Hacker Medic

What is Encryption?

      No Comments on What is Encryption?

Encryption is the science of encoding and decoding secret messages.  It began as cryptography—the ancient Greeks used it to protect sensitive information that might fall into the hands of their enemies. More recently, governments have used encryption for military purposes, but these days the term if often used in reference to online security. Encryption is Read more…

Insecure ASP.NET Site Configuration Could Allow Elevation of Privilege – Version: 2.0

Revision Note: V2.0 (September 9, 2014): Advisory rereleased to announce the offering of the security update via Microsoft Update, in addition to the Download-Center-only option that was provided when this advisory was originally released.Summary: Micr…

2871997 – Update to Improve Credentials Protection and Management – Version: 3.0

Revision Note: V3.0 (September 9, 2014): Rereleased advisory to announce the release of update 2982378 to provide additional protection for users’ credentials when logging into a Windows 7 or Windows Server 2008 R2 system. See Updates Related to this Advisory for details.
Summary: Microsoft is announcing the availability of updates for supported editions of Windows 7, Windows Server 2008 R2, Windows 8, Windows Server 2012, Windows RT, Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 that improve credential protection and domain authentication controls to reduce credential theft.

2755801 – Update for Vulnerabilities in Adobe Flash Player in Internet Explorer – Version: 28.0

Revision Note: V28.0 (September 9, 2014): Added the 2987114 update to the Current Update section.Summary: Microsoft is announcing the availability of an update for Adobe Flash Player in Internet Explorer on all supported editions of Windows 8, Windows …

2905247 – Insecure ASP.NET Site Configuration Could Allow Elevation of Privilege – Version: 2.0

Revision Note: V2.0 (September 9, 2014): Advisory rereleased to announce the offering of the security update via Microsoft Update, in addition to the Download-Center-only option that was provided when this advisory was originally released.Summary: Micr…

IDs de Apple son blanco de campaña de phishing generada por la botnet Kelihos

Días después de que se descubriera que algunas cuentas de celebridades en iCloud fueron comprometidas, Symantec identificó que una gran red de bots (botnet) está enfocándose en los clientes de Apple a través de una campaña de correos electrónicos de phishing que buscan atraer víctimas para robarles el ID y contraseña de su cuenta de Apple. Kelihos (también conocido como Waledac) es el nombre del código malicioso que está usándose para enviar correos de spam que parecen ser de Apple, en los cuales informan a la víctima que una compra ha sido realizada usando su cuenta de iTunes Store.