Microsoft Patch Tuesday – September 2014
This month the vendor is releasing four bulletins covering a total of 42 vulnerabilities. Thirty-six of this month’s issues are rated Critical.
Read more…
As Mobile Malware Hits the Million Samples Mark It Becomes More Devious than Ever Before
Mobile malware is growing exponentially. We now have more than 1 million malicious samples in our database, up from 100,000 in 2011. Still relatively young, most mobile malware has a pretty simple structure, yet it is designed to effectively steal people’s money. Newer mobile malware is, however, adapting and evolving, slowly embracing more deceitful and […]
Insecure ASP.NET Site Configuration Could Allow Elevation of Privilege – Version: 2.0
Revision Note: V2.0 (September 9, 2014): Advisory rereleased to announce the offering of the security update via Microsoft Update, in addition to the Download-Center-only option that was provided when this advisory was originally released.Summary: Micr…
2871997 – Update to Improve Credentials Protection and Management – Version: 3.0
Revision Note: V3.0 (September 9, 2014): Rereleased advisory to announce the release of update 2982378 to provide additional protection for users’ credentials when logging into a Windows 7 or Windows Server 2008 R2 system. See Updates Related to this Advisory for details.
Summary: Microsoft is announcing the availability of updates for supported editions of Windows 7, Windows Server 2008 R2, Windows 8, Windows Server 2012, Windows RT, Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 that improve credential protection and domain authentication controls to reduce credential theft.
2755801 – Update for Vulnerabilities in Adobe Flash Player in Internet Explorer – Version: 28.0
Revision Note: V28.0 (September 9, 2014): Added the 2987114 update to the Current Update section.Summary: Microsoft is announcing the availability of an update for Adobe Flash Player in Internet Explorer on all supported editions of Windows 8, Windows …
2905247 – Insecure ASP.NET Site Configuration Could Allow Elevation of Privilege – Version: 2.0
Revision Note: V2.0 (September 9, 2014): Advisory rereleased to announce the offering of the security update via Microsoft Update, in addition to the Download-Center-only option that was provided when this advisory was originally released.Summary: Micr…
avast! Mobile Security quiz winners!
AVAST recently surpassed a major milestone: More than 100 million downloads of avast! Mobile Security & Antivirus for Android. To celebrate the phenomenal popularity of avast! Mobile Security, we organized a test-your-knowledge quiz on our popular avast! Facebook page. Our goal was not only to test your knowledge and award participants, but also bring your […]
??? ?? ???? ??? ?? ??? ?? ??
While V2V communications will enable a range of safety applications, securing the protocol will require a system of unprecedented complexity.
Read more…
Significant security challenge for new vehicle communication standard
While V2V communications will enable a range of safety applications, securing the protocol will require a system of unprecedented complexity.
Read more…
IDs de Apple son blanco de campaña de phishing generada por la botnet Kelihos
Días después de que se descubriera que algunas cuentas de celebridades en iCloud fueron comprometidas, Symantec identificó que una gran red de bots (botnet) está enfocándose en los clientes de Apple a través de una campaña de correos electrónicos de phishing que buscan atraer víctimas para robarles el ID y contraseña de su cuenta de Apple. Kelihos (también conocido como Waledac) es el nombre del código malicioso que está usándose para enviar correos de spam que parecen ser de Apple, en los cuales informan a la víctima que una compra ha sido realizada usando su cuenta de iTunes Store.