http://www.helpmyos.com/security-news-and-updates-f9/-t1.htm The latest security news and critical updates. Fri, 27 Aug 2010 07:38:18 GMT 10 http://i45.tinypic.com/28a5cmc.jpg http://www.helpmyos.com/security-news-and-updates-f9/-t1.htm http://www.helpmyos.com/security-news-and-updates-f9/tdl3-rootkit-x64-goes-in-the-wild-t2203.htm Blaze It took some time but now x64 Windows operating systems are officially the new target of rootkits. We talked about TDL3 rootkit some months ago as the most advanced rootkit ever seen in the wild. Well, the last version of TDL3 was released months ago and documented as build 3.273. After that, no updates have been released to the rootkit driver. This was pretty suspicious, more so if you've been used to seeing rebuild versions of TDL3 rootkit every few days to defeat security software. Obviously, ... Security News and Updates Fri, 27 Aug 2010 07:38:18 GMT http://www.helpmyos.com/security-news-and-updates-f9/tdl3-rootkit-x64-goes-in-the-wild-t2203.htm#6971 http://www.helpmyos.com/security-news-and-updates-f9/tdl3-rootkit-x64-goes-in-the-wild-t2203.htm http://www.helpmyos.com/security-news-and-updates-f9/adobe-releases-security-update-for-shockwave-player-apsb10-20-t2195.htm DragonMaster Jay Critical vulnerabilities have been identified in Adobe Shockwave Player 11.5.7.609 and earlier versions on the Windows and Macintosh operating systems. The vulnerabilities could allow an attacker, who successfully exploits these vulnerabilities, to run malicious code on the affected system. Adobe recommends users of Adobe Shockwave Player 11.5.7.609 and earlier versions update to Adobe Shockwave Player 11.5.8.612 More: http://www.adobe.com/support/security/bulletins/apsb10-20.html CVE-IDs: ... Security News and Updates Wed, 25 Aug 2010 20:22:15 GMT http://www.helpmyos.com/security-news-and-updates-f9/adobe-releases-security-update-for-shockwave-player-apsb10-20-t2195.htm#6956 http://www.helpmyos.com/security-news-and-updates-f9/adobe-releases-security-update-for-shockwave-player-apsb10-20-t2195.htm http://www.helpmyos.com/security-news-and-updates-f9/apple-release-security-update-2010-005-t2194.htm DragonMaster Jay
More: http://support.apple.com/kb/HT4312

CVE-ID: CVE-2010-1800]]> Security News and Updates Wed, 25 Aug 2010 20:20:17 GMT http://www.helpmyos.com/security-news-and-updates-f9/apple-release-security-update-2010-005-t2194.htm#6955 http://www.helpmyos.com/security-news-and-updates-f9/apple-release-security-update-2010-005-t2194.htm http://www.helpmyos.com/security-news-and-updates-f9/vulnerability-in-windows-dlls-t2193.htm DragonMaster Jay US-CERT is aware of a class of vulnerabilities related to how some Windows applications may load external dynamic link libraries (DLLs). When an application loads a DLL without specifying a fully qualified path name, Windows will attempt to locate the DLL by searching a defined set of directories. If an application does not securely load DLL files, an attacker may be able to cause the affected application to load an arbitrary library. By convincing a user to open a file from a location that ... Security News and Updates Wed, 25 Aug 2010 20:18:45 GMT http://www.helpmyos.com/security-news-and-updates-f9/vulnerability-in-windows-dlls-t2193.htm#6954 http://www.helpmyos.com/security-news-and-updates-f9/vulnerability-in-windows-dlls-t2193.htm http://www.helpmyos.com/security-news-and-updates-f9/most-dangerous-trojan-virus-ever-steals-over-1-million-t2175.htm DragonMaster Jay The Zeus Trojan, called the “most dangerous virus ever created” has stolen £675,000 from a British financial institution, and it isn’t done yet. It is like the plot of a Hollywood movie, only the bad guys are definitely winning so far. Earlier this week, the internet security group M86 uncovered a Trojan virus targeting an unnamed financial institution in the UK. The “Zeus Trojan” has already siphoned off over $1 million from over 3,000 British customers between July 5 and August ... Security News and Updates Thu, 19 Aug 2010 09:33:02 GMT http://www.helpmyos.com/security-news-and-updates-f9/most-dangerous-trojan-virus-ever-steals-over-1-million-t2175.htm#6884 http://www.helpmyos.com/security-news-and-updates-f9/most-dangerous-trojan-virus-ever-steals-over-1-million-t2175.htm http://www.helpmyos.com/security-news-and-updates-f9/critical-adobe-reader-hole-to-be-patched-thursday-t2174.htm DragonMaster Jay Adobe will release a patch on Thursday for a critical hole in Reader that was disclosed at the Black Hat conference late last month, the company said on Wednesday. Adobe had announced on August 5 that the emergency fix was coming this week, in advance of the next quarterly security release, scheduled for October 12. The security update will resolve an undisclosed number of critical issues in Reader 9.3.3 for Windows, Mac, and Unix; Acrobat 9.3.3 for Windows and Mac; and Reader 8.2.3 and ... Security News and Updates Thu, 19 Aug 2010 09:31:22 GMT http://www.helpmyos.com/security-news-and-updates-f9/critical-adobe-reader-hole-to-be-patched-thursday-t2174.htm#6883 http://www.helpmyos.com/security-news-and-updates-f9/critical-adobe-reader-hole-to-be-patched-thursday-t2174.htm http://www.helpmyos.com/security-news-and-updates-f9/tens-of-millions-of-websites-prone-to-trivial-attack-on-adobe-coldfusion-t2173.htm DragonMaster Jay Millions of users of Adobe’s ColdFusion programming language are still at risk of losing control of their applications and websites. Out of the twenty two corporate sites originally surveyed for an exposed ColdFusion admin interface, only two sites have removed the interface with the remaining twenty sites still having the interface exposed. ColdFusion administrators must restrict the admin interface now or their servers will be subject to attacks, also placing their users at risk from uploaded ... Security News and Updates Thu, 19 Aug 2010 09:30:36 GMT http://www.helpmyos.com/security-news-and-updates-f9/tens-of-millions-of-websites-prone-to-trivial-attack-on-adobe-coldfusion-t2173.htm#6882 http://www.helpmyos.com/security-news-and-updates-f9/tens-of-millions-of-websites-prone-to-trivial-attack-on-adobe-coldfusion-t2173.htm http://www.helpmyos.com/security-news-and-updates-f9/adobe-releases-flash-player-update-1018276-t2154.htm DragonMaster Jay
Read more: http://www.adobe.com/support/security/bulletins/apsb10-16.html]]> Security News and Updates Fri, 13 Aug 2010 15:06:10 GMT http://www.helpmyos.com/security-news-and-updates-f9/adobe-releases-flash-player-update-1018276-t2154.htm#6807 http://www.helpmyos.com/security-news-and-updates-f9/adobe-releases-flash-player-update-1018276-t2154.htm http://www.helpmyos.com/security-news-and-updates-f9/security-updates-apple-iphone-ipad-and-ipod-touch-t2153.htm DragonMaster Jay FREETYPE A stack buffer overflow exists in FreeType's handling of CFF opcodes. Viewing a PDF document with maliciously crafted embedded fonts may allow arbitrary code execution. This issue is addressed through improved bounds checking. IO SURFACE An integer overflow exists in the handling of IOSurface properties, which may allow malicious code running as the user to gain system privileges. This issue is addressed through improved bounds checking. Read more, iPhone/iPod Touch: http://support.apple.com/kb/HT4291 Read ... Security News and Updates Fri, 13 Aug 2010 15:04:09 GMT http://www.helpmyos.com/security-news-and-updates-f9/security-updates-apple-iphone-ipad-and-ipod-touch-t2153.htm#6806 http://www.helpmyos.com/security-news-and-updates-f9/security-updates-apple-iphone-ipad-and-ipod-touch-t2153.htm http://www.helpmyos.com/security-news-and-updates-f9/apple-security-update-quicktime-767-t2152.htm DragonMaster Jay
Read more: http://support.apple.com/kb/HT4290]]> Security News and Updates Fri, 13 Aug 2010 14:59:49 GMT http://www.helpmyos.com/security-news-and-updates-f9/apple-security-update-quicktime-767-t2152.htm#6805 http://www.helpmyos.com/security-news-and-updates-f9/apple-security-update-quicktime-767-t2152.htm http://www.helpmyos.com/security-news-and-updates-f9/cisco-ios-vulnerability-tcp-denial-of-service-t2151.htm DragonMaster Jay Cisco IOS® Software Release, 15.1(2)T is affected by a denial of service (DoS) vulnerability during the TCP establishment phase. The vulnerability could cause embryonic TCP connections to remain in a SYNRCVD or SYNSENT state. Enough embryonic TCP connections in these states could consume system resources and prevent an affected device from accepting or initiating new TCP connections, including any TCP-based remote management access to the device. No authentication is required to exploit this ... Security News and Updates Fri, 13 Aug 2010 14:58:18 GMT http://www.helpmyos.com/security-news-and-updates-f9/cisco-ios-vulnerability-tcp-denial-of-service-t2151.htm#6804 http://www.helpmyos.com/security-news-and-updates-f9/cisco-ios-vulnerability-tcp-denial-of-service-t2151.htm http://www.helpmyos.com/security-news-and-updates-f9/using-lnk-files-to-launch-malware-from-usb-drives-t2113.htm Blaze http://www.f-secure.com/weblog/archives/new_rootkit_en.pdf

Also a post by Brian Krebs: http://krebsonsecurity.com/2010/07/experts-warn-of-new-windows-shortcut-flaw/]]> Security News and Updates Fri, 16 Jul 2010 11:38:27 GMT http://www.helpmyos.com/security-news-and-updates-f9/using-lnk-files-to-launch-malware-from-usb-drives-t2113.htm#6412 http://www.helpmyos.com/security-news-and-updates-f9/using-lnk-files-to-launch-malware-from-usb-drives-t2113.htm http://www.helpmyos.com/security-news-and-updates-f9/mozilla-firefox-364-released-t2020.htm DragonMaster Jay To obtain the newest update now: Click the Help menu > Check for Updates. Fixed in Firefox 3.6.4 MFSA 2010-33 User tracking across sites using Math.random() MFSA 2010-32 Content-Disposition: attachment ignored if Content-Type: multipart also present MFSA 2010-31 focus() behavior can be used to inject or steal keystrokes MFSA 2010-30 Integer Overflow in XSLT Node Sorting MFSA 2010-29 Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal MFSA 2010-28 Freed object reuse ... Security News and Updates Wed, 23 Jun 2010 20:51:22 GMT http://www.helpmyos.com/security-news-and-updates-f9/mozilla-firefox-364-released-t2020.htm#6052 http://www.helpmyos.com/security-news-and-updates-f9/mozilla-firefox-364-released-t2020.htm http://www.helpmyos.com/security-news-and-updates-f9/opera-releases-security-update-t2019.htm DragonMaster Jay If you currently use Opera to browse the web, the company recommends that you update your browser with its latest patch. The newest version, 10.54, patches several vulnerabilities that left users exposed on both the Windows and OS X platform. According to dirwell.com, “the fix that has been revealed prevents Opera from being used as a vector for a font issue in the underlying operating system. The bug was said to be on Windows systems and Microsoft issued a patch for it, but for users ... Security News and Updates Wed, 23 Jun 2010 20:49:20 GMT http://www.helpmyos.com/security-news-and-updates-f9/opera-releases-security-update-t2019.htm#6051 http://www.helpmyos.com/security-news-and-updates-f9/opera-releases-security-update-t2019.htm http://www.helpmyos.com/security-news-and-updates-f9/apple-releases-itunes-92-after-security-flaw-t2003.htm DragonMaster Jay Apple has released iTunes 9.2 for Windows systems to address multiple vulnerabilities affecting the ColorSync, ImageIO, and WebKit packages. These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT: http://www.us-cert.gov/current/index.html#apple_releases_itunes_9_2 Apple advisory: http://support.apple.com/kb/HT4220 Security News and Updates Thu, 17 Jun 2010 16:56:00 GMT http://www.helpmyos.com/security-news-and-updates-f9/apple-releases-itunes-92-after-security-flaw-t2003.htm#5989 http://www.helpmyos.com/security-news-and-updates-f9/apple-releases-itunes-92-after-security-flaw-t2003.htm http://www.helpmyos.com/security-news-and-updates-f9/google-researcher-finds-bug-in-xp-t1983.htm DragonMaster Jay Malicious hackers were found to be exploiting a hole on Tuesday affecting Windows XP that a Google researcher disclosed last week before Microsoft had a chance to fix it, the software giant confirmed. There was "limited exploitation" of the unpatched vulnerability, Jerry Bryant, group manager for response communications at Microsoft, said in an e-mail statement. The exploits have been taken down from the Web, but Bryant said he expects there to be further attacks "given the ... Security News and Updates Wed, 16 Jun 2010 19:40:39 GMT http://www.helpmyos.com/security-news-and-updates-f9/google-researcher-finds-bug-in-xp-t1983.htm#5958 http://www.helpmyos.com/security-news-and-updates-f9/google-researcher-finds-bug-in-xp-t1983.htm http://www.helpmyos.com/security-news-and-updates-f9/current-security-update-for-adobe-flash-06-10-10-t1976.htm DragonMaster Jay Adobe categorizes this as a critical update and recommends affected users update their installations to the newest versions. Critical vulnerabilities have been identified in Adobe Flash Player version 10.0.45.2 and earlier. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2010-1297). Note: There are reports ... Security News and Updates Mon, 14 Jun 2010 21:05:10 GMT http://www.helpmyos.com/security-news-and-updates-f9/current-security-update-for-adobe-flash-06-10-10-t1976.htm#5931 http://www.helpmyos.com/security-news-and-updates-f9/current-security-update-for-adobe-flash-06-10-10-t1976.htm http://www.helpmyos.com/security-news-and-updates-f9/us-cert-releases-several-alerts-6-14-10-t1975.htm DragonMaster Jay "The US-CERT Cyber Security Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. The NVD is sponsored by the Department of Homeland Security (DHS) National Cyber Security Division (NCSD) / United States Computer Emergency Readiness Team (US-CERT)." Please read the current bulletin: http://www.us-cert.gov/cas/bulletins/SB10-165.html Security News and Updates Mon, 14 Jun 2010 21:02:42 GMT http://www.helpmyos.com/security-news-and-updates-f9/us-cert-releases-several-alerts-6-14-10-t1975.htm#5930 http://www.helpmyos.com/security-news-and-updates-f9/us-cert-releases-several-alerts-6-14-10-t1975.htm http://www.helpmyos.com/security-news-and-updates-f9/cv-spam-comes-with-a-malicious-attachment-t1949.htm DragonMaster Jay
Read more: http://blog.trendmicro.com/cv-spam-comes-with-a-malicious-attachment]]> Security News and Updates Thu, 13 May 2010 20:21:10 GMT http://www.helpmyos.com/security-news-and-updates-f9/cv-spam-comes-with-a-malicious-attachment-t1949.htm#5757 http://www.helpmyos.com/security-news-and-updates-f9/cv-spam-comes-with-a-malicious-attachment-t1949.htm http://www.helpmyos.com/security-news-and-updates-f9/current-global-security-threats-april-1-19-2010-t1929.htm DragonMaster Jay
1. Trojan\Ridnu, W32/Ridnu.
2. Trojan\PSW-OnlineGames, Win32\PSW-Stealer.
3. Win32\Sality.
4. Win32\Virut.
5. Trojan\Renos, Win32\Renos, W32/Renos.
6. Win32\Skintrim.
7. W32/Patchload.
8. Trojan\Reser.
9. Trojan\TDSS, Rootkit:TDL3, Win32\TDSS, W32/Tidserv.
10. Win32/Alureon, Trojan\Zlob, Win32\Zlob.]]> Security News and Updates Tue, 20 Apr 2010 00:50:51 GMT http://www.helpmyos.com/security-news-and-updates-f9/current-global-security-threats-april-1-19-2010-t1929.htm#5686 http://www.helpmyos.com/security-news-and-updates-f9/current-global-security-threats-april-1-19-2010-t1929.htm http://www.helpmyos.com/security-news-and-updates-f9/java-re-6-update-20-t1928.htm DragonMaster Jay http://www.java.com

To see release notes, go to this page: http://java.sun.com/javase/6/webnotes/6u20.html]]> Security News and Updates Tue, 20 Apr 2010 00:39:47 GMT http://www.helpmyos.com/security-news-and-updates-f9/java-re-6-update-20-t1928.htm#5685 http://www.helpmyos.com/security-news-and-updates-f9/java-re-6-update-20-t1928.htm http://www.helpmyos.com/security-news-and-updates-f9/out-of-date-security-update-potential-as-a-flaw-was-found-in-internet-explorer-t1871.htm DragonMaster Jay After Patch Tuesday, Microsoft found another flaw in Internet Explorer, and could release another update for it. The update appears to be for versions 6 and 7, and will affect mostly Windows XP and Vista users. Microsoft has urged users to upgrade their browser, as support for Internet Explorer 6 will no longer be supported soon. Also, users are urged to use Internet Explorer 8, as it is much more secure than version 7. Microsoft Senior Security Communications Lead, Jerry Bryant said in ... Security News and Updates Mon, 15 Mar 2010 22:41:51 GMT http://www.helpmyos.com/security-news-and-updates-f9/out-of-date-security-update-potential-as-a-flaw-was-found-in-internet-explorer-t1871.htm#5249 http://www.helpmyos.com/security-news-and-updates-f9/out-of-date-security-update-potential-as-a-flaw-was-found-in-internet-explorer-t1871.htm http://www.helpmyos.com/security-news-and-updates-f9/seo-poisoning-reaches-a-new-level-t1812.htm DragonMaster Jay To improve the chances of installing their malware on random computers, scareware peddlers have decided to set up more that 60 websites that contain hundreds of possible search matches for hot/trending topics. On topics ranging from the Olympics to the death of Alexander McQueen, the searches present not just a few malicious links, but a myriad. If the user follows any of those links, he will be faced with a fake scanning process. This fake software will try to make you pay for its "services". ... Security News and Updates Fri, 26 Feb 2010 01:01:20 GMT http://www.helpmyos.com/security-news-and-updates-f9/seo-poisoning-reaches-a-new-level-t1812.htm#4827 http://www.helpmyos.com/security-news-and-updates-f9/seo-poisoning-reaches-a-new-level-t1812.htm http://www.helpmyos.com/security-news-and-updates-f9/redirection-microsoft-s-february-patches-t1701.htm Gryphon Read now: http://www.helpmyos.com/latest-computer-news-f43/microsoft-to-patch-26-holes-in-windows-office-t1698.htm]]> Security News and Updates Fri, 05 Feb 2010 16:35:32 GMT http://www.helpmyos.com/security-news-and-updates-f9/redirection-microsoft-s-february-patches-t1701.htm#4378 http://www.helpmyos.com/security-news-and-updates-f9/redirection-microsoft-s-february-patches-t1701.htm http://www.helpmyos.com/security-news-and-updates-f9/early-patch-release-for-internet-explorer-t1638.htm E-Mu Microsoft Security Advisory (979352) Vulnerability in Internet Explorer Could Allow Remote Code Execution Published: January 14, 2010 | Updated: January 21, 2010 Version: 2.0 General Information Executive Summary Microsoft has completed the investigation the public reports of this vulnerability. We have issued MS10-002 to address this issue. For more information about this issue, including download links for an available security update, please review MS10-002. The vulnerability ... Security News and Updates Fri, 22 Jan 2010 14:41:50 GMT http://www.helpmyos.com/security-news-and-updates-f9/early-patch-release-for-internet-explorer-t1638.htm#4195 http://www.helpmyos.com/security-news-and-updates-f9/early-patch-release-for-internet-explorer-t1638.htm http://www.helpmyos.com/security-news-and-updates-f9/combofix-issues-t1628.htm E-Mu
The developer has now rectified the problem and downloads should be ok.
For reference the filesize should be 3.7 MB.

If you are having issues try re-downloading. If this does not resolve it then please reply to this post.

Thanks.]]> Security News and Updates Tue, 19 Jan 2010 19:27:10 GMT http://www.helpmyos.com/security-news-and-updates-f9/combofix-issues-t1628.htm#4173 http://www.helpmyos.com/security-news-and-updates-f9/combofix-issues-t1628.htm http://www.helpmyos.com/security-news-and-updates-f9/8000-logins-stolen-after-bank-server-hack-t1597.htm E-Mu Hackers have stolen the login credentials for more than 8,300 customers of small New York bank after breaching its security and accessing a server that hosted its online banking system. The intrusion at Suffolk County National Bank happened over a six-day period that started on November 18, according to a release (PDF) issued Monday. It was discovered on December 24 during an internal security review. In all, credentials 8,378 online accounts were pilfered, a number that represents less than ... Security News and Updates Wed, 13 Jan 2010 12:03:54 GMT http://www.helpmyos.com/security-news-and-updates-f9/8000-logins-stolen-after-bank-server-hack-t1597.htm#4066 http://www.helpmyos.com/security-news-and-updates-f9/8000-logins-stolen-after-bank-server-hack-t1597.htm http://www.helpmyos.com/security-news-and-updates-f9/mbam-143-released-t1563.htm E-Mu Malwarebytes' Anti-Malware version 1.43 released. Recent Changes (FIXED) Minor issue with crash during scans. (FIXED) Minor issues with 704 (0, 0) errors. (FIXED) Problems with memory usage spiking in protection module. (FIXED) Problems detecting certain types of malicious software. (ADDED) Support for Belarusian language. Download Version: 1.43 File Size: 4.82 MB Operating Systems: Microsoft ® Windows 2000, XP, Vista, 7. Languages Available: English, Albanian, Arabic, Belarusian, ... Security News and Updates Wed, 30 Dec 2009 22:59:41 GMT http://www.helpmyos.com/security-news-and-updates-f9/mbam-143-released-t1563.htm#3921 http://www.helpmyos.com/security-news-and-updates-f9/mbam-143-released-t1563.htm http://www.helpmyos.com/security-news-and-updates-f9/adobe-releases-security-bulleting-covering-adobe-reader-vulnerabilities-t1528.htm DragonMaster Jay Adobe has confirmed a critical vulnerability in Adobe Reader and Acrobat 9.2 and earlier versions that could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being actively exploited in the wild. Adobe recommends customers follow the mitigation guidance below until a patch is available. Adobe plans to make available an update to Adobe Reader and Acrobat by January 12, 2010 to resolve the issue. Advisory: ... Security News and Updates Thu, 17 Dec 2009 00:22:49 GMT http://www.helpmyos.com/security-news-and-updates-f9/adobe-releases-security-bulleting-covering-adobe-reader-vulnerabilities-t1528.htm#3826 http://www.helpmyos.com/security-news-and-updates-f9/adobe-releases-security-bulleting-covering-adobe-reader-vulnerabilities-t1528.htm http://www.helpmyos.com/security-news-and-updates-f9/mozilla-releases-firefox-356-and-3016-t1527.htm DragonMaster Jay Mozilla has released Firefox 3.5.6 and Firefox 3.0.16 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, operate with escalated privileges, or mislead users. These vulnerabilities may also affect SeaMonkey and Thunderbird. US-CERT encourages users and administrators to review the security advisories for their version of Firefox and upgrade to Firefox 3.5.6 or Firefox 3.0.16 to help mitigate the ... Security News and Updates Thu, 17 Dec 2009 00:21:49 GMT http://www.helpmyos.com/security-news-and-updates-f9/mozilla-releases-firefox-356-and-3016-t1527.htm#3825 http://www.helpmyos.com/security-news-and-updates-f9/mozilla-releases-firefox-356-and-3016-t1527.htm http://www.helpmyos.com/security-news-and-updates-f9/security-updates-available-for-adobe-flash-player-dec-8-2009-t1501.htm DragonMaster Jay Critical vulnerabilities have been identified in Adobe Flash Player version 10.0.32.18 and earlier. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system. Adobe recommends users of Adobe Flash Player 10.0.32.18 and earlier versions update to Adobe Flash Player 10.0.42.34. Adobe recommends users of Adobe AIR version 1.5.2 and earlier versions update to Adobe AIR 1.5.3. Read more: http://www.adobe.com/support/security/bulletins/apsb09-19.html Security News and Updates Wed, 09 Dec 2009 21:20:01 GMT http://www.helpmyos.com/security-news-and-updates-f9/security-updates-available-for-adobe-flash-player-dec-8-2009-t1501.htm#3746 http://www.helpmyos.com/security-news-and-updates-f9/security-updates-available-for-adobe-flash-player-dec-8-2009-t1501.htm http://www.helpmyos.com/security-news-and-updates-f9/december-s-patch-tuesday-t1490.htm E-Mu Microsoft is set to release six patches on December 8, 2009. Three of the six patches are marked as Critical, while the other three patches are labeled as Important. These six patches should be the last release package of the year from Microsoft. Microsoft will be patching a remote code execution on fix out of six patches and one denial of service security hole. The six patches released on Tuesday will patch holes in Windows, Microsoft Office, and Internet Explorer. The patches ... Security News and Updates Mon, 07 Dec 2009 14:14:44 GMT http://www.helpmyos.com/security-news-and-updates-f9/december-s-patch-tuesday-t1490.htm#3722 http://www.helpmyos.com/security-news-and-updates-f9/december-s-patch-tuesday-t1490.htm http://www.helpmyos.com/security-news-and-updates-f9/avast-false-positives-t1483.htm E-Mu A new update for Avast anti-virus software is reporting to be giving off false positives on their system. Avast is alerting users of freshly downloaded files that they might be at risk, even when the file is safe. Avast is reporting safe applications such as Spybot – Search and Destroy, Skype and other applications incorrectly that they may contain the Win32:Delf-MZG Trojan. Avast has quickly reacted to the false alarm claims and released another definition update 3.12.2009 - 91203-1, ... Security News and Updates Fri, 04 Dec 2009 18:57:48 GMT http://www.helpmyos.com/security-news-and-updates-f9/avast-false-positives-t1483.htm#3685 http://www.helpmyos.com/security-news-and-updates-f9/avast-false-positives-t1483.htm http://www.helpmyos.com/security-news-and-updates-f9/scamming-results-on-yahoo-continue-t1455.htm DragonMaster Jay Yahoo! has still not filtered its sponsored search results, and Internet users are being tricked much more commonly. Doing a search of www.kaspersky.com - the website of an excellent security company, Kaspersky, would return the following results (sponsor): Pointed out are the bad results, that are plaguing Internet users in to traps. Malware, rogues, and spam are the results for just a search for Kaspersky.com. Here is a big warning: do not ever click on a sponsored result, ... Security News and Updates Tue, 01 Dec 2009 09:58:08 GMT http://www.helpmyos.com/security-news-and-updates-f9/scamming-results-on-yahoo-continue-t1455.htm#3605 http://www.helpmyos.com/security-news-and-updates-f9/scamming-results-on-yahoo-continue-t1455.htm http://www.helpmyos.com/security-news-and-updates-f9/conficker-confounded-good-guys-on-case-t1397.htm DragonMaster Jay The Conficker computer worm -- even if it does nothing much to the world's computer networks -- seems to have created an international state of anxiety. But some computer scientists say they may have the bug under control. "We pulled off a bit of a coup," Dan Kaminsky, a computer security specialist for the firm IOActive, wrote in an e-mail to us. What did they do? Well, Conficker, sophisticated as it may be, is really nothing more than lines of code -- letters and numbers, ... Security News and Updates Wed, 11 Nov 2009 06:55:43 GMT http://www.helpmyos.com/security-news-and-updates-f9/conficker-confounded-good-guys-on-case-t1397.htm#3438 http://www.helpmyos.com/security-news-and-updates-f9/conficker-confounded-good-guys-on-case-t1397.htm http://www.helpmyos.com/security-news-and-updates-f9/adobe-security-advisory-patch-tuesday-october-2009-t1315.htm DragonMaster Jay Adobe has republished security bulletin APSB09-015 to address multiple vulnerabilities in Adobe Reader and Acrobat. These vulnerabilities may allow an attacker to execute arbitrary code, escalate local privileges, or cause a denial-of-service condition. Source: http://www.us-cert.gov/current/index.html#adobe_releases_security_bulletin_for7 Bulletin: http://www.adobe.com/support/security/bulletins/apsb09-15.html Previous news: http://www.helpmyos.com/latest-computer-news-f43/hackers-play-around-and-exploit-the-fourth-pdf-zero-day-of-the-year-t1302.htm Security News and Updates Wed, 14 Oct 2009 01:41:13 GMT http://www.helpmyos.com/security-news-and-updates-f9/adobe-security-advisory-patch-tuesday-october-2009-t1315.htm#3160 http://www.helpmyos.com/security-news-and-updates-f9/adobe-security-advisory-patch-tuesday-october-2009-t1315.htm http://www.helpmyos.com/security-news-and-updates-f9/microsoft-security-bulletin-october-2009-multiple-critical-vulnerabilities-t1314.htm DragonMaster Jay Microsoft has released an update to address vulnerabilities in Microsoft Windows, Silverlight, Internet Explorer, .NET Framework, Office, SQL Server, Developer Tools, and Forefront as part of the Microsoft Security Bulletin Summary for October 2009. These vulnerabilities may allow an attacker to execute arbitrary code, operate with escalated privileges, cause a denial-of-service condition, or spoof an end user or website. Source: http://www.us-cert.gov/current/index.html#microsoft_releases_october_security_bulletin1 Bulletin: ... Security News and Updates Wed, 14 Oct 2009 01:37:21 GMT http://www.helpmyos.com/security-news-and-updates-f9/microsoft-security-bulletin-october-2009-multiple-critical-vulnerabilities-t1314.htm#3159 http://www.helpmyos.com/security-news-and-updates-f9/microsoft-security-bulletin-october-2009-multiple-critical-vulnerabilities-t1314.htm http://www.helpmyos.com/security-news-and-updates-f9/patch-tuesday-131009-t1294.htm E-Mu Microsoft confirmed on Wednesday that the company plans to push out a security fix for a critical security hole in Windows 7 next Tuesday. Microsoft officials posted an advanced security bulletin today that confirms Windows XP will have 6 critical holes patched, Windows Vista 5 critical holes and Windows 7 only one. Microsoft's critical rating is the highest out of all definitions used by the company, described as "a vulnerability whose exploitation could allow the propagation of an ... Security News and Updates Fri, 09 Oct 2009 10:52:51 GMT http://www.helpmyos.com/security-news-and-updates-f9/patch-tuesday-131009-t1294.htm#3106 http://www.helpmyos.com/security-news-and-updates-f9/patch-tuesday-131009-t1294.htm http://www.helpmyos.com/security-news-and-updates-f9/new-version-of-windows-update-agent-available-download-link-inside-t1263.htm DragonMaster Jay http://support.microsoft.com/kb/949104/

Thanks!

The Ultimate Geek TaskForce!]]> Security News and Updates Mon, 05 Oct 2009 08:21:13 GMT http://www.helpmyos.com/security-news-and-updates-f9/new-version-of-windows-update-agent-available-download-link-inside-t1263.htm#3037 http://www.helpmyos.com/security-news-and-updates-f9/new-version-of-windows-update-agent-available-download-link-inside-t1263.htm http://www.helpmyos.com/security-news-and-updates-f9/federal-bureau-of-investigation-warns-public-of-fraudulent-spam-email-t1288.htm DragonMaster Jay The Federal Bureau of Investigation (FBI) has released information warning the public about fraudulent email messages purporting to come from the FBI or the Department of Homeland Security. These email messages contain a malicious attachment that claims to provide an intelligence report or bulletin, but in reality attempts to launch malware on the user's system. More information regarding these messages can be found in the Federal Bureau of Investigation's New E-Scams and Warnings web site. To ... Security News and Updates Wed, 07 Oct 2009 08:27:41 GMT http://www.helpmyos.com/security-news-and-updates-f9/federal-bureau-of-investigation-warns-public-of-fraudulent-spam-email-t1288.htm#3083 http://www.helpmyos.com/security-news-and-updates-f9/federal-bureau-of-investigation-warns-public-of-fraudulent-spam-email-t1288.htm http://www.helpmyos.com/security-news-and-updates-f9/microsoft-releases-fix-it-for-smb-vulnerability-t1231.htm DragonMaster Jay Microsoft has released Microsoft Knowledge Base Article 975497 to address a previously reported vulnerability in Microsoft Sever Message Block (SMB). This vulnerability may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators to review Microsoft Knowledge Base Article 975497 and Microsoft Security Advisory 975497 and apply the Fix it tool or workarounds. Microsoft Knowledge Base Article 975497 addresses the vulnerability ... Security News and Updates Tue, 29 Sep 2009 00:16:52 GMT http://www.helpmyos.com/security-news-and-updates-f9/microsoft-releases-fix-it-for-smb-vulnerability-t1231.htm#2975 http://www.helpmyos.com/security-news-and-updates-f9/microsoft-releases-fix-it-for-smb-vulnerability-t1231.htm http://www.helpmyos.com/security-news-and-updates-f9/malicious-code-spreading-via-irs-scam-t1230.htm DragonMaster Jay US-CERT is aware of public reports of malicious code circulating via spam email messages related to the IRS. The attacks arrive via an unsolicited email message and may contain a subject line of "Notice of Underreported Income." These messages may contain a link or attachment. If users click on this link or open the attachment, they may be infected with malicious code, including the Zeus Trojan. US-CERT encourages users and administrators to take the following measures to protect ... Security News and Updates Tue, 29 Sep 2009 00:15:12 GMT http://www.helpmyos.com/security-news-and-updates-f9/malicious-code-spreading-via-irs-scam-t1230.htm#2974 http://www.helpmyos.com/security-news-and-updates-f9/malicious-code-spreading-via-irs-scam-t1230.htm http://www.helpmyos.com/security-news-and-updates-f9/apple-releases-901-t1202.htm DragonMaster Jay Apple has released iTunes 9.0.1 to address a vulnerability that may allow an attacker to execute arbitrary code or cause a denial-of-service condition. Source: http://www.us-cert.gov/current/index.html#apple_releases_itunes_9_0 Bulletin: http://support.apple.com/kb/HT3884 !! It is highly recommended to update immediately to the next iTunes version, to prevent exploitation !! Security News and Updates Wed, 23 Sep 2009 18:41:40 GMT http://www.helpmyos.com/security-news-and-updates-f9/apple-releases-901-t1202.htm#2893 http://www.helpmyos.com/security-news-and-updates-f9/apple-releases-901-t1202.htm http://www.helpmyos.com/security-news-and-updates-f9/microsoft-security-essentials-final-version-t1191.htm E-Mu Microsoft's Security Essentials team has confirmed the final version of Microsoft Security Essentials (MSE) will be made available in the coming weeks. MSE is Microsoft's free anti-virus and anti-spyware product that is set to replace Microsoft's paid Windows Live OneCare subscription service which was withdrawn earlier this year. In an email to beta testers the team thanked testers for their participation and encouraged them to upgrade to version 1.0.1500.0 of the beta to ensure ... Security News and Updates Mon, 21 Sep 2009 12:04:42 GMT http://www.helpmyos.com/security-news-and-updates-f9/microsoft-security-essentials-final-version-t1191.htm#2857 http://www.helpmyos.com/security-news-and-updates-f9/microsoft-security-essentials-final-version-t1191.htm http://www.helpmyos.com/security-news-and-updates-f9/digsby-joins-the-darkside-t890.htm E-Mu The popular Digsby instant messenger client not only bundles half a dozen “optional” applications, it’s also using your computer to crawl the web, do stock market research, and more. Now, during a Digsby install, you are prompted for not one, not two, but six different pieces of "optional" software/applications, and then for good measure they offer to replace your home page with something terrible and take your search engine down a notch. It Gets Even Worse! Your PC ... Security News and Updates Fri, 14 Aug 2009 12:30:31 GMT http://www.helpmyos.com/security-news-and-updates-f9/digsby-joins-the-darkside-t890.htm#2077 http://www.helpmyos.com/security-news-and-updates-f9/digsby-joins-the-darkside-t890.htm http://www.helpmyos.com/security-news-and-updates-f9/new-york-times-ad-scam-t1156.htm E-Mu Some visitors of the New York Times website fell victim to a malware attack over the weekend, after the news site dished out some "less-than-kosher" advertisements. It is reported that scammers effectively swapped an approved ad for one with a fake virus warning in an attempt to scare users into buying phony security software. "The culprit masqueraded as a national advertiser and provided seemingly legitimate product advertising for a week," said spokeswoman Diane ... Security News and Updates Tue, 15 Sep 2009 09:20:34 GMT http://www.helpmyos.com/security-news-and-updates-f9/new-york-times-ad-scam-t1156.htm#2724 http://www.helpmyos.com/security-news-and-updates-f9/new-york-times-ad-scam-t1156.htm http://www.helpmyos.com/security-news-and-updates-f9/9-11-scammers-are-back-t1098.htm DragonMaster Jay Just when you think the hackers couldn't get any lower, they plumb new depths. Cybercriminals heck bent on infecting users with scareware by displaying fake anti-virus scans are hacking legitimate webpages and stuffing them with keywords related to the 9/11 terrorist attack on the United States. Using search engine optimisation (SEO) techniques, the hackers hope to push their poisoned webpages higher up in Google's search results. Sophos has discovered a number of such hacked pages ... Security News and Updates Fri, 11 Sep 2009 20:34:31 GMT http://www.helpmyos.com/security-news-and-updates-f9/9-11-scammers-are-back-t1098.htm#2613 http://www.helpmyos.com/security-news-and-updates-f9/9-11-scammers-are-back-t1098.htm http://www.helpmyos.com/security-news-and-updates-f9/mozilla-patch-10-firefox-vulnerabilities-t1092.htm E-Mu Mozilla on Wednesday patched 10 security vulnerabilities in Firefox 3.5, all but one ranked critical, as it delivered the first update that automatically checks for outdated versions of the popular Flash Player plug-in. In four separate sets of patches, Firefox 3.5.3 fixed a total of 10 flaws, the majority of them stability issues in the application's browser and JavaScript rendering engines, some of which Mozilla said might be exploitable by hackers. Read In Full Security News and Updates Thu, 10 Sep 2009 12:20:52 GMT http://www.helpmyos.com/security-news-and-updates-f9/mozilla-patch-10-firefox-vulnerabilities-t1092.htm#2580 http://www.helpmyos.com/security-news-and-updates-f9/mozilla-patch-10-firefox-vulnerabilities-t1092.htm http://www.helpmyos.com/security-news-and-updates-f9/microsoft-released-september-security-bulletin-t1078.htm DragonMaster Jay Microsoft has released security advisory 975497 to address reports of a vulnerability in Microsoft Server Message Block. The vulnerability may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators to review Microsoft Security Advisory 975497 and implement the suggested workarounds listed in the advisory to help mitigate the risks. US-CERT will provide additional information as it becomes available. ... Security News and Updates Wed, 09 Sep 2009 18:01:57 GMT http://www.helpmyos.com/security-news-and-updates-f9/microsoft-released-september-security-bulletin-t1078.htm#2542 http://www.helpmyos.com/security-news-and-updates-f9/microsoft-released-september-security-bulletin-t1078.htm http://www.helpmyos.com/security-news-and-updates-f9/cisco-advisory-in-multiple-products-t1077.htm DragonMaster Jay Cisco has released a Security Advisory to address a vulnerability in multiple products. This vulnerability may allow a remote attacker to cause a denial-of-service condition. The security advisory indicates that the following Cisco products are affected by this vulnerability: Cisco IOS Software Cisco IOS-XE Software Cisco CatOS Software Cisco Adaptive Security Appliance and Cisco PIX Cisco NX-OS Software US-CERT encourages users and administrators to review Cisco Security ... Security News and Updates Wed, 09 Sep 2009 17:59:51 GMT http://www.helpmyos.com/security-news-and-updates-f9/cisco-advisory-in-multiple-products-t1077.htm#2541 http://www.helpmyos.com/security-news-and-updates-f9/cisco-advisory-in-multiple-products-t1077.htm