Patch Tuesday for Microsoft
Microsoft’s June Security Advance Notification Microsoft is planning to release ten bulletins addressing 34 vulnerabilities on Tuesday, June 8th. The bulletins are rated as follows: 3 “Critical” and 7 “Important”. The affected software includes: Windows, Microsoft Office, and Internet Explorer. Additionally, Microsoft plans to address the issues highlighted in Security Advisories 983438 and 980088. We [...]
In: Security · Tagged with: microsoft, Patches, Security, Vulnerabilities
April Patches and Updates
1. Denial of Service Conditions in Microsoft Exchange and Microsoft SMTP Service (MS10-024 CVE-2010-0024) Microsoft Windows SMTP Service and Microsoft Exchange are vulnerable to a denial of service, caused by the improper handling of DNS Mail Exchanger (MX) resource records by the Simple Mail Transfer Protocol component. As SMTP services are often exposed to the [...]
In: Security · Tagged with: adobe, microsoft, Patches, Security
Microsoft Internet Explorer Vulnerability
New Exploit Code for Microsoft Internet Explorer Vulnerability Exploit code has surfaced for one of the vulnerabilities in MS10-018, the out-of-cycle bulletin released by Microsoft on March 30. This bulletin addresses multiple vulnerabilities in Internet Explorer including a 0-day vulnerability that was being exploited earlier this month. This most recent exploit code which has been [...]
In: Security · Tagged with: information security, infosec, microsoft, Security, Vulnerabilities
Microsoft
As a reminder, Microsoft is planning to release two security bulletins today, March 9, 2010. Both bulletins carry a maximum severity rating of important and the issues addressed could lead to remote code execution. The first bulletin applies to various versions of Windows XP, Vista and Windows 7 and is rated as important for all [...]
In: Education, Security · Tagged with: microsoft, Patches, Security, update, Vulnerabilities
Top Tips for Twenty Ten
Rules of Social Networking Pay attention to what you post and upload. Social networking is public. Consider images, videos, and information you publish You shouldn’t publish your address, date of birth, etc. Use a nick-name that only your friends know. Choose your friends with care. Do not accept friend requests from people you do not [...]
In: Education, Security · Tagged with: awareness, Security, tips
Microsoft MS10-015 BSOD Issue
Microsoft has acknowledged that there is an issue when applying the update related to advisory MS10-015 on systems that are infected with certain malware strains including one called “Tidserv”. These infected systems have a high likelihood of becoming unbootable displaying a PAGE_FAULT “Blue Screen of Death” (BSOD) error. Microsoft has issued directions on how to [...]
In: Education, Security · Tagged with: bsod, microsoft, Patches, Security, update, Vulnerabilities
Anti-Phishing Procedure for Email
I saw something like this on the Internet and I do want to give credit to where credit is due, but I cannot remember where I found this. We have recreated it for businesses. Please see the following flowchart for procedures on anti-phishing for email.
In: Education, Security · Tagged with: anti-phishing, awareness, email, hackers, id theft, phishing, Security
Why Strong Passwords Are Important
Most systems out in the world are secure. Very secure. Thousands of administrators and technical personnel apply patches and configurations to millions of systems throughout the world on a daily basis. In August 2009, someone hacked into Google, but not through a technical vulnerability within the Google infrastructure. A hacker found a personal email account. [...]
In: Education, Management, Security · Tagged with: awareness, id theft, Management, passwords, protection, safeguard, Security
Some News
Security Risks at Fake ATM Machines Fake ATM machines are not new, but awareness of them is. Have you ever gone into a locally owned gas station that has a small ATM sitting in the corner near the chocolate bars? Not all of them are real. They read card information, allow the person to enter [...]
In: Security · Tagged with: atm, hackers, id theft, information security, infosec, phishing, Security
What is Information Security?
Information Security is a methodology and process of protecting information systems and their contents from unauthorized access, use, disclosure, disruption, modification, and destruction. Information Security to businesses means protecting information about business’ customers, finances, new products or face lost business, law suits and even bankruptcy. Information Security to individuals usually relates to privacy which can [...]
In: Education, Security · Tagged with: business, individual, information security, infosec, Security