Virus and Bug Patch AlertThis newsletter is sponsored by Cisco/Verizon Multicast on Private IP Network World's Virus and Bug Patch Alert Newsletter, 05/07/07Lucky 7 patches from Microsoft this weekBy Jason MeserveToday's bug patches and security alerts: Microsoft: Seven patches coming this week Two of the seven bulletins slated for the May 8 release involve Windows, three affect Microsoft Office, and one each impact Microsoft Exchange and the cryptography API within BizTalk Server. At least five of the seven updates will be pegged critical, Microsoft's highest threat score in its four-level system, according to the advance notification posted Thursday. Computerworld, 05/03/07.
Also: Microsoft promises DNS patch Tuesday ********** Mariner Software on Wednesday released Montage 1.2.2, a free update to their screenwriting software for Mac OS X. MacWorld, 05/02/07. ********** A flaw in the way Ubuntu's net-snmp handles certain TCP packets could be exploited by an attacker in a denial of service attack against an affected system. An update is available. ********** A flaw in the xscreensaver could be exploited by an attacker to crash an affected system's network connection and bypass xscreensaver's authentication system. An update is available. ********** Five new updates from rPath: xscreensaver (authentication bypass) ********** Malware news of the day: Trojan impersonates Windows activation to snatch data Symantec researchers Friday warned of an in-the-wild Trojan horse that poses as a Windows activation program to dupe users into entering credit card information in an attempt to reanimate their machines. Computerworld, 05/04/07. ********** From the interesting reading department: New bug-a-day project targets Microsoft's ActiveX Another bug-a-day campaign surfaced Tuesday as the "Month of ActiveX Bugs" debuted. Although some researchers have already dismissed the project as copycat, others are warning its findings might put Windows users at risk of attack. Computerworld, 05/02/07. Microsoft rolls out client-based spyware tool Forefront Client Security is a time saver for busy administrators, but may not be a definitive answer for enterprise malware protection. Network World, 05/05/07. Reading LCD Displays at a Distance We all know that CRT displays radiate like mad, and someone with the right equipment can read them at a distance. Marcus Kuhn demonstrates how to do the same thing with LCD displays. Schneier on Security blog, 05/04/07.
|
Contact the author: Jason Meserve is Network World's Multimedia Editor and writes about streaming media, search engines and IP Multicast. Check out his Multimedia Exchange Weblog. Check out Jason Meserve and Keith Shaw's weekly podcast "Twisted Pair" This newsletter is sponsored by Cisco/Verizon Multicast on Private IP ARCHIVEArchive of the Virus and Bug Patch Alert Newsletter. BONUS FEATUREIT PRODUCT RESEARCH AT YOUR FINGERTIPS Get detailed information on thousands of products, conduct side-by-side comparisons and read product test and review results with Network World’s IT Buyer’s Guides. Find the best solution faster than ever with over 100 distinct categories across the security, storage, management, wireless, infrastructure and convergence markets. Click here for details. PRINT SUBSCRIPTIONS AVAILABLE International subscribers, click here. SUBSCRIPTION SERVICESTo subscribe or unsubscribe to any Network World newsletter, change your e-mail address or contact us, click here. This message was sent to: security.world@gmail.com. Please use this address when modifying your subscription. Advertising information: Write to Associate Publisher Online Susan Cardoza Network World, Inc., 118 Turnpike Road, Southborough, MA 01772 Copyright Network World, Inc., 2007 |
No comments:
Post a Comment