Posts Tagged ‘vulnerability’
Major Windows USB vulnerability patched by Microsoft
Author: Alexander McQueen
Microsoft’s newest Patch Tuesday round of safety updates includes a solution for a vulnerability that can enable assailants to jeopardize Computers using a USB trick. The attack needs physical access to a PC, however allows harmful individuals to simply insert a USB trick and make the system carry out harmful code at the Windows kernel level. Microsoft is rating the susceptability as important, not the greatest score of vital, recommending that the business does not view it as a severe risk in spite of its apparent effects.
The ability to compromise equipments by USB is particularly troublesome for big businesses and ventures running hundreds of Windows equipments. As compromises move far from the conventional software-based exploits to physical …
Related Posts:
BlackBerry says TIFF vulnerability exposes enterprise servers to malware
Author: Charity Woods
BlackBerry has constantly prided itself on its top-notch security attributes, so it’s a little worrying to see the company release a “high seriousness” advisory today warning of a possible make use of. According to the Waterloo-based operation:
Vulnerabilities exist in exactly how the BlackBerry MDS Hookup Service and the BlackBerry Messaging Broker procedure TIFF images for rendering on the BlackBerry smartphone.
Basically, hackers can rig a TIFF file with malware then deceive a BlackBerry individual into loading it via webpage, e-mail or an embedded message, thus enabling the bad men into their company’s Business Server. BlackBerry hasn’t gotten any reports of attacks simply yet, however advises IT administrators to update their BES software all the exact same. The update is available at the source, as are a number of temporary workarounds for those that cannot update their installations just yet.
Submitted under: Cellular phones, Mobile, BlackberryCommentsVia: Naked SecuritySource: BlackBerry Understanding Base
Incoming search terms:
- Powered by Article Dashboard western general insurance company
- Powered by Article Dashboard enabling java internet explorer
- Powered by Article Dashboard ice skating rinks california
- powered by myBB movie the great outdoors
- Published News Upcoming News Submit a New Story Groups deaf ministry
- powered by myBB recipes food network
- powered by SMF bios
- powered by SMF great outdoors channel 7
- Published News Upcoming News Submit a New Story Groups cheap anime
Related Posts:
Samsung now pushing out more updates to address Exynos security vulnerability
Author: Gabe Hall
About two weeks ago, Samsung began presenting a fix to help Galaxy S III owners in the UK with that previously acknowledged Exynos concern. Fast forward to today, and the Korean electronics titan is now providing an over-the-air update to T-Mobile’s Galaxy Note II, which, according to the changelog, “improves protection and provides bug fixes” to the famed smartphone. Meanwhile, Sprint, too, has actually projected a software update, though this one in particular being for the carrier’s Galaxy S II Epic Touch 4G– and it brings security updates that should take care of any existing Exynos susceptabilities, plus there’s likewise the inclusion of “Sprint Connections Optimizer.” Definitely, we could expect comparable patches for more gadgets in the days to come, as we’re all aware that Samsung’s striving on fixing the issue.
Declared under: Mobile phones, Software, Mobile, SamsungCommentsVia: Android CentralSource: Sprint
Incoming search terms:
Related Posts:
Android ‘smishing’ vulnerability discovered by NCSU researchers; Google has a fix incoming
Author: Stacey Cook
The art of smishing (SMS-Phishing) has been engaged in for some time, but a discovery by the wizards at NC State University has found a brand-new vulnerability that could bring the aforesaid act back into the spotlight. Xuxian Jiang’s research team just recently identified the hole and verified that it impacts Gingerbread, Ice Cream Sandwich and Jelly Bean. Put simply, if an Android user downloads an infected application, the attacking program could “make it appear that the user has gotten an SMS, or text, message from somebody on the phone’s contact list or from relied on banks.” This artificial message can easily solicit personal info, such as passwords for user accounts. The team isn’t really going to divulge proof till Google patches it up, however the school has said that Google will certainly be addressing it “in a future Android release.” In the meantime, nonetheless, Jiang suggests extra care when downloading and setting up apps from unidentified sources, while additionally recommending that folks pay close attention to received SMS text messages.
Filed under: Mobile phones, Software, Mobile, GoogleAndroid ‘smishing’
Related Posts:
Tags: 'smishing', Android, Discovered, Google, incoming, NCSU, Researchers, vulnerability | 
No Comments »Microsoft to patch critical Internet Explorer 9 vulnerability next week
Author: Tyler Evans
Microsoft issued its advanced bulletin notification for its July 2012 Patch Tuesday this week. The software maker says it will release nine patches in total next Tuesday, with three of them rated critical and six listed as important. Out of the three critical patches, one will address a vulnerability that affects Internet Explorer 9. “It doesn’t affect IE9′s predecessors, which means that it was introduced in the latest iteration of the browser,” explains Marcus Carey, security researcher at Rapid7. “If you are running IE9, you should definitely apply this patch.”
The two other critical bulletins could allow malicious users to remotely execute code on Windows operating systems, including all supported server and client versions. “Many…
Incoming search terms:
- All Rights Reserved Use of our service is protected by our Privacy Policy and Terms of Service client server application using
- All Rights Reserved Use of our service is protected by our Privacy Policy and Terms of Service child abuse stories
- All Rights Reserved Use of our service is protected by our Privacy Policy and Terms of Service back to school bulletin board
- All Rights Reserved Use of our service is protected by our Privacy Policy and Terms of Service internet explorer 8 problems july
- All Rights Reserved Use of our service is protected by our Privacy Policy and Terms of Service child abuse
- Published News Upcoming News Submit a New Story Groups explorer
Related Posts:
Microsoft patches critical Office vulnerability amid ‘limited, targeted’ attacks
Author: Tristan Richards
Microsoft is releasing a security update to patch a critical vulnerability in the ActiveX controls included in all 32-bit versions of Office, among other products. If exploited with a malicious document or webpage, the vulnerability can allow attackers to execute remote code on their targets’ systems, and according to Microsoft, “limited, targeted attacks” using malicious RTF email attachments have been spotted in the wild.
The security update, MS12-027, patches the vulnerability by disabling the ActiveX control in question and swapping it with a new one. It comes at the same time as five other updates, three of which are labeled critical (they could be used to propagate a worm), but due to the documented attacks, MS12-027 is the…
Related Posts:
Tags: amid, attacks, Critical, limited, Microsoft, Office, patches, targeted, vulnerability |
No Comments »Microsoft to fix Duqu kernel vulnerability and SSL/TLS exploits next Tuesday
Author: Randy Miller
Microsoft confirmed on Thursday that it plans to address two high profile vulnerabilities next Tuesday.
Microsoft is planning to address a Windows kernel issue and SSL/TLS exploits as part of the company’s December Patch Tuesday next week. Security researchers discovered a flaw in the SSL 3.0 and TLS 1.0 protocols in September. The vulnerability is not specific to Windows but Microsoft warned at the time that all web traffic served via HTTPS or mixed content HTTP/HTTPS is affected. Microsoft revealed that an attacker could inject malicious code in a HTTP response, forcing a web browser to execute the code. The code could send several requests inside a TLS/SSL session to a third party HTTPS website. The scenario requires that a user had previously authenticated to a particular session using automatic cookies. The attack is described as a man-in-the-middle scenario allowing an attacker to intercept the HTTPS traffic by exploiting and decrypting portions of the encrypted traffic.
The second flaw is related to a vulnerability discovered in the Duqu malware. Security researchers discovered a previously unknown Windows kernel vulnerability inside the infamous Duqu malware. The malware contains a dropper file with a Microsoft 0-day kernel exploit inside. The exploit could allow malicious users to remotely execute code on an infected system. Microsoft issued a temporary workaround for the flaw in early November. Microsoft’s temporary workaround can be applied to any Windows system. The company provided a Fix it that allows end users and enterprise customers to quickly deploy the fix.
Microsoft confirmed on Thursday that both issues will be fixed in next week’s Patch Tuesday. “The issues described in Security Advisories 2588513 and 2639658 will be addressed in Tuesday’s security bulletins,” said a Microsoft spokesperson. Microsoft is planning to address 20 vulnerabilities across 14 bulletins as part of December Patch Tuesday.
Microsoft to fix Duqu kernel vulnerability and SSL/TLS exploits next Tuesday originally appeared at WinRumors.com.
Related Posts:
Sprint issues OTA fix for HTC Android handset vulnerability
Author: Margo Tipton
Earlier this month, we found out that after a software update HTC’s Android handsets had a serious security flaw — any app could gain access to user data, including recent GPS locations, SMS data, phone numbers, and system logs. To its credit, HTC responded quickly to the security issue, and now an OTA update with the fix is going out to those on the Now Network. Sprint users with an EVO 4G, 3D, Shift 4G, Design 4G or View 4G can get the download, as can Wildfire S owners. The patch available now for a manual download, and more info on the fix can be found at the source below.
[Thanks, Korey]
Sprint issues OTA fix for HTC Android handset vulnerability originally appeared on Engadget on Tue, 25 Oct 2011 18:03:00 EDT. Please see our terms for use of feeds.
Permalink | 
Sprint | Email this | Comments
Related Posts:
PDF Patcher 2: Fixes iOS 4.3.3 JailbreakMe 3.0 Vulnerability, Install Now!
Author: Tristan Richards
Today, Comex released JailbreakMe 3.0 tool that lets you jailbreak all iOS devices including iPad 2 within 10 seconds. This web based method exploits vulnerability in Mobile Safari to run the code which then circumvents the controls and restrictions put in place by Apple. Since, the flaw sits within Safari browser, this PDF Exploit can easily be [...]
Related Posts:
Android 2.3 security bug shows microSD access vulnerability
Author:
A researcher at North Carolina State University is warning of an Android 2.3 security vulnerability that gives attackers access to your personal information, further proof that Gingerbread isn’t all sugar and spice (to be fair, that SMS issue has since been remedied). According to Xuxian Jiang, the bug allows malicious websites to access and upload the contents of a user’s microSD card, including voicemails, photos, and online banking information to a remote server. The flaw apparently resembles a similar bug in previous version of Android, thought to have been addressed with Gingerbread. However, as Jiang points out, that fix is easily bypassed. Apart from removing the microSD card, disabling JavaScript, or switching to a third-party browser, Android 2.3 users have little recourse in squashing the bug. The folks at eWeek reported that Google is working on a solution to the problem, but there’s no word on when we can expect to see an update.
Android 2.3 security bug shows microSD access vulnerability originally appeared on Engadget on Sat, 29 Jan 2011 10:57:00 EDT. Please see our terms for use of feeds.
Permalink | North Carolina State University | Email this | Comments
Engadget
