Security Alerts




WatchGuard Announces Fireware XTM and WSM v11.5.3

Available for All XTM Appliances WatchGuard is excited to announce the general release of Fireware XTM v11.5.3 and WatchGuard System Manager v11.5.3. (more…)

May 3, 2012 — Category: Security Alerts

Radio Free Security: April 2012 Episode

Securing Your Servers in The Matrix Radio Free Security (RFS)  is a monthly audio podcast dedicated to spreading knowledge about network and information security, and to keeping busy IT administrators apprised of the latest security threats they face online. (more…)

May 1, 2012 — Category: Security Alerts

WatchGuard Security Week in Review: Episode 15

Major US Cyber Legislation, VMware Source Code Leak, and Hotmail Hacks This week’s security news round-up video is full of scary Cyber legislation, major network and organization breaches, and a couple of important security updates. If you’re too busy to follow the barrage of security news every day, let WatchGuard’s Security Week in review video summarize it for you. Would you rather read (more…)

April 27, 2012 — Category: Security Alerts

WatchGuard Security Week in Review: Episode 14

Oracle CPU Update, Another Mac Trojan, and 20,000 Infected Websites This week I’ve been traveling in Denmark and Finland, speaking at various security events, which make this week’s WatchGuard Security Week in Review an “on the road” edition. In this very short episode, I quickly cover this week’s big Oracle Critical Patch Update (CPU), yet another mac trojan, and a story about Google warning web administrators about web site infections. Check out the video below for the quick highlights You’ll find links to the stories in this episode below (more…)

April 20, 2012 — Category: Security Alerts

Oracle’s April Critical Patch Update Fixes 88 Vulnerabilities

Yesterday, Oracle released their quarterly Critical Patch Update (CPU) for April 2012. Oracle CPUs are collections of security updates, which fix security flaws in the wide-range of products Oracle offers (more…)

April 19, 2012 — Category: Security Alerts

WatchGuard Security Week in Review: Episode 13

Flashback Follow-up, Lots of Patches, and MBR Ransomware In this week’s video, I follow up on Flashback developments, cover the various security updates that came out this week, and warn you about two new interesting malware variants that change their targets or techniques. There’s a lot to learn, so check out this week’s WatchGuard Security Week in Review video below. (more…)

April 13, 2012 — Category: Security Alerts

Another OS X Java Update to Mitigate Flashback-like Malware

In two posts [ 1 / 2 ] last week, I warned you about an Apple OS X Java update that fixed a vulnerability attackers were leveraging to spread a mac trojan called Flashback. According to reports, this botnet trojan infected over 600,000 Mac users. (more…)

April 12, 2012 — Category: Security Alerts

*nix Administrators Should Patch Samba ASAP

Unless you’re an eagle-eyed, super perceptive Linux administrator, you may have missed the major update the Samba team  quietly released during this week’s busy Microsoft and Adobe Patch Day. (more…)

April 12, 2012 — Category: Security Alerts

Update Adobe Reader or Avoid Potentially Malicious PDFs

Summary: This vulnerability affects : Adobe Reader and Acrobat X 10.1.2 and earlier, running on Windows, Mac, and Linux How an attacker exploits it : By enticing your users into viewing maliciously crafted PDF documents Impact : An attacker can execute code on your computer, potentially gaining control of it What to do : Windows users should install Adobe’s Reader and Acrobat X 10.1.3 or 9.5.1 updates as soon as possible (or let Adobe’s Updater do it for you). Exposure: Today, Adobe released a  security bulletin describing four vulnerabilities in Adobe Reader and Acrobat X 10.1.2 and earlier, running on all supported platforms.  Adobe doesn’t describe these flaws in much technically detail, but most of them involve integer overflow  and memory corruption issues within Reader and Acrobat components. (more…)

April 10, 2012 — Category: Security Alerts

Windows Updates Fix .NET Framework and Authenticode Flaws

Severity: High Summary: These vulnerabilities affect: All current versions of Windows and its optional .NET Framework component How an attacker exploits them:  Multiple vectors of attack, including enticing your users into running specially crafted executable files or visiting web sites with malicious content Impact: In the worst case, an attacker can gain complete control of your Windows computer What to do: Install the appropriate Microsoft patches as soon as possible, or let Windows Automatic Update do it for you. Exposure: Today, Microsoft released two security bulletins describing vulnerabilities that affect Windows and its optional .NET Framework component. Each vulnerability affects different versions of Windows to varying degrees. (more…)

April 10, 2012 — Category: Security Alerts