SECURITY WARNINGS & Notices - Please post them here

[Dim@rik]

https://drweb.com/flashback/

https://drweb.com/flashback/chronology/

http://support.apple.com/kb/HT5244?viewlocale=en_US&locale=en_US

[Asyn]

Zeus Targets Cloud Payroll Service to Siphon Money from Enterprises
http://www.trusteer.com/blog/zeus-targets-cloud-payroll-service-siphon-money-enterprises

[mchain]

HP distributes malware in flash card included in new networking kit.

http://www.theregister.co.uk/2012/04/11/hp_ships_malware_cards_with_switches_oops/

[Dim@rik]

Trojan.Encoder heads West.

http://news.drweb.com/show/?i=2356&lng=en&c=5

[Marc57]

New targeted Mac OS X Trojan requires no user interaction

"A new Mac OS X Trojan referred to as Backdoor.OSX.SabPub.a or SX/Sabpab-A is also exploiting Java vulnerabilities in a way that requires no user interaction. It is being used in targeted attacks"

http://www.zdnet.com/blog/security/new-targeted-mac-os-x-trojan-requires-no-user-interaction/11545

[Asyn]

Critical vulnerability in IrfanView plugin
http://www.h-online.com/security/news/item/Critical-vulnerability-in-IrfanView-plugin-1539532.html

[Pondus]

New version of Mac OS X Trojan exploits Word, not Java
http://www.zdnet.com/blog/security/new-version-of-mac-os-x-trojan-exploits-word-not-java/11566?tag=content;siu-container

[Tech]

New version of Mac OS X Trojan exploits Word, not Java
http://www.zdnet.com/blog/security/new-version-of-mac-os-x-trojan-exploits-word-not-java/11566?tag=content;siu-container

Uh Uh... Mac infections are coming and coming...

[Asyn]

Oracle Critical Patch Update Advisory - April 2012
http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html

[Dim@rik]

Rmnet.12 created a million Windows computer botnet

http://news.drweb.com/show/?i=2374&lng=en&c=5

[SpeedyPC]

Websites using 14 tracking tools to nab your data, says Truste research

http://www.dailytelegraph.com.au/technology/websites-using-14-tracking-tools-to-take-your-data-says-truste/story-fn7bsi21-1226333237000

[Asyn]

Google warns the operators of thousands of hacked web sites
http://www.h-online.com/security/news/item/Google-warns-the-operators-of-thousands-of-hacked-web-sites-1542374.html

[Asyn]

Fake Instagram app infects Android devices with malware
http://nakedsecurity.sophos.com/2012/04/18/fake-instagram-app-android-malwar/

[Dim@rik]

Doctor Web doesn't register significant decrease in BackDoor.Flashback.39 bot number


http://news.drweb.com/show/?i=2386&lng=en&c=5

[CharleyO]

***

Web Apps Create New Security Risks

There's no debate that security is growing infinitely more complex by the day. As organizations open their networks to customers, business partners and others, the risks continue to grow. Mobile devices and open-source codes further complicate matters--all while hackers and cyber-crooks become more sophisticated and aggressive. Although most organizations have a spate of digital security protections in place, a March 2011 study found that many of the most obvious threats go unnoticed and untargeted. What's more, the situation is growing more challenging.

http://www.baselinemag.com/c/a/Security/Web-Apps-Create-New-Security-Risks-367935/?kc=EWKNLEDP04202012C


***