SECURITY WARNINGS & Notices - Please post them here

[DJBone]

Security update for Windows lets fonts disappear
http://www.h-online.com/security/news/item/Security-update-for-Windows-lets-fonts-disappear-1771419.html

[Avastfan1]

Thank you for the update DJBone.

[bob3160]

Ransomware Locks Desktop with Survey Offers

( Is avast! protecting us against this one )

[Asyn]

Security Alert: SpamSoldier
https://blog.lookout.com/blog/2012/12/17/security-alert-spamsoldier/

[Asyn]

Adobe Shockwave player provides vulnerable Flash runtime
http://www.kb.cert.org/vuls/id/323161

[Asyn]

Security update for Windows lets fonts disappear
http://www.h-online.com/security/news/item/Security-update-for-Windows-lets-fonts-disappear-1771419.html

Note: Fix is available now: http://forum.avast.com/index.php?msg=876713

[Asyn]

Exynos 4 critical security hole affects many Galaxy devices
http://www.h-online.com/open/news/item/Exynos-4-critical-security-hole-affects-many-Galaxy-devices-1770075.html

Samsung to fix Exynos vulnerability in software update 'as quickly as possible'
http://www.androidcentral.com/samsung-fix-exynos-vulnerability-software-update-soon-possible

[mchain]

Trojan horse for Linux here:  http://www.symantec.com/security_response/writeup.jsp?docid=2012-122012-3441-99&inid=us_sr_carousel

[Asyn]

AMD warns of security hole in its Catalyst Control Center
http://www.h-online.com/security/news/item/AMD-warns-of-security-hole-in-its-Catalyst-Control-Center-1773314.html

[Asyn]

Sudoku and malware with your coffee?
http://nakedsecurity.sophos.com/2012/12/19/sudoku-and-malware-with-your-coffee/

[mchain]

nvidia-display-driver-service-attack-escalates-privileges-windows-machines-122712

https://threatpost.com/en_us/blogs/nvidia-display-driver-service-attack-escalates-privileges-windows-machines-122712

Suggest disabling the nvidia display driver service for domain-based machines in particular for the time being until nVidia issues a fix/update.

[crofty59]

Microsoft "Fix it" available for Internet Explorer 6, 7, and 8

http://blogs.technet.com/b/srd/

[Asyn]

SQL injection vulnerability hits all Ruby on Rails versions
http://www.h-online.com/open/news/item/SQL-injection-vulnerability-hits-all-Ruby-on-Rails-versions-1776203.html

[FreewheelinFrank]

Microsoft "Fix it" available for Internet Explorer 6, 7, and 8

http://blogs.technet.com/b/srd/

"Vulnerability in Internet Explorer Could Allow Remote Code Execution"

"Microsoft is aware of targeted attacks that attempt to exploit this vulnerability through Internet Explorer 8."

http://technet.microsoft.com/en-us/security/advisory/2794220

Hey, I'm just a Linux user for the last few years, but maybe Windows users need to know about this stuff?

[Asyn]

Fatal error leads TURKTRUST to issue dangerous SSL certificates
http://www.h-online.com/security/news/item/Fatal-error-leads-TURKTRUST-to-issue-dangerous-SSL-certificates-1777291.html
http://technet.microsoft.com/en-us/security/advisory/2798897
http://googleonlinesecurity.blogspot.com/2013/01/enhancing-digital-certificate-security.html
https://blog.mozilla.org/security/2013/01/03/revoking-trust-in-two-turktrust-certficates/