SECURITY WARNINGS & Notices - Please post them here

[Asyn]

LinkedIn - Protecting Our Members
https://blog.linkedin.com/2016/05/18/protecting-our-members

[REDACTED]

Being quite thin-skinned, I assume youse are talking to me...   

Did you read the blog post provided by Bob..!?
Avast is not affected by these vulnerabilities, ...

Reading is important, Comprehension is paramount.

Ummm...  What part of

First and most important: Avast is not compromised.

was not understood?

I repeat my important question:

The important question here is "Has Avast updated its engine to replace any v15 7-Zip with v16 7-Zip?  And if not, when?"

That's all.

Gordon.

[Asyn]

I'd suggest to start a new topic, if further discussion is needed.

[polonus]

Censorship of our online views slowly brought in, read:
http://www.independent.co.uk/voices/facebook-is-censoring-our-views-and-this-is-feeding-extremism-a7029251.html
Also: https://www.facebook.com/notes/people-over-politics/popaction-alert-facebook-censorship-is-on-the-rise-take-action-now/519387508074020/

polonus

[Asyn]

TYPO3-CORE-SA-2016-013: Missing Access Check in TYPO3 CMS
https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-013/

[polonus]

Error with CryptXXX-decryptor tool, get working tool here: https://www.dropbox.com/s/blaw1yn295s5a9a/New_DeCrypt.rar?dl=0

polonus

[polonus]

Mittigate Blue Coat Symantec intermediate certificate abuse scandal, read: Untrusting the intermediate CA: https://blog.filippo.io/untrusting-an-intermediate-ca-on-os-x/

polonus

[polonus]

6,7% of the most popular website tries to block users with adblockers, read this report: https://www.lightbluetouchpaper.org/2016/05/28/adblocking-and-counter-blocking-a-slice-of-the-arms-race/

The underlying problems however have never been tackled as to question why users use adblockers in the first place.
For me the moment to not block ads would arrive as there came a guarantee from a particular adblocking website that it was 100%  malvertiser free. But no one at this moment can guarantee there would be no more malad on pages that block adblockers. Whenever there was a guarantee that adlaunchers would dicriminate between a fraudulent and an honest adware buck, I would allow their honest upright ad. As this situation still seems a long, long time off if it will ever arrive, I keep my adblock visors up and even have some special third party lists installed (JoeWein, feodotracker etc.).

polonus

[schmidthouse]

Possibly some others have come across this already even though this is apparently 'New'

http://www.msn.com/en-us/money/technology/this-serpent-like-malware-lies-dormant-until-you-access-your-bank-account/ar-BBtyEST?li=BBnbfcL&ocid=HPCDHP

[polonus]

Thanks goes out to our forum friend, schmidthouse, for posting the link.

This thread is one I always come back to visit and when I read something that I think will help our community members with better securing their bits and bytes, I do not hesitate to post. Again thanks to Avast to provide us with this great knowledge forum.
Avast has outbuilded me over a decade to be the volunteer website analysis security guy and website error-hunter, I am to-day.

Now the heads-up on these, outdated vulnerable WordPress plug-ins vulnerability, always a risk, but specially these like old Ninja Forms and others like it, read:
https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html

polonus

[Asyn]

Security Advisory: Stored XSS in Jetpack
https://blog.sucuri.net/2016/05/security-advisory-stored-xss-jetpack-2.html

[essexboy]

Just received an e-mail with a possible ransom dropper attached..  Avast does not detect but I have sent a copy to Maxx

VT scan https://www.virustotal.com/en/file/4c84eeab806646862e79fbf6f610d6c46ac11a68e0cb7e11d8aa9434c7579503/analysis/1464701568/

[Be Secure]

Statistics gathered by US cyber-security firm Fortinet reveal that, between April 1, 2016, and May 15, 2016, the top five most prevalent ransomware families were in this order: CryptoWall (41.04%), Locky (34.36%), Cerber (24.17%), TorrentLocker (0.24%), and TeslaCrypt (0.09%).

[Dwarden]

rumor about some TeamViewer security issues
https://www.reddit.com/r/technology/comments/4m7ay6/teamviewer_has_been_hacked_they_are_denying/

[Asyn]

Extortion E-mail Schemes Tied to Recent High-Profile Data Breaches
http://www.ic3.gov/media/2016/160601.aspx