SECURITY WARNINGS & Notices - Please post them here

[Pondus]

WinXP market share is going up again?     

http://www.netmarketshare.com/report.aspx?qprid=11&qpaf=&qpcustom=Windows+XP&qpcustomb=0
http://www.netmarketshare.com/operating-system-market-share.aspx?qprid=10&qpcustomd=0

[DavidR]

WinXP market share is going up again?     

http://www.netmarketshare.com/report.aspx?qprid=11&qpaf=&qpcustom=Windows+XP&qpcustomb=0
http://www.netmarketshare.com/operating-system-market-share.aspx?qprid=10&qpcustomd=0

Interestingly still higher than win8/8.1 combined. MS is really having a hard time with that dog - It will probably drop much lower when they start giving away win 10 to certain qualifying win7 and win8/8.1 systems.

[polonus]

Yes, DavidR, and there are some continents or part of continents, where MS should start spreading the Win10 promotion.
I would start in the land of the Middle Kingdom - 中國/中国 - 中華/中华 .
And I know some more nations where the prevalence of XP is still very substantial.
This could get us better global security.

polonus

[Para-Noid]

HanJuan EK fires third Flash Player 0day

https://blog.malwarebytes.org/exploits-2/2015/02/hanjuan-ek-fires-third-flash-player-0day/?utm_source=Gplus&utm_medium=social

[polonus]

Read as this link should work: http://arstechnica.com/security/2015/02/serious-bug-in-fully-patched-internet-explorer-puts-user-credentials-at-risk/

IE11 zero-day when going to maliciously crafted pages, use firefox or Google Chrome until MS patches this bug/hole.

polonus

[bob3160]

               Just added to my presentation: Security Is Everyone's Business

[Para-Noid]

Logging In and Captcha

https://blog.malwarebytes.org/online-security/2015/02/logging-in-and-captcha/?utm_source=Gplus&utm_medium=social

[Asyn]

Zero-day in the Fancybox-for-WordPress Plugin
http://blog.sucuri.net/2015/02/zero-day-in-the-fancybox-for-wordpress-plugin.html

[polonus]

Zero-day in WP CMS - update nowl: http://blog.sucuri.net/2015/02/zero-day-in-the-fancybox-for-wordpress-plugin.htm
and https://wordpress.org/support/topic/possible-malware-2

polonus

[polonus]

Malvertising campaign already going on for months: http://www.invincea.com/2015/02/fessleak-the-zero-day-driven-advanced-ransomware-malvertising-campaign/

pol

[Para-Noid]

Gamers Targeted with Fake In-Game Comms Apps

https://blog.malwarebytes.org/fraud-scam/2015/02/gamers-targeted-with-fake-in-game-comms-apps/?utm_source=Gplus&utm_medium=social

The Facts about Botnets

https://blog.malwarebytes.org/cyber-crime/2015/02/the-facts-about-botnets/?utm_source=Gplus&utm_medium=social

[polonus]

EU-parliament blocks new MS Outlook apps for EU parliament members.
https://blog.winkelmeyer.com/2015/01/warning-microsofts-outlook-app-for-ios-breaks-your-company-security/
Because apps will store your credentials onto USA cloud servers, which some may consider an insecurity.

polonus

[Pondus]

Is your smart TV to smart?

YOUR SAMSUNG SMARTTV IS SPYING ON YOU  
http://www.thedailybeast.com/articles/2015/02/05/your-samsung-smarttv-is-spying-on-you-basically.html

[Pondus]

Pawn Storm Update: iOS Espionage App Found 
http://blog.trendmicro.com/trendlabs-security-intelligence/pawn-storm-update-ios-espionage-app-found/

[bob3160]

Is your smart TV to smart?

YOUR SAMSUNG SMARTTV IS SPYING ON YOU  
http://www.thedailybeast.com/articles/2015/02/05/your-samsung-smarttv-is-spying-on-you-basically.html

UPDATE 2/6/15 1:59 PM: "Samsung takes consumer privacy very seriously.
In all of our Smart TVs we employ industry-standard security safeguards and practices, including data encryption,
to secure consumers’ personal information and prevent unauthorized collection or use," the company said in a statement
to The Daily Beast. "Voice recognition, which allows the user to control the TV using voice commands, is a Samsung
Smart TV feature, which can be activated or deactivated by the user. The TV owner can also disconnect the TV from the Wi-Fi network."
The same thing can be said for almost any voice command operations.