SECURITY WARNINGS & Notices - Please post them here

[DavidR]

I've never had a real BSOD appear inside the web browser..... 

Nor have I, but the later update (if you can call it that) goes full screen rather than be contained in a browser window.

[SpeedyPC]

Hackers take control of Jeep and crash it into ditch
https://www.youtube.com/watch?v=mwZMvi6nKvU

I think Avast should create an anti-virus software for transport vehicle, and it looks scary when a hacker can take full control of your vehicle you could end up in your own grave yard.

[Para-Noid]

Here's some more about the Chrysler hacking...

http://www.wired.com/2015/07/patch-chrysler-vehicle-now-wireless-hacking-technique/
http://gizmodo.com/hackers-have-the-power-to-remotely-hijack-half-a-millio-1719233440
http://www.washingtonpost.com/news/morning-mix/wp/2015/07/22/car-hacking-just-got-real-hackers-disable-suv-on-busy-highway/
http://www.theglobeandmail.com/globe-drive/culture/technology/security-experts-hack-into-moving-car-turn-off-engine/article25625345/

[Para-Noid]

Microsoft rushes emergency security fix for Windows

http://www.cnet.com/news/microsoft-rushes-emergency-security-fix-for-versions-of-windows/

WP-CLI Guide: Secure WordPress Backup and Update

https://blog.sucuri.net/2015/07/wp-cli-guide-secure-wordpress-backup-update.html?utm_campaign=WordPress&utm_medium=social&utm_source=googleplus&utm_term=wpcli

[polonus]

Could this be completely secure or is there a (hidden) backdoor somewhere?
GCHQ 's  Communications and Electronics Security Group certified Samsung KNOX-platform for Samsung Galaxy S6 & S6 Edge.
Would you trust such a smartphone certified by British Intelligence or should we be somewhat aware of some hidden backdoor? Read: http://www.cesg.gov.uk/servicecatalogue/Product-Assurance/CPA/Pages/Samsung-Galaxy-S6-and-S6-Edge-Certification-Details.aspx
Other government institutions do the same: https://www.samsungknox.com/en/security-certifications#5
Seen to NSA's track recordand recent revelations I would be a tad suspicious.

polonus

[bob3160]

Could this be completely secure or is there a (hidden) backdoor somewhere?
GCHQ 's  Communications and Electronics Security Group certified Samsung KNOX-platform for Samsung Galaxy S6 & S6 Edge.
Would you trust such a smartphone certified by British Intelligence or should we be somewhat aware of some hidden backdoor? Read: http://www.cesg.gov.uk/servicecatalogue/Product-Assurance/CPA/Pages/Samsung-Galaxy-S6-and-S6-Edge-Certification-Details.aspx
Other government institutions do the same: https://www.samsungknox.com/en/security-certifications#5
Seen to NSA's track recordand recent revelations I would be a tad suspicious.

polonus

I would trust it as much as I would trust a phone certified by the NSA.  

[polonus]

Hi bob3160,

Me too, I just only reported what info I found online. I think our whole security situation on the Internet and via the "Internet of things" is not what it should be or rather what it could be and political incompetence to understand where this all leads to or could lead to is not helping either.

Damian

[abruptum]

Zero-Day Flaws Found in Internet Explorer, Everyone Advised to Stop Using the Browser

  http://news.softpedia.com/news/zero-day-flaws-found-in-internet-explorer-everyone-advised-to-stop-using-the-browser-487592.shtml

[Para-Noid]

Facebook Marketing, A New Method for Scammers?

https://blog.malwarebytes.org/fraud-scam/2015/07/facebook-marketing-a-new-method-for-scammers/?utm_source=Gplus&utm_medium=social

Fake jQuery Scripts in Nulled WordPress Plugins

https://blog.sucuri.net/2015/05/fake-jquery-scripts-in-nulled-wordpress-pugins.html?utm_campaign=Fake%20jQuery%20Scripts%20in%20Nulled%20WordPress%20Plugins%20Blogpost&utm_medium=social&utm_source=googleplus

[Para-Noid]

Malicious Google Analytics Referral Spam

https://blog.sucuri.net/2015/07/malicious-google-analytics-referral-spam.html?utm_campaign=Malicious%20Google%20Analytics%20Referral%20Spam%20Blogpost&utm_medium=social&utm_source=googleplus

Privilege escalation vulnerability found in OS X

https://blog.malwarebytes.org/mac/2015/07/privilege-escalation-vulnerability-found-in-os-x/?utm_source=Gplus&utm_medium=social

This is partly informative and advertising! But you will get the message.

Scroll down for the video https://sucuri.net/website-firewall/ddos-protection?utm_campaign=DDoS&utm_medium=social&utm_source=googleplus

[polonus]

Some explain it as awesome and cool and others call it the scariest feature of Google they'd ever seen - it is called Your Timeline.
Read: http://google-latlong.blogspot.nl/2015/07/your-timeline-revisiting-world-that.html
Link author:  Gerard Sanz, Product Manager.
They say: "Your Timeline is private and visible only to you; and you control the locations you choose to keep".
I'd wonder if Big Brother is not also aware of all my geo-location timeline,
and I very much doubt Big Brother is not fully aware.

polonus

[bob3160]

Some explain it as awesome and cool and others call it the scariest feature of Google they'd ever seen - it is called Your Timeline.
Read: http://google-latlong.blogspot.nl/2015/07/your-timeline-revisiting-world-that.html
Link author:  Gerard Sanz, Product Manager.
They say: "Your Timeline is private and visible only to you; and you control the locations you choose to keep".
I'd wonder if Big Brother is not also aware of all my geo-location timeline,
and I very much doubt Big Brother is not fully aware.

polonus

It's scary but the Timeline feature in Facebook is even more scary.
It's easy to see what's kept me busy today:

[polonus]

Because of four zero-days now in the open in IE and MS not meeting the deadline
better refrain from using Blue E for the moment until patched.:
http://www.zerodayinitiative.com/advisories/ZDI-15-359/  & http://www.zerodayinitiative.com/advisories/ZDI-15-360/
& http://www.zerodayinitiative.com/advisories/ZDI-15-361/

polonus

[Para-Noid]

SweetCaptcha Returns Hijacking Another Plugin

https://blog.sucuri.net/2015/07/sweetcaptcha-returns-hijacking-another-plugin.html?utm_campaign=SweetCaptcha%20Returns%20Hijacking%20Another%20Plugin%20Blogpost&utm_medium=social&utm_source=googleplus

Twitch “Audio Fix” Hijacks Stream Key

https://blog.malwarebytes.org/fraud-scam/2015/07/twitch-audio-fix-hijacks-stream-key/?utm_source=Gplus&utm_medium=social

[Dwarden]

Because of four zero-days now in the open in IE and MS not meeting the deadline
better refrain from using Blue E for the moment until patched.:
http://www.zerodayinitiative.com/advisories/ZDI-15-359/  & http://www.zerodayinitiative.com/advisories/ZDI-15-360/
& http://www.zerodayinitiative.com/advisories/ZDI-15-361/

polonus

...vulnerabilities reported by ZDI have already been fixed in bulletins MS14-037 on July 8, 2015 and MS15-018 on March 10, 2015...