SECURITY WARNINGS & Notices - Please post them here

[polonus]

Google to block a Symantec root certificate

Over the course of the coming weeks, Google will be moving to distrust the “Class 3 Public Primary CA” root certificate operated by Symantec Corporation, across Chrome, Android, and Google products. We are taking this action in response to a notification by Symantec Corporation that, as of December 1, 2015, Symantec has decided that this root will no longer comply with the CA/Browser Forum’s Baseline Requirements. As these requirements reflect industry best practice and are the foundation for publicly trusted certificates, the failure to comply with these represents an unacceptable risk to users of Google products.

taken from: https://googleonlinesecurity.blogspot.nl/2015/12/proactive-measures-in-digital.html

pol

[polonus]

Linksys routers vulnerable through CGI Scripts: https://www.korelogic.com/Resources/Advisories/KL-001-2015-006.txt

polonus

[Asyn]

Joomla! [20151201] - Core - Remote Code Execution Vulnerability
https://developer.joomla.org/security-centre/630-20151214-core-remote-code-execution-vulnerability.html
-> https://www.joomla.org/announcements/release-news/5641-joomla-3-4-6-released.html

[polonus]

Hi Asyn, and it is already being actively abused, according to Sucuri's: https://blog.sucuri.net/2015/12/remote-command-execution-vulnerability-in-joomla.html Apply the hotfixes everybody, secure yourselves and your visitors: https://docs.joomla.org/Security_hotfixes_for_Joomla_EOL_versions

polonus (volunteer website security analyst and website error-hunter)

[Para-Noid]

Comcast Customers Targeted In Elaborate Malvertising Attack

https://blog.malwarebytes.org/malvertising-2/2015/12/comcast-customers-targeted-in-elaborate-malvertising-attack/?utm_source=Gplus&utm_medium=social

[polonus]

Gigantic botnet attacked Internet backbone's DNS-rootservers twice: http://arstechnica.com/security/2015/12/attack-flooded-internet-root-servers-with-5-million-queries-a-second/

polonus

[Para-Noid]

“Steam VAC Remover” Leads to Mobile Offers

https://blog.malwarebytes.org/online-security/2015/12/steam-vac-remover-leads-to-mobile-offers/?utm_source=Gplus&utm_medium=social

More Replica Automated Mails Lead to Fake Pharma

https://blog.malwarebytes.org/fraud-scam/2015/12/more-replica-automated-mails-lead-to-fake-pharma/?utm_source=Gplus&utm_medium=social

Massive MacKeeper data breach

https://blog.malwarebytes.org/mac/2015/12/massive-mackeeper-data-breach/?utm_source=Gplus&utm_medium=social

Why layered security is important  (Common sense approach most forum members practice.)

https://www.malwarebytes.org/articles/why-layered-security-is-important/?utm_source=Gplus&utm_medium=social

[polonus]

For cybercriminal nothing is sacred: https://www.proofpoint.com/us/threat-insight/post/Risky-Mobile-Apps-Steal-Data

polonus

[schmidthouse]

Gigantic botnet attacked Internet backbone's DNS-rootservers twice: http://arstechnica.com/security/2015/12/attack-flooded-internet-root-servers-with-5-million-queries-a-second/

polonus

http://www.msn.com/en-us/news/technology/are-isis-hackers-trying-to-destroy-the-internet/ar-BBnEEQy?li=BBnb7Kz

[mchain]

Comcast Customers Targeted In Elaborate Malvertising Attack

https://blog.malwarebytes.org/malvertising-2/2015/12/comcast-customers-targeted-in-elaborate-malvertising-attack/?utm_source=Gplus&utm_medium=social

Use of an ad-blocker add-on or extension would block step 3 in attack scenario:

[polonus]

All other institutions declined to comment: https://theintercept.com/surveillance-catalogue/
The Department of Justice, however, argued that all use of such devices are “consistent with the requirements and protections of the Constitution, including the Fourth Amendment, and applicable statutory authorities.”

polonus

[Asyn]

May the force, but not the malware, be with you!
https://blog.avast.com/2015/12/17/may-the-force-but-not-the-malware-be-with-you/

[bob3160]

Not Happy Or Healthy:

If you get this please put it where it belongs - In The TRASH

[Secondmineboy]

Hack Into a Linux Computer by Hitting the Backspace 28 Times

http://motherboard.vice.com/read/hack-into-a-linux-computer-by-hitting-the-backspace-28-times

[Para-Noid]

PUPs Masquerade as Installer for Antivirus and Anti-Adware

https://blog.malwarebytes.org/online-security/2015/12/pups-masquerade-as-installer-for-antivirus-and-anti-adware/?utm_source=Gplus&utm_medium=social