SECURITY WARNINGS & Notices - Please post them here

[Pondus]

VirusTotal: Maintaining a healthy community
http://blog.virustotal.com/2016/05/maintaining-healthy-community.html

http://www.reuters.com/article/us-cybersecurity-sharing-virustotal-anal-idUSKCN0XY0R4

[polonus]

The broader the spectrum the less chance for "conservative protective measures" and other power arming measures.
Hope those that were dropped will find their way here: http://support.clean-mx.de/clean-mx/login.php
VT should not think they have the final word where malware detection is concerned.
Do not underestimate the Google influence here as well. Why Avast Mobile apps, Google Mobile apps and AdBlockPlus app are always targeted by adware app detection, because of AdMob insecurity built in that enable Google adtracking. When those solutions that were dropped however  do alert AdMob = Google Adware Mobile  Tracking, they could threaten "vested interests", certain agreements made by larger companies to partner with Google. They will never admit to it, but I wonder whether that did not come to play here in the background...

polonus

[Asyn]

Microsoft Security Bulletin Summary for May 2016
https://technet.microsoft.com/library/security/ms16-may

[Asyn]

ASUS - After installing Microsoft Update KB3133977 for Windows 7, some users may encounter a "Secure Boot Violation" , which makes the system fail to boot into the operating system
https://www.asus.com/support/FAQ/1016356/

[DavidR]

ASUS - After installing Microsoft Update KB3133977 for Windows 7, some users may encounter a "Secure Boot Violation" , which makes the system fail to boot into the operating system
https://www.asus.com/support/FAQ/1016356/

I think we need to get used to this with Win10 and its Auto Updates, acting as KB beta testers for business users Win10 Pro, etc.

[Asyn]

Alert (TA16-132A) - Exploitation of SAP Business Applications
https://www.us-cert.gov/ncas/alerts/TA16-132A
https://www.onapsis.com/threat-report-tip-iceberg-wild-exploitation-cyber-attacks-sap-business-applications

[abruptum]

7-Zip vulnerability affects security software

  http://www.ghacks.net/2016/05/13/7zip-vulnerability-affects-security-software/

[polonus]

Americans worried about Internet Privacy: https://www.ntia.doc.gov/blog/2016/lack-trust-internet-privacy-and-security-may-deter-economic-and-other-online-activities

Do not put out there what you wanna keep to yourself.

polonus

[Dwarden]

http://news.softpedia.com/news/ss7-attack-leaves-whatsapp-and-telegram-encryption-useless-503894.shtml
that's what happens when mobile world uses 40 years standard as base layer

[Pondus]

Seems to be a new trick / scam.

Fake product key popup
https://forums.malwarebytes.org/topic/183142-product-key-malware/

The phone number listed on the popup is used it many previous scam > Google search
https://www.google.no/search?num=50&newwindow=1&site=&source=hp&q=8444598882&oq=8444598882&gs_l=hp.3...1664.34389.0.40370.10.10.0.0.0.0.53.424.10.10.0....0...1c.1.64.hp..0.5.227...0j0i131j0i30j0i5i30.OCT1GE3olo8&gws_rd=cr&ei=F7w5V7PdNcyLsAHFwae4Dg#newwindow=1&q=1-844-459-8882

[polonus]

GoDaddy closed an XSS hole on their account customer support: http://www.theregister.co.uk/2016/05/10/godaddy_plugs_account_hijack_xss_vulnerability/
customer accounts could have been totally compromised through the XSS payload...

pol

[polonus]

Comics: cybercriminals meeting in the flesh sometimes:
https://threatpost.com/cyber-criminal-underground-comics-edition-102210/74587/

pol

[REDACTED]

7-Zip vulnerability affects security software

  http://www.ghacks.net/2016/05/13/7zip-vulnerability-affects-security-software/

OK, seeing as Avast! uses a 7zip module, (1) is this being addressed in an upgrade, or (2) can we simply replace the dll/module?

I have already upgraded my PeaZip, but...

Gordon.

[bob3160]

7-Zip vulnerability affects security software

  http://www.ghacks.net/2016/05/13/7zip-vulnerability-affects-security-software/

OK, seeing as Avast! uses a 7zip module, (1) is this being addressed in an upgrade, or (2) can we simply replace the dll/module?

I have already upgraded my PeaZip, but...

Gordon.

Please note,
"The security vulnerability has been fixed in 7-Zip 16.0 which has been released this month."

[DavidR]

7-Zip vulnerability affects security software

  http://www.ghacks.net/2016/05/13/7zip-vulnerability-affects-security-software/

OK, seeing as Avast! uses a 7zip module, (1) is this being addressed in an upgrade, or (2) can we simply replace the dll/module?
<snip>

What makes you think that avast uses 7zip ?
As far as I'm aware it doesn't install it, it only reports 7zip in the Software Updater if you have it installed.