SECURITY WARNINGS & Notices - Please post them here

[Asyn]

Microsoft Security Bulletin Summary for June 2016
https://technet.microsoft.com/en-us/library/security/ms16-jun

[Asyn]

Adobe Security Bulletin - Security updates available for Adobe Flash Player
https://helpx.adobe.com/security/products/flash-player/apsb16-18.html

[Be Secure]

T-Mobile Czech Republic ‘suffers data leak’

Over 1.5 million customer records at T-Mobile Czech Republic were stolen by one of its employees, according to local media.
In an official statement, T-Mobile admitted that an incident has taken place but refused to confirm the scale or provide details about what information, if any, was leaked.
It said that due to an ongoing police investigation, it is “unable to provide any additional specific information”.
Based on the fact that the investigation has been handed over to the Czech Police’s Unit for Combating Organized Crime, speculation has arisen in Czech media that the data leak has been massive.
It probably involved all 1.5 million T-Mobile customers, making it the largest known data breach ever in the Czech Republic.

http://www.welivesecurity.com/2016/06/17/t-mobile-czech-republic-suffers-data-leak/

[Asyn]

Fresh hell for TalkTalk customers: TeamView trap unleashed
http://www.theregister.co.uk/2016/06/13/talktalk_teamviewer_customer_scam/

[Asyn]

GitHub Security Update: Reused password attack
https://github.com/blog/2190-github-security-update-reused-password-attack

[Asyn]

GoToMyPC Password Issues
http://status.gotomypc.com/incidents/s2k8h1xhzn4k

[Asyn]

Retefe banking Trojan targets UK banking customers
https://blog.avast.com/retefe-banking-trojan-targets-uk-banking-customers

[Asyn]

WordPress 4.5.3 Maintenance and Security Release
https://wordpress.org/news/2016/06/wordpress-4-5-3/

[Be Secure]

MIRCOP Ransomware Poses as Robbed Anonymous Member

A new strain of ransomware named MIRCOP poses as a robbed member of the Anonymous hacker group, asking users to give money back or have their files locked forever.

MIRCOP is one of the non-standard ransomware families that deviate from the regular modus operandi that most ransomware variants follow these days.

http://news.softpedia.com/news/mircop-ransomware-poses-as-robbed-anonymous-member-505677.shtml

[Be Secure]

Finding an ATM Skimmer: It pays to be paranoid!
https://www.linkedin.com/pulse/finding-atm-skimmer-pays-paranoid-benjamin-tedesco-gcih-pmp

[Be Secure]

Nuclear Exploit Kit Shuts Down As Researchers Probe Its Infrastructure
http://news.softpedia.com/news/nuclear-exploit-kit-shuts-down-as-researchers-probe-its-infrastructure-505696.shtml

Even before the Angler Exploit Kit (EK) shut down operations towards the end of May and start of June, the Nuclear Exploit Kit was dead and gone, according to multiple sources in the security industry.

The Nuclear EK was one of the biggest sources of ransomware infections, being notorious for delivering the Locky ransomware, among many other threats.

The exploit kit was always popular, being one of the top five exploits kits in usage, but around April 30, multiple sources say they stopped seeing any type of activity from Nuclear's infrastructure as if someone had pulled the plug and never returned.

[Pondus]

MIRCOP Ransomware Poses as Robbed Anonymous Member

A new strain of ransomware named MIRCOP poses as a robbed member of the Anonymous hacker group, asking users to give money back or have their files locked forever.

MIRCOP is one of the non-standard ransomware families that deviate from the regular modus operandi that most ransomware variants follow these days.

http://news.softpedia.com/news/mircop-ransomware-poses-as-robbed-anonymous-member-505677.shtml

http://blog.trendmicro.com/trendlabs-security-intelligence/instruction-less-ransomware-mircop-channels-guy-fawkes/

[Pondus]

Why Ransomware Works: Arrival Tactics
http://blog.trendmicro.com/trendlabs-security-intelligence/ransomware-arrival-methods/

[Pondus]

ohooo   


Google Found Disastrous Symantec and Norton Vulnerabilities That Are 'As Bad As It Gets'
http://fortune.com/2016/06/29/symantec-norton-vulnerability/

http://arstechnica.com/security/2016/06/25-symantec-products-open-to-wormable-attack-by-unopened-e-mail-or-links/

https://googleprojectzero.blogspot.no/2016/06/how-to-compromise-enterprise-endpoint.html

https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_00

https://bugs.chromium.org/p/project-zero/issues/list?q=label:Vendor-Symantec

[bob3160]

ohooo   


Google Found Disastrous Symantec and Norton Vulnerabilities That Are 'As Bad As It Gets'
http://fortune.com/2016/06/29/symantec-norton-vulnerability/

http://arstechnica.com/security/2016/06/25-symantec-products-open-to-wormable-attack-by-unopened-e-mail-or-links/

https://googleprojectzero.blogspot.no/2016/06/how-to-compromise-enterprise-endpoint.html

https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_00

https://bugs.chromium.org/p/project-zero/issues/list?q=label:Vendor-Symantec

I think my recommended protection is much better : http://bob3160.blogspot.com/2016/06/heres-my-version-of-best-security.html