Author Topic: SECURITY WARNINGS & Notices - Please post them here (Read 2904548 times)

Be Secure · « **Reply #4710 on:** June 30, 2016, 12:08:05 PM »

Quote from: bob3160 on June 29, 2016, 11:59:56 PM

Quote from: Pondus on June 29, 2016, 03:32:06 PM
ohooo

Google Found Disastrous Symantec and Norton Vulnerabilities That Are 'As Bad As It Gets'
http://fortune.com/2016/06/29/symantec-norton-vulnerability/

http://arstechnica.com/security/2016/06/25-symantec-products-open-to-wormable-attack-by-unopened-e-mail-or-links/

https://googleprojectzero.blogspot.no/2016/06/how-to-compromise-enterprise-endpoint.html

https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_00

https://bugs.chromium.org/p/project-zero/issues/list?q=label:Vendor-Symantec
I think my recommended protection is much better : http://bob3160.blogspot.com/2016/06/heres-my-version-of-best-security.html

I think my recommended protection is much better as Bob's:Avast! Free Antivirus+Sandboxie Free+Windows Firewall+Winpatrol Free+Malwarebytes Anti-Malware free+Zemana AntiMalware Free+Unchecky+Malwarebytes anti-exploit Free+MCShield

polonus · « **Reply #4711 on:** June 30, 2016, 12:33:26 PM »

200 k+ parked/expired domains abused to launch malvertised ads.
One of the biggest ongoing problems online,
remedied like when "shutting the stable door after the horse has bolted".
Re: https://blog.sucuri.net/2016/06/spam-via-expired-domains.html
So malvertisers are even sinkholing to distribute their malvertised ads.
Seems because some won't dicriminate between a legit and a fraudulous click.

Read: https://blog.sucuri.net/2016/06/spam-via-expired-domains.html

pol

Be Secure · « **Reply #4712 on:** June 30, 2016, 06:38:28 PM »

Why need Remote Desktop is need to disable: http://blog.emsisoft.com/2016/06/29/apocalypse-ransomware-which-targets-companies-through-insecure-rdp/

Be Secure · « **Reply #4713 on:** July 01, 2016, 02:57:09 PM »

Top Russian Site Exposes Millions to Info-Stealing Malware
http://www.infosecurity-magazine.com/news/top-russian-site-exposes-millions/

Dwarden · « **Reply #4714 on:** July 02, 2016, 02:36:23 PM »

IoT hell started : https://threatpost.com/lizardstresser-iot-botnet-part-of-400gbps-ddos-attacks/119006/
aka every damn item in household and office with internet will become abused for DDOS ...

more with cameras https://threatpost.com/botnet-powered-by-25000-cctv-devices-uncovered/118948/
before with routers https://threatpost.com/lizard-squads-ddos-for-hire-service-built-on-hacked-home-routers/110341/

polonus · « **Reply #4715 on:** July 03, 2016, 02:06:47 AM »

Feind hört mit, EU seeks paid web-trolls:

http://www.telegraph.co.uk/news/worldnews/europe/eu/9845442/EU-to-set-up-euro-election-troll-patrol-to-tackle-Eurosceptic-surge.html

polonus

Eddy · « **Reply #4716 on:** July 04, 2016, 11:28:45 AM »

Possibly millions of computers insecure due to a UEFI bug
http://www.theregister.co.uk/2016/07/04/lenovo_scrambling_to_get_a_fix_for_bios_vuln/

bob3160 · « **Reply #4717 on:** July 04, 2016, 03:18:42 PM »

First came Petya, now comes Santana. Hope Avast is ready:
https://blog.malwarebytes.com/threat-analysis/2016/06/satana-ransomware/

Be Secure · « **Reply #4718 on:** July 04, 2016, 04:22:44 PM »

Locky ransomware starts up again its illegal activity of stealing money from their victims after a temporary inactivity since the end of May.Hope Avast! is ready:

http://securityaffairs.co/wordpress/48725/malware/locky-ransomware-back.html

Be Secure · « **Reply #4719 on:** July 05, 2016, 11:18:06 AM »

Zepto Ransomware Soars

http://www.infosecurity-magazine.com/news/zepto-ransomware-soars/
Hope Avast! is ready.

polonus · « **Reply #4720 on:** July 06, 2016, 11:36:11 AM »

Rather late US alerts for Symantec and Norton flaws.
Re: https://www.us-cert.gov/ncas/alerts/TA16-187A
European alerts already came on June 29th.
Surveillance and other interests over security?
Citizens to-day are a big nuisance factor for Big Gov and Big Corp?

polonus

bob3160 · « **Reply #4721 on:** July 06, 2016, 01:18:52 PM »

Quote from: polonus on July 06, 2016, 11:36:11 AM

Rather late US alerts for Symantec and Norton flaws.
Re: https://www.us-cert.gov/ncas/alerts/TA16-187A
European alerts already came on June 29th.
Surveillance and other interests over security?
Citizens to-day are a big nuisance factor for Big Gov and Big Corp?

polonus

https://forum.avast.com/index.php?topic=52252.msg1322132#msg1322132

Be Secure · « **Reply #4722 on:** July 06, 2016, 05:24:09 PM »

New Alfa, or Alpha Ransomware from the same devs as Cerber

Security researcher BloodDolly recently discovered a new file encrypter called Alfa Ransomware, or Alpha Ransomware, which is from the developers of Cerber. As BloodDolly is still currently analyzing this ransomware, not much is known about this ransomware at this time. Preliminary reports, though, indicate that files encrypted by Alfa Ransomware are not decryptable.

http://www.bleepingcomputer.com/news/security/new-alfa-or-alpha-ransomware-from-the-same-devs-as-cerber/ Hope avast! is ready for this when it come.

polonus · « **Reply #4723 on:** July 07, 2016, 12:15:16 AM »

Were you affected by the Trillian blog and forum Data Breach Security Incident?
Read: https://www.trillian.im/help/trillian-blog-and-forums-security-incident/

pol

Be Secure · « **Reply #4724 on:** July 07, 2016, 05:30:40 AM »

CryptXXX Ransomware Updated Avast! needs to gear up the Ransomware protection.

https://isc.sans.edu/forums/diary/CryptXXX+ransomware+updated/21229

Update:Avast! sucessfully block it.