SECURITY WARNINGS & Notices - Please post them here

[polonus]

Read: https://www.theregister.co.uk/2017/05/12/googles_php_api_client_has_xss_vulnerability/

XSS vulnerabilities still unpatched in Google API code, read: https://markjaquith.wordpress.com/2009/09/21/php-server-vars-not-safe-in-forms-or-links/

polonus (volunteer website security analyst and website error-hunter)

[Pondus]

WCry: Knowns And Unknowns
https://labsblog.f-secure.com/2017/05/13/wcry-knowns-and-unknowns/


Massive WannaCry/Wcry Ransomware Attack Hits Various Countries
http://blog.trendmicro.com/trendlabs-security-intelligence/massive-wannacrywcry-ransomware-attack-hits-various-countries/


WanaCrypt0r ransomware hits it big just before the weekend
https://blog.malwarebytes.com/cybercrime/2017/05/wanacrypt0r-ransomware-hits-it-big-just-before-the-weekend/


The worm that spreads WanaCrypt0r
https://blog.malwarebytes.com/threat-analysis/2017/05/the-worm-that-spreads-wanacrypt0r/


Symantec 
https://www.symantec.com/connect/blogs/what-you-need-know-about-wannacry-ransomware

How is WannaCry spread?

While WannaCry can spread itself across an organization’s networks by exploiting a vulnerability, the initial means of infection—how the first computer in an organization is infected—remains unconfirmed. Symantec has seen some cases of WannaCry being hosted on malicious websites, but these appear to be copycat attacks, unrelated to the original attacks.

[Staticguy]

WannaCry


https://www.engadget.com/2017/05/15/pirated-windows-china-russia-wannacry/

https://www.engadget.com/2017/05/15/wannacry-ransomware-may-have-had-north-korean-code/

https://www.engadget.com/2017/05/14/wannacry-ransomware-evolves/

[bob3160]

http://bob3160.blogspot.com/2017/05/wannacry-ransomeware-live-dont-get.html

[Pondus]

WannaCry & The Reality Of Patching
http://blog.trendmicro.com/wannacry-reality-of-patching/


Why “Just Patch It!” Isn’t as Easy as You Think
http://blog.trendmicro.com/just-patch-isnt-easy-think/

[polonus]

PHISHING 33% up because of Brexit: https://www.theregister.co.uk/2017/02/07/phishing_trends/

pol

[bob3160]

PHISHING 33% up because of Brexit: https://www.theregister.co.uk/2017/02/07/phishing_trends/

pol

Sounds like politics to me.

[DavidR]

PHISHING 33% up because of Brexit: https://www.theregister.co.uk/2017/02/07/phishing_trends/

pol

I have seen lots of things being blamed on Brexit, but this is bloody ridiculous.

The Brexit vote was almost a year ago and almost anything malware related is going to go up year on year, crazy.

[Pondus]

PHISHING 33% up because of Brexit: https://www.theregister.co.uk/2017/02/07/phishing_trends/

pol

Sounds like politics to me.

Political Phish you mean. 

[bob3160]

PHISHING 33% up because of Brexit: https://www.theregister.co.uk/2017/02/07/phishing_trends/

pol

I have seen lots of things being blamed on Brexit, but this is bloody ridiculous.

The Brexit vote was almost a year ago and almost anything malware related is going to go up year on year, crazy.

Brexit and Trump, the blame for everything that's wrong in this world.
If you don't believe me just read the newspaper or look at the news.

[DavidR]

PHISHING 33% up because of Brexit: https://www.theregister.co.uk/2017/02/07/phishing_trends/

pol

Sounds like politics to me.

Political Phish you mean. 

You're spelling pish wrong

[Pondus]

Pictures say more   

[Be Secure]

BTCWare Ransomware Master Key Released, Free Decrypter Available
https://www.bleepingcomputer.com/news/security/btcware-ransomware-master-key-released-free-decrypter-available/

[bob3160]

Steps for Window 10 system to set Port and prevent WannaCrypt attacking
https://goo.gl/u54N15

[DavidR]

Steps for Window 10 system to set Port and prevent WannaCrypt attacking
https://goo.gl/u54N15

#

Thanks for that Bob.