SECURITY WARNINGS & Notices - Please post them here

[osants911]

Ruby on Rails update closes vulnerability

http://www.h-online.com/security/news/item/Ruby-on-Rails-update-closes-vulnerability-1108621.html

[osants911]

Microsoft Removed 6.5 Million Bots From Windows Machines In Q2

http://www.darkreading.com/vulnerability_management/security/vulnerabilities/showArticle.jhtml?articleID=227701285

[Pondus]

Microsoft confirms Russian pill-pusher attack on its network ( Is there a Linux admin in the house? )
http://www.theregister.co.uk/2010/10/14/microsoft_confirms_ip_hijack/

Ruskie gang hijacks Microsoft network to push penis pills ( Redmond abused as scammers' IP bitch )
http://www.theregister.co.uk/2010/10/12/microsoft_ips_hijacked/

[Pondus]

Espionage app updated for Windows phones ( Next destination: Android )
http://www.theregister.co.uk/2010/10/15/smartphone_espionage_suite/

[Pondus]

ZeuS baddies copy Conficker tactics ( Malware phone-home ploy gets recycled )
http://www.theregister.co.uk/2010/10/15/zeus_conficker_assault/

Look Out, Licat!
http://countermeasures.trendmicro.eu/look-out-licat/


VirusTotal
http://www.virustotal.com/file-scan/report.html?id=b3e3b3d389d48ae056845b8223402e1d27c8950eadaa7ffecaebeda93af73a03-1287136181

ThreatExpert
http://www.threatexpert.com/report.aspx?md5=1e940baeb962042a6628f81c93aaecd1

[osants911]

Stealth malware steals, imitates social behavior

http://www.msnbc.msn.com/id/39691794/ns/technology_and_science-security/

Also read,

Malware Aimed at Social Networks May Steal Your Reality

http://www.pcworld.com/article/207659/malware_aimed_at_social_networks_may_steal_your_reality.html?tk=hp_new

[osants911]

Fake Stuxnet removal tool will kill your PC

http://www.sync-blog.com/sync/2010/10/stuxnet-removal-tool-is-malware-too.html

It's shame that avast! is not listed under suggestions...

[osants911]

Apple Fixes Bugs in Remote App 2.0.1 Update

http://www.pcworld.com/businesscenter/article/207976/apple_fixes_bugs_in_remote_app_201_update.html

[SafeSurf]

Apple Fixes Bugs in Remote App 2.0.1 Update
http://www.pcworld.com/businesscenter/article/207976/apple_fixes_bugs_in_remote_app_201_update.html

Can you post this under the new Smart Phones Update thread: http://forum.avast.com/index.php?topic=65103.0.  Thank you.

[osants911]

Hi Safesurf,

I've just realised that you've created such a nice thread!
I'll post this right away

[SafeSurf]

Hi Safesurf,

I've just realised that you've created such a nice thread!
I'll post this right away

Thank you. 

[CharleyO]

***

From the Wall Street Journal:

Report: Facebook apps transmitted personal info

"The Wall Street Journal is reporting that 10 popular Facebook applications have been transmitting users' personal identifying information to dozens of advertising and Internet tracking companies."


http://my.earthlink.net/article/top?guid=20101018/2b65b90d-a821-441e-939e-b119ebb89c03


***

[Asyn]

Microsoft: ‘Unprecedented Wave of Java Exploitation’
http://krebsonsecurity.com/2010/10/microsoft-a-tidal-wave-of-java-exploitation/
asyn

[Asyn]

Security problems in media players
http://www.h-online.com/security/news/item/Security-problems-in-media-players-1109782.html
asyn

[Asyn]

The GNU C library dynamic linker expands $ORIGIN in setuid library search path
http://seclists.org/fulldisclosure/2010/Oct/257
asyn