SECURITY WARNINGS & Notices - Please post them here

[osants911]

New malware technique targets intrusion-prevention systems

http://www.networkworld.com/news/2010/101810-malware-targets-ips.html?t51hb

[osants911]

Fake Twitter homepages serving malware

http://www.net-security.org/malware_news.php?id=1498

[Marc57]

Microsoft nukes Zeus malware from 275,000 Windows machines

Microsoft is claiming major success at cleaning the notorious Zeus crimeware trojan from infected Windows machines.

One week after adding detections into its malicious software removal tool, Microsoft said it nuked Zeus (also called Zbot) 281,491 times from 274,873 computers.


http://www.zdnet.com/blog/security/microsoft-nukes-zeus-malware-from-275000-windows-machines/7481?tag=nl.e589

[Omid Farhang]

RealPlayer Security Updates Published

Facebook Privacy Breach: Users' Info Leaked To Advertising, Tracking Firms

[Asyn]

Trojan trouble at Lenovo
http://www.h-online.com/security/news/item/Trojan-trouble-at-Lenovo-1110581.html
asyn

[Asyn]

Hole in Linux kernel provides root rights
http://www.vsecurity.com/resources/advisory/20101019-1/
asyn

[YoKenny]

WoW Patch Brings Out the Malware Trolls
http://blog.webroot.com/2010/10/20/wow-patch-brings-out-the-malware-trolls

[osants911]

Hackers subvert Firefox security warnings to sling scareware

http://www.theregister.co.uk/2010/10/20/scareware_scumbags_subvert_firefox_security_warnings/

[Avastfan1]

RealPlayer Security Updates Published

Strange how there are no updates for the latest version 1.1.5 :S

[Pondus]

Critical vulnerability in Adobe Shockwave Player - no update available
http://www.norman.com/security_center/security_center_archive/2010/128624/en

A critical vulnerability has been identified in Adobe Shockwave Player 11.5.8.612 and earlier versions. Details about the vulnerability has been published on the Internet, and malware that utilizes this may be expected to appear.

[Asyn]

Critical vulnerability in Adobe Shockwave Player - no update available
http://www.norman.com/security_center/security_center_archive/2010/128624/en

A critical vulnerability has been identified in Adobe Shockwave Player 11.5.8.612 and earlier versions. Details about the vulnerability has been published on the Internet, and malware that utilizes this may be expected to appear.

More on this:
http://www.exploit-db.com/exploits/15296/
http://blogs.adobe.com/psirt/2010/10/security-advisory-for-adobe-shockwave-player-apsa10-04.html
asyn

[Asyn]

Apple releases Java security updates
http://www.h-online.com/security/news/item/Apple-releases-Java-security-updates-1122472.html
asyn

[Asyn]

New malware technique targets intrusion-prevention systems

http://www.networkworld.com/news/2010/101810-malware-targets-ips.html?t51hb

Alarms for online networks largely useless
http://www.h-online.com/security/news/item/Alarms-for-online-networks-largely-useless-1123028.html
asyn

[Asyn]

Pidgin 2.7.4 closes DoS vulnerability
http://pidgin.im/news/security/?id=48
http://developer.pidgin.im/wiki/ChangeLog
asyn

[mkis]

CompTIA - upcoming discussion on security culprits and costs

http://www.scmagazineus.com/costs-and-causes-of-data-loss-incidents-to-be-discussed/article/181252/