SECURITY WARNINGS & Notices - Please post them here

[Asyn]

Critical vulnerability in Firefox 3.5 and Firefox 3.6
http://blog.mozilla.com/security/2010/10/26/critical-vulnerability-in-firefox-3-5-and-firefox-3-6/
https://bugzilla.mozilla.org/show_bug.cgi?id=607222 [dev rights needed]
http://blog.trendmicro.com/firefox-zero-day-found-in-compromised-nobel-peace-prize-website/
asyn

Updates available..!! That was fast...!!
https://developer.mozilla.org/devnews/index.php/2010/10/27/firefox-3-6-12-and-3-5-15-security-updates-now-available/
https://developer.mozilla.org/devnews/index.php/2010/10/27/thunderbird-3-1-6-and-3-0-10-security-updates-now-available/
asyn

[Asyn]

Trojan Horse OSX/Koobface.A Affects Mac OS X
Koobface Variant Spreads via Facebook, Twitter and More
http://blog.intego.com/2010/10/27/intego-security-memo-trojan-horse-osxkoobface-a-affects-mac-os-x-mac-koobface-variant-spreads-via-facebook-twitter-and-more/
http://www.securemac.com/boonana-bulletin.php
asyn

[Asyn]

Security problems in media players
http://www.h-online.com/security/news/item/Security-problems-in-media-players-1109782.html
asyn

Nullsoft closes holes in Winamp
http://forums.winamp.com/showthread.php?t=322995
http://secunia.com/secunia_research/2010-95/
asyn

[Onix]

A new vulnerability in Adobe products:
http://www.adobe.com/support/security/advisories/apsa10-05.html

[Asyn]

CiscoWorks Common Services Arbitrary Code Execution Vulnerability
http://www.cisco.com/warp/public/707/cisco-sa-20101027-cs.shtml
asyn

[Pondus]

"Your are infected with Bredolab" Message Problem
http://norman.com/security_center/blog/righard_zwienenberg/129332/en-us


Hey, your computer is infected!
http://norman.com/security_center/security_center_archive/2010/129405/en-us


Undead Bredolab zombie network lashes out from the grave (Someone's still pulling the strings)
http://www.theregister.co.uk/2010/10/29/bredolab_botnet_death_throes/

[CharleyO]

***

Using Wi-Fi?  Firesheep may endanger your security

"Most internet users hear -- and dismiss -- warnings about security problems on open Wi-Fi networks. The advent of Firesheep, coupled with the booming popularity of account-based online services such as Twitter, means that no one can afford to continue to ignore online security."

http://edition.cnn.com/2010/TECH/mobile/11/01/firesheep.wifi.security/


***

[Asyn]

Spontaneous worldwide reboot of Check Point appliances
http://yurisk.info/2010/10/31/the-d-day-for-checkpoint-utm-1-edge-appliances-happened-today-reboots-are-reported-all-over-the-world/
http://www.cpug.org/forums/check-point-utm-1-edge-appliances/14606-all-edge-firewalls-rebooted-10-30-2010-8-58-p-m.html
asyn

[osants911]

Hackers tap SCADA vuln search engine

http://www.theregister.co.uk/2010/11/02/scada_search_engine_warning/

[YoKenny]

Firesheep, Idiocy, Ethics and the Law
http://blog.eset.com/2010/11/02/firesheep-idiocy-ethics-and-the-law

[Pondus]

Sophos debuts freebie anti-virus scanner for Macs (Sweat trickles down fanboi foreheads)
http://www.theregister.co.uk/2010/11/02/sophos_mac_anti_virus/

Shopos Anti-Virus for Mac home edition
http://www.sophos.com/products/free-tools/free-mac-anti-virus/tech-specs.html
Forum
http://openforum.sophos.com/t5/Sophos-Anti-Virus-for-Mac-Home/bd-p/FTT_MAC_MAGNET


Sophos unveils free antivirus software for the Mac
http://news.cnet.com/8301-27080_3-20021424-245.html

[iRonzel]

New multi-platform infector:

Trojan:Java/Boonana, is written in Java which gives it cross platform capability infecting Windows, Mac and Linux users.

http://blogs.technet.com/b/mmpc/archive/2010/11/03/its-not-koobface-new-multi-platform-infector.aspx

[scythe944]

***

Using Wi-Fi?  Firesheep may endanger your security

"Most internet users hear -- and dismiss -- warnings about security problems on open Wi-Fi networks. The advent of Firesheep, coupled with the booming popularity of account-based online services such as Twitter, means that no one can afford to continue to ignore online security."

http://edition.cnn.com/2010/TECH/mobile/11/01/firesheep.wifi.security/


***

Squash FireSheep with FireShepherd:

http://notendur.hi.is/~gas15/FireShepherd/
http://www.downloadsquad.com/2010/10/29/fight-firesheep-with-fireshepherd/

[Asyn]

Adobe, Adobe, Adobe...
http://blogs.adobe.com/psirt/2010/11/potential-issue-in-adobe-reader.html
http://lists.grok.org.uk/pipermail/full-disclosure/2010-November/077255.html
http://secunia.com/advisories/42112/

[iRonzel]

Attackers Now Using Honeypots to Trap Researchers

http://threatpost.com/en_us/blogs/attackers-now-using-honeypots-trap-researchers-110410?utm_source=Newsletter_110510&utm_medium=Email+Marketing&utm_campaign=Newsletter&CID=&CID=