SECURITY WARNINGS & Notices - Please post them here

[Asyn]

Next Tuesday Microsoft to finally fix IE vulnerability

One IE vulnerability not fixed
http://www.vupen.com/english/advisories/2010/3156

[Pondus]

Critical vulnerability in Internet Explorer - no available update (UPDATED)
http://www.norman.com/security_center/security_center_archive/2010/129567/en



Two critical updates for Microsoft systems in December 2010
http://www.norman.com/security_center/security_center_archive/2010/133179/en

[bob3160]

Critical vulnerability in Internet Explorer - no available update (UPDATED)
http://www.norman.com/security_center/security_center_archive/2010/129567/en

Update 2010-12-15

Microsoft has published an update that solves this issue.

More information in Microsoft Security Bulletin MS10-090
It's always nice to post all the information.

[Asyn]

Back door in HP network storage solution
http://www.securityweek.com/backdoor-vulnerability-discovered-hp-msa2000-storage-systems

Update: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02662287
(HP SUPPORT COMMUNICATION - CUSTOMER ADVISORY)

[iRonzel]

Chaining Bugs to Exploit Browser Plug-Ins


http://threatpost.com/en_us/blogs/chaining-bugs-exploit-browser-plug-ins-121710?utm_source=Newsletter_121710&utm_medium=Email+Marketing&utm_campaign=Newsletter&CID=

[Asyn]

When a smart card can root your computer
http://labs.mwrinfosecurity.com/files/Advisories/mwri_opensc-get-serial-buffer-overflow_2010-12-13.pdf
Patches available: https://www.opensc-project.org/opensc/changeset/4913

[swarnava]

Twitter, Leaks and Spam

It's quite common to see attackers use hot topics on social networks to force users to click on malicious links. So what would be more interesting these days than using the term “Wikileaks”?

http://www.securelist.com/en/blog/208188050/Twitter_Leaks_and_Spam

[Asyn]

Google questions results of malicious site protection test
http://www.h-online.com/security/news/item/Google-questions-results-of-malicious-site-protection-test-1155534.html

[Omid Farhang]

Google questions results of malicious site protection test
http://www.h-online.com/security/news/item/Google-questions-results-of-malicious-site-protection-test-1155534.html

Good one, Thanks!

...The test by NSS Labs was financed by Microsoft.

[Asyn]

USA: 11.7 MILLION PERSONS REPORTED IDENTITY THEFT VICTIMIZATION IN 2008
http://www.ojp.usdoj.gov/newsroom/pressreleases/2010/BJS11044.htm

[bob3160]

That's a lot of theft but the info is a little dated since the information
is "water under the bridge" not anything you can do anything about.

[Asyn]

That's a lot of theft but the info is a little dated since the information
is "water under the bridge" not anything you can do anything about.

True, Bob.
I don't understand either, why they release the info this late...

# ADVANCE FOR RELEASE AT 10:00 A.M. EST # Thursday, December 16, 2010

[bob3160]

Off Topic:
I love your Christmas Tree. 

[SpeedyPC]

Off Topic:
I love your Christmas Tree. 

Off Topic:

Can I chop it down on boxing day

[Asyn]

Off Topic:
I love your Christmas Tree. 

Thanks Bob..!

@Speedy: Well, it won't last till boxing day...