SECURITY WARNINGS & Notices - Please post them here

[Asyn]

Zeus trojan adds fake investment adverts
http://www.h-online.com/security/news/item/Zeus-trojan-adds-fake-investment-adverts-1233415.html
http://www.trusteer.com/blog/zeus-adds-investment-fraud-its-bag-tricks

[Pondus]

Not sure if this has already been posted....

apr 26-2011  Update on PlayStation Network and Qriocity
http://blog.us.playstation.com/2011/04/26/update-on-playstation-network-and-qriocity/

[Pondus]

a digital thriller book review 

Zero Day - a review
http://www.norman.com/security_center/blog/per_olav_forland/145996/en

[Asyn]

Not sure if this has already been posted....

Not the US version, but everything else is here:
http://forum.avast.com/index.php?topic=52252.msg638566#msg638566

[Asyn]

A Second MSRT Release in April
http://blogs.technet.com/b/mmpc/archive/2011/04/26/a-second-msrt-release-in-april.aspx

[Asyn]

Cisco Security Advisory

Multiple Vulnerabilities in Cisco Unified Communications Manager
http://www.cisco.com/warp/public/707/cisco-sa-20110427-cucm.shtml

Cisco Wireless LAN Controllers Denial of Service Vulnerability
http://www.cisco.com/warp/public/707/cisco-sa-20110427-wlc.shtml

[Asyn]

PlayStation Network & Qriocity services turned off
http://blog.eu.playstation.com/2011/04/23/update-on-playstation-network-qriocity-services/

Update: http://anonops.blogspot.com/2011/04/we-didnt-do-it-sony-incompetent.html
Update: http://blog.eu.playstation.com/2011/04/24/latest-update-for-psnqriocity-services/

Update on PSN Service Outages
http://faq.en.playstation.com/cgi-bin/scee_gb.cfg/php/enduser/std_adp.php?locale=en_GB&p_faqid=5593

Q&A #1 for PlayStation Network and Qriocity Services
http://blog.us.playstation.com/2011/04/27/qa-1-for-playstation-network-and-qriocity-services/

Attack on the PlayStation Network: what customers should now watch out for
http://www.h-online.com/security/news/item/Attack-on-the-PlayStation-Network-what-customers-should-now-watch-out-for-1233905.html

[Hermite15]

A Second MSRT Release in April
http://blogs.technet.com/b/mmpc/archive/2011/04/26/a-second-msrt-release-in-april.aspx

probably related to the same infection:
Feds to remotely delete Coreflood from infected PCs
http://www.digitaltrends.com/computing/feds-to-remotely-delete-coreflood-from-infected-pcs/

[DavidR]

Great, sign a consent form to have the Feds rummage around in your computer. Not sure which would be more attractive in your system, the botnet or the Feds

[Hermite15]

Great, sign a consent form to have the Feds rummage around in your computer. Not sure which would be more attractive in your system, the botnet or the Feds

they say they won't spy

[Asyn]

Nikon Image Authentication System: Compromised
http://blog.crackpassword.com/2011/04/nikon-image-authentication-system-compromised/

[Asyn]

FBI warns of fraudulent bank transfers to China
http://www.h-online.com/security/news/item/FBI-warns-of-fraudulent-bank-transfers-to-China-1234421.html
http://www.ic3.gov/media/2011/ChinaWireTransferFraudAlert.pdf

[yongsua]

Iran: Country under attack by second computer virus
http://malwareresearchgroup.com/2011/04/iran-country-under-attack-by-second-computer-virus/

[Hermite15]

Iran: Country under attack by second computer virus
http://malwareresearchgroup.com/2011/04/iran-country-under-attack-by-second-computer-virus/

not much to complain about

[Asyn]

Dropbox authentication: insecure by design
http://dereknewton.com/2011/04/dropbox-authentication-static-host-ids/

Dropbox experiment with update to solve security vulnerability
http://www.h-online.com/security/news/item/Dropbox-experiment-with-update-to-solve-security-vulnerability-1234815.html