SECURITY WARNINGS & Notices - Please post them here

[Lisandro]

These are both great programs - why can't they work together?

Add one to the exclusion list of the other and vice-versa.

[iRonzel]

Bin Laden Home Videos Feed Google Image Attacks

Skype Planning Patch for Mac OS X Client Flaw

[Asyn]

Chrome exploit for Windows passes every security hurdle
http://www.h-online.com/security/news/item/Chrome-exploit-for-Windows-passes-every-security-hurdle-1240508.html

[bob3160]

LastPass Security Notification
http://blog.lastpass.com/2011/05/lastpass-security-notification.html

We noticed an issue yesterday and wanted to alert you to it. As a precaution, we're also forcing you to change your master password.

yeah and now their forums are down, not their main site though.
New blog notification here:
http://blog.lastpass.com/2011/05/lastpass-security-notification.html

Just received the following:

[Dch48]

According to this notice, the latest version of Chrome has been hacked--http://www.zdnet.com/blog/security/google-chrome-hacked-with-sophisticated-exploit/8626?tag=nl.e589

[Asyn]

Facebook Applications Accidentally Leaking Access to Third Parties
http://www.symantec.com/connect/blogs/facebook-applications-accidentally-leaking-access-third-parties

[bob3160]

Facebook Applications Accidentally Leaking Access to Third Parties
http://www.symantec.com/connect/blogs/facebook-applications-accidentally-leaking-access-third-parties

Precisely why I always stress not using 3rd party apps in Facebook.

[iRonzel]

According to this notice, the latest version of Chrome has been hacked--http://www.zdnet.com/blog/security/google-chrome-hacked-with-sophisticated-exploit/8626?tag=nl.e589

Maybe this can be related with WebGL Standard (including Firefox, Chrome, Opera, Safari):

Researchers Warn of Security Issues in WebGL Standard

Four things you should know about LastPass

[Dch48]

According to this notice, the latest version of Chrome has been hacked--http://www.zdnet.com/blog/security/google-chrome-hacked-with-sophisticated-exploit/8626?tag=nl.e589

Maybe this can be related with WebGL Standard (including Firefox, Chrome, Opera, Safari):

Researchers Warn of Security Issues in WebGL Standard

Four things you should know about LastPass

When you read the article, you see that what they did was a series of sophisticated exploits that would be highly unlikely to ever really happen.

[iRonzel]

According to this notice, the latest version of Chrome has been hacked--http://www.zdnet.com/blog/security/google-chrome-hacked-with-sophisticated-exploit/8626?tag=nl.e589

Maybe this can be related with WebGL Standard (including Firefox, Chrome, Opera, Safari):

Researchers Warn of Security Issues in WebGL Standard

Four things you should know about LastPass

When you read the article, you see that what they did was a series of sophisticated exploits that would be highly unlikely to ever really happen.

You are right. But, I said a POSSIBLE cause, NOT the real cause. Also, they not specified what security product were installed at the moment of the video, they showed the update Chrome, but not the Windows update, if the firewall was on or off. Personally, the video is incomplete, we can't predict what was the real thing. I only said (the above mentioned) a possible reason. A vulnerable WebGL standard.    

[Dch48]

I don't think it had to do with WebGL but if it did, I'm safe. WebGL is disabled in Chrome for XP.

[iRonzel]

IE9 Safe from WebGL Woes

browsers supporting WebGL put customers at risk

 

“US-CERT is aware of reports indicating that WebGL contains multiple significant security issues. The impact of these issues includes arbitrary code execution, denial of service, and cross-domain attacks. WebGL is a new web standard that is enabled by default in Firefox 4 and Google Chrome and is included in Safari,”

[Asyn]

ZeuS source code freely available on the net
http://www.h-online.com/security/news/item/ZeuS-source-code-freely-available-on-the-net-1241417.html
http://www.csis.dk/en/csis/blog/3229

[Dch48]

IE9 Safe from WebGL Woes

browsers supporting WebGL put customers at risk

 

“US-CERT is aware of reports indicating that WebGL contains multiple significant security issues. The impact of these issues includes arbitrary code execution, denial of service, and cross-domain attacks. WebGL is a new web standard that is enabled by default in Firefox 4 and Google Chrome and is included in Safari,”

Chrome on XP is also safe because WebGL is disabled.

[iRonzel]

Google doodle takes you to scareware sites

The infected system could no longer be used in any meaningful way.

Hackers versus Apple

However, experience shows me that OS X probably has more bugs than a Windows browser

Ouch!