SECURITY WARNINGS & Notices - Please post them here

[yongsua]

Absolute Snowage:A concise history of recent Sony hacks

http://attrition.org/security/rants/sony_aka_sownage.html

[Asyn]

Acer inadvertently releases 40,000 customer details
http://www.h-online.com/security/news/item/Acer-inadvertently-releases-40-000-customer-details-1255998.html

[Asyn]

RSA finally comes clean: SecurID is compromised
http://arstechnica.com/security/news/2011/06/rsa-finally-comes-clean-securid-is-compromised.ars
http://www.rsa.com/node.aspx?id=3891

[Asyn]

Allied Telesis divulges secret backdoor
http://www.h-online.com/security/news/item/Allied-Telesis-divulges-secret-backdoor-1251556.html

Allied Telesis – no backdoor in devices
http://www.h-online.com/security/news/item/Allied-Telesis-no-backdoor-in-devices-1257052.html

[REDACTED]

Fake anti-viruses for MAC, new 64-bit rootkits, and other "surprises" of May

http://news.drweb.com/show/?i=1706&lng=en&c=9

[esr30]

Pretty sure this is a false Positive. wish I could remember what piece of malware avast said it was trying to download on the system.

failblog.org

[Asyn]

Microsoft Security Bulletin Advance Notification for June 2011
https://www.microsoft.com/technet/security/bulletin/ms11-jun.mspx

[Asyn]

Prenotification: Quarterly Security Updates for Adobe Reader and Acrobat
http://blogs.adobe.com/psirt/2011/06/prenotification-quarterly-security-updates-for-adobe-reader-and-acrobat-3.html

[AdrianH]

http://nakedsecurity.sophos.com/2011/06/09/fake-anti-virus-cloaks-itself-to-appear-to-be-microsoft-update/


Fake anti-virus cloaks itself to appear to be Microsoft Update

We are seeing the criminals behind fake anti-virus continuing to customize their social engineering attacks to be more believable to users and presumably more successful.

Last week I wrote about fake Firefox malware warnings leading users to rogue security software. This week they've started to imitate Microsoft Update.......... (more)

This is very convincing, I have seen it on a laptop and it really does look like it is from Microsoft.

[bob3160]

This is very convincing, I have seen it on a laptop and it really does look like it is from Microsoft.

However, you where using Firefox when it came up and windows update only works in IE.

[Dch48]

This is very convincing, I have seen it on a laptop and it really does look like it is from Microsoft.

However, you where using Firefox when it came up and windows update only works in IE.

Good point Bob and also, you only see that page in XP. In Vista and I'm assuming 7 as well, you never actually go to the MS Update site so that would be a red flag for many as well.

[Nesivos]

Patch Tuesday heads-up: Critical holes in Windows, IE, MS Office

http://www.zdnet.com/blog/security/patch-tuesday-heads-up-critical-holes-in-windows-ie-ms-office/8739?tag=nl.e589

Critical Vulnerabilities in IE9 and Windows 7 SP1 to Be Patched Next Week

http://news.softpedia.com/news/Critical-Vulnerabilities-in-IE9-and-Windows-7-SP1-to-Be-Patched-Next-Week-205440.shtml

[AdrianH]

This is very convincing, I have seen it on a laptop and it really does look like it is from Microsoft.

However, you where using Firefox when it came up and windows update only works in IE.

No, I was not using Firefox nor was the owner of the laptop. I loathe Firefox and avoid it where ever possible. The laptops owner was using Safari at the time.


The point is there are millions of people that do not understand their systems that well and they ARE fooled by these things, if every user was 100% tech savvy there would be no need for any AV systems at all.

[bob3160]

The point is there are millions of people that do not understand their systems that well and they ARE fooled by these things, if every user was 100% tech savvy there would be no need for any AV systems at all.

I highly doubt that being tech savvy would end your need for your security related software.
I do agree that this malware is very convincing and will fool the average computer user which
is why keeping your software totally up to date becomes more critical all the time.
Since the new Malware always comes first, there is also no assurance of !00% protection and those with
some tech knowledge have a better chance of staying safe than those that have none.

[Asyn]

The point is there are millions of people that do not understand their systems that well and they ARE fooled by these things, if every user was 100% tech savvy there would be no need for any AV systems at all.

I highly doubt that being tech savvy would end your need for your security related software.

+1