SECURITY WARNINGS & Notices - Please post them here

[bob3160]

Microsoft bombs another security test
http://reviews.cnet.com/8301-3667_7-57564385/microsoft-bombs-another-security-test/?ttag=fbwp

And avast! has another good showing.

[Asyn]

Shylock calling Skype
https://www.csis.dk/en/csis/blog/3811/

[mchain]

New plugin exploit for Foxit Reader

http://www.pcworld.com/article/2025154/foxit-reader-security-flaw-reportedly-allows-attack.html

Patch is now available within Foxit Reader

Open Foxit Reader GUI>Help>Check For Updates  Select Update Version 5.4.5.0114.  Alternatively, http://www.foxitsoftware.com/Secure_PDF_Reader/ and select download button 'Free Foxit Reader Download' uninstall/reboot/install.  Either will secure Foxit Reader from outside attack.

[polonus]

Two new java leaks detected: http://archives.neohapsis.com/archives/fulldisclosure/2013-01/0143.html (link author Security Exploration's Adam Gowdiak).
Question is when is Oracle going to dump java? This is being predicted to happen soon here: http://www.cio.com/article/727028/Pull_the_Plug_on_Java_Before_It_s_Too_Late?page=2&taxonomyId=3191 (article author = Rob Enderle)

polonus

[polonus]

Malware poses as real java update: http://blog.trendmicro.com/trendlabs-security-intelligence/malware-poses-as-an-update-for-java-0-day-fix/ (link source author = TrendMicro's  Rhena Inocencio)

polonus

[Asyn]

[SE-2012-01] Java 7 Update 11 confirmed to be vulnerable
http://seclists.org/fulldisclosure/2013/Jan/142

[polonus]

Hi Asyn,

You have disabled java, haven't you? We now need ahead of the threat prevention updates...

polonus

[Asyn]

Hi Asyn,
1. You have disabled java, haven't you?
2. We now need ahead of the threat prevention updates...
polonus

1. Not only disabled it, I deleted Java a long time ago.
2. I fear, that won't happen...

[Asyn]

Current Foxit Reader can execute malicious code
http://www.h-online.com/security/news/item/Current-Foxit-Reader-can-execute-malicious-code-1780636.html
http://secunia.com/advisories/51733/

Fixed Foxit Reader released
http://www.h-online.com/security/news/item/Fixed-Foxit-Reader-released-1787736.html

[polonus]

Leaked DIY undetected  malware generating tool: http://blog.webroot.com/2013/01/18/leaked-diy-malware-generating-tool-spotted-in-the-wild/
link source author Dancho Danchev

polonus

[polonus]

Threat alert for APT hack tools used by miscreants: http://blog.trendmicro.com/trendlabs-security-intelligence/throwing-some-light-on-apt-hacktools/
(link article author =  Trendmicro's Roland Dela Paz (Threat Researcher))

polonus

[polonus]

New Skype Worm Threat - Phorpiex : http://blog.trendmicro.com/trendlabs-security-intelligence/shylock-not-the-lone-threat-targeting-skype/
(link article author =  TrendMicro's Mark Joseph Manahan (Threat Response Engineer)

polonus

[Asyn]

Backdoors in many Barracuda appliances
http://www.h-online.com/security/news/item/Backdoors-in-many-Barracuda-appliances-1790947.html

[iroc9555]

Malwarebytes mimic site ‘Malwarebiter(dot)com’ hosts fake anti-malware product and spreads malware.

WARNING: Do NOT visit ‘Malwarebiter(dot)com‘ unless you are using a secured environment (i.e. Virtual Machine or Sandbox)

http://blog.malwarebytes.org/intelligence/2013/01/cta-malwarebiter-com/

[Asyn]

You cannot trust social media to keep your private data safe: Story of a Twitter vulnerability
http://blog.ioactive.com/2013/01/you-can-not-trust-social-media-twitter-vulnerable.html