Here is a review of this weeks Cert Advisory. Surprising number of Google Chrome issues this week, luckily Chrome is updated constantly and quietly without prompting. This is a weekly feature here at Managed Solutions.
Popularity: 2% [?]
We help organizations improve and grow by more effectively using technology.
Here is a review of this weeks Cert Advisory. Surprising number of Google Chrome issues this week, luckily Chrome is updated constantly and quietly without prompting. This is a weekly feature here at Managed Solutions.
Popularity: 2% [?]
Here is a review of this weeks Cert Advisory. This week is Microsoft triage week, there are a ton of 9.3 severity and above (out of 10) vulnerabilities. This is a weekly feature here at Managed Solutions. What can you do to protect yourself:
Popularity: 2% [?]
Here is a review of this weeks Cert Advisory. The main highlight are the vulnerabilities in Internet Explorer version 5, which is not broadly used. This is a weekly feature here at Managed Solutions.
Popularity: 2% [?]
These are weekly reviews of the reports from CERT. The main highlights are some Realplayer vulnerabilities and the Cisco Unified Meeting Place. This is a weekly feature here at Managed Solutions.

Cisco Unified Meeting Place Bulletins
Popularity: 2% [?]
We were made aware of an issue that ADP is reporting with some of their Payroll customers. Here is the text of the warning message they are sending their clients:
“ADP is receiving reports of a phishing email scam targeting ADP EasyPayNet clients who perform their payroll via the Internet. Phishing email scams are designed to mimic legitimate websites and are intended to compromise your login credentials. The email is fraudulent and did not come from ADP. Please immediately delete the email and do not click on any links in the email or enter any login information. Please be aware that ADP would never send an email asking you to provide or enter your login credentials for any reason.”
Here is a screenshot of the Phishing Email:
Popularity: 24% [?]
These are weekly reviews of the reports from CERT. Nothing too horrible this week, but I provide more insights into what to look for and why. I did review the Shockwave Player vulnerability after recording the video and determined that since it is not a common component for most of our audience it did not merit a separate bulletin and notice. This is a weekly feature here at Managed Solutions.
Popularity: 2% [?]
Here at Managed Solutions we do not raise the red flag often, but after reviewing the latest CERT advisory, we’ve done just that. Do not delay, upgrade your Adobe Acrobat and Acrobat Reader Products immediately to the latest version, apply the security patches or install adobe updater recommended updates. The US-CERT Bulletin for today SB10-018 indicates 6 different CVSS Score of 10 vulnerabilities for Adobe Acrobat and Acrobat Reader. Basically a CVSS Score of 10 indicates the highest threat level due to the remote code execution capability and these issues should be taken very seriously. There is a link at the bottom of this article to the resources at Adobe’s website as well as a download for the Windows Version of Adobe Acrobat, please pass the word.

We’ve learned that some people are having problems downloading the update directly from Adobe’s website so we’ve put the Windows version of Adobe Acrobat Reader 9.3 here for download.
Popularity: 7% [?]
According to an Internetnews.com article this morning a study released today by security vendor Cenzic Firefox accounts for 44% of all browser vulnerabilities for January through June 2009. Safari (Apple) is second at 35% and Internet Explorer (Microsoft) is third at 15%. If you follow the space this will not come as a surprise. My advice would not be to recommend changing back to Internet Explorer if you use Firefox or Safari and like it. The advice would be to minimize the add-ons you use and always run the updater when prompted to do so.
If you are interested in learning about issues like this as they emerge, sign up for our alerts.
Popularity: 2% [?]
Update 7/15/2009 – the link to “Disable” below will now take you to a page with a link to the security update for this issue. Not long ago an exploitable flaw with ActiveX control for streaming video was discovered and is being exploited. The flaw itself has not been patched and there are only work-arounds that involve disabling the controls. For this reason we are advising the following until a patch is available:
1. Use an alternative browser such as Mozilla Firefox.
2. Disable the vulnerable Active X controls.
3. Be extremely cautious about what links are clicked/web pages are visited. (Only recommend to very experienced users)
If you have questions about this vulnerability feel free to contact us.
Popularity: 1% [?]
We have received a notice from US-CERT about a security flaw involving Internet Explorer 7 and Adobe Acrobat. The flaw only affects windows based machines that have Internet Explorer 7 and Adobe Acrobat products. If you have both of these products installed your system could be compromised if you opened a pdf file that was crafted to exploit this flaw. This flaw has been labelled critical, and we are prioritizing addressing this flaw with our customers.
Who should be concerned?
If I meet the criteria that makes me vulnerable, what should I do?
Where can I get more information about this problem?
Popularity: 1% [?]
Copyright © 2010 Managed Solutions - Maintained by Joe Hackman
Recent Comments