Mailing Lists & Feeds
Current Activity Calendar
| August 21, 2006 - Current ActivityThis is an archived copy of current activity, if you would like to see the most recent version, please click here.Public Exploit Code Being Used to Actively Exploit a Vulnerability in Microsoft Server Serviceadded August 10, 2006 | updated August 15, 2006In addition to the previously reported active exploitation of a vulnerability in Microsoft Server Service, US-CERT has received reports of automated attacks and bot activity involving systems that have not been patched against this vulnerability. Successful exploitation could allow an attacker to execute arbitrary code with SYSTEM privileges. US-CERT will continue to monitor this issue and provide additional information as it becomes available. US-CERT strongly recommends users and administrators apply the appropriate updates in Microsoft Security Bulletin MS06-040 as soon as possible. More information about this vulnerability can be found in Vulnerability Note VU#650769 and Technical Cyber Security Alert TA06-220A. Active Exploitation of a Vulnerability in Microsoft Server Serviceadded August 8, 2006 | updated August 8, 2006US-CERT is aware of active exploitation of a buffer overflow vulnerability in the Microsoft Windows Server service. If a remote attacker sends a specially crafted packet to a vulnerable Windows system, that attacker may be able to execute arbitrary code with SYSTEM privileges. US-CERT recommends users and administrators apply the appropriate updates in Microsoft Security Bulletin MS06-040 as soon as possible. More information about this vulnerability can be found in Vulnerability Note VU#650769 and Technical Cyber Security Alert TA06-220A. US-CERT recommends users and administrators apply the appropriate updates in Microsoft Security Bulletin MS06-040 as soon as possible. Additionally, US-CERT strongly encourages users to review the Microsoft Security Bulletin Summary for August 2006 for additional information about vulnerabilities in Microsoft Windows, Office, Works, Visual Basic for Applications, and Internet Explorer. Multiple Vulnerabilities in Microsoft Internet Explorer 6.0added July 3, 2006 | updated August 1, 2006US-CERT is aware of multiple vulnerabilities in Microsoft Internet Explorer (IE) 6.0. US-CERT is also aware of a public blog that will be posting new web browser bugs on a daily basis in July. US-CERT will be analyzing relevant vulnerabilities, as well as actively monitoring the site to provide additional information as it becomes available. When available, more information about these vulnerabilities can be found in the following:
Until an update, patch, or more information becomes available, US-CERT strongly recommends the following:
We will continue to update current activity as more information becomes available. Active Exploitation of a Vulnerability in Microsoft PowerPointadded July 14, 2006US-CERT is aware of active exploitation of a new vulnerability in Microsoft PowerPoint. Successful exploitation could allow a remote attacker to execute arbitrary code with the privileges of the user running PowerPoint. When available, more information about this vulnerability can be found in the following:
Until an update, patch, or more information becomes available, US-CERT strongly recommends the following:
US-CERT strongly encourages users not to open unfamiliar or unexpected email attachments, even if sent by a known and trusted source. Users may wish to read Cyber Security Tip ST04-010 for more information on working with email attachments. We will continue to update current activity as more information becomes available. Public Exploit Code for Unpatched Vulnerabilities in Microsoft Internet Exploreradded June 28, 2006 | updated July 3, 2006US-CERT is aware of publicly available exploit code for two unpatched vulnerabilities in Microsoft Internet Explorer. We are tracking the first vulnerability as VU#655100. By persuading a user to double-click a file accessible through a file share such as SMB, a remote attacker may be able to execute arbitrary code with the privileges of the user. The second issue is a cross-domain violation vulnerability that is being tracked as VU#883108. Successful exploitation could allow a remote attacker to access the contents of a web page in another domain. This exploitation could lead to information disclosure, which may include harvesting user credentials. When available, more information about these vulnerabilities can be found in the following:
Until an update, patch, or more information becomes available, US-CERT recommends the following:
We will continue to update current activity as more information becomes available. Public Exploit Code for Unpatched Vulnerability in MS Office Hyperlink Object Libraryadded June 21, 2006 | updated June 22, 2006US-CERT is aware of publicly available exploit code for an unpatched buffer overflow vulnerability in Microsoft Hyperlink Object Library (HLINK.DLL). By persuading a user to access a specially crafted hyperlink in an email message or MS Office document, a remote attacker may be able to execute arbitrary code with the privileges of the user. More information about this vulnerability can be found in the following:
Until an update, patch, or more information becomes available, US-CERT recommends the following:
We will continue to update current activity as more information becomes available. Active Exploitation of a Vulnerability in Microsoft Exceladded June 16, 2006 | updated June 19, 2006US-CERT is aware of active exploitation of a new vulnerability in Microsoft Excel. Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the user running Excel. More information about this vulnerability can be found in the following:
We are continuing to investigate this vulnerability. US-CERT recommends the following actions to help mitigate the security risks:
Additionally, US-CERT strongly encourages users not to open unfamiliar or unexpected email attachments, even if sent by a known and trusted source. Users may wish to read Cyber Security Tip ST04-010 for more information on working with email attachments. FDIC Phishing Scamadded June 16, 2006US-CERT continues to receive reports of phishing scams that target online users. Recently, the phishing scam targeted the customers of Federal Deposit Insurance Company (FDIC) insured institutions. Customers of FDIC institutions received a spoofed email message, which claims that their account is in violation of the Patriot Act, and that FDIC insurance has been removed from their account until their identity can be verified. The message provides a link to a malicious web site which prompts users to enter their customer account and identification information. If you were affected by the FDIC phishing scam, please refer to the FDIC Consumer Alert for assistance. US-CERT confirms that the federal agencies including Department of Homeland Security (DHS) mentioned in the fraudulent email have not sent out an email that requests customer account or identification information. US-CERT encourages users to report phishing incidents based on the following guidelines:
Additionally, users are encouraged to take the following measures to prevent phishing attacks from occurring:
|
|||||||||||||||||||||||||||||||||||||||||||||||||||
Information For
Sign Up
Reporting
DHS Threat Advisory
The threat level in the airline sector is High or Orange. Read more
Get Adobe Reader