Mailing Lists & Feeds
Current Activity Calendar
| March 06, 2009 - Current ActivityThis is an archived copy of current activity, if you would like to see the most recent version, please click here.Economic Stimulus Email and Website Scamsadded March 5, 2009 at 04:08 pm
US-CERT is aware of reports of economic stimulus scams circulating. These scams are being conducted through both email and malicious websites.
Microsoft Releases Advanced Notification for March Security Bulletinadded March 5, 2009 at 03:12 pm
Microsoft has issued a Security Bulletin Advanced Notification indicating that the March release cycle will contain three bulletins, one of which will have a severity rating of Critical. The notification states that these Critical bulletins are for Microsoft Windows. There will also be two Important bulletins for Microsoft Windows. Release of these bulletins is scheduled for Tuesday, March 10. Mozilla Foundation Releases Firefox 3.0.7added March 5, 2009 at 08:44 am
Mozilla Foundation has released Firefox 3.0.7 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, obtain sensitive information, or spoof the location bar. The Mozilla Foundation Security Advisories also indicate that these vulnerabilities affect Thunderbird and SeaMonkey.
Malicious Code Targeting Social Networking Site Usersadded March 4, 2009 at 11:53 am
US-CERT is aware of public reports of malicious code spreading via popular social networking sites including myspace.com, facebook.com, hi5.com, friendster.com, myyearbook.com, bebo.com, and livejournal.com. The reports indicate that the malware, named Koobface, is spreading through invitations from a user's contact that include a link to view a video. If the users click on the link in this invitation, they are prompted to update Adobe Flash Player. This update is not a legitimate Adobe Flash Player update, it is malicious code.
Opera Software Releases Opera Browser 9.64added March 3, 2009 at 08:48 am
Opera Software has released Opera 9.64 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code or conduct cross-domain scripting attacks. Cisco Releases Security Advisory for ACE 4710 Appliance and ACE Moduleadded February 27, 2009 at 09:26 am
Cisco has released a Security Advisory to address multiple vulnerabilities in the ACE Application Control Engine Module, ACE 4710 Application Control Engine. These vulnerabilities may allow an attacker to obtain administrative level access, operate with escalated privileges, or cause a denial-of-service condition. Adobe Releases Security Bulletin for Flash Playeradded February 25, 2009 at 09:54 am
Adobe has released Security Bulletin APSB09-01 to address multiple vulnerabilities in Flash Player. These vulnerabilities may allow an attacker to execute arbitrary code, cause a denial of service condition, conduct Clickjacking attacks, or operate with escalated privileges. Microsoft Releases Security Advisory (968272)added February 24, 2009 at 02:10 pm
Microsoft has released Security Advisory 968272 to address reports of a vulnerability in Microsoft Office Excel. By convincing a user to open a specially crafted Excel document, an attacker may be able to execute arbitrary code. New Variant of Conficker/Downadup Worm Circulatingadded February 23, 2009 at 05:02 pm
US-CERT is aware of public reports concerning a new variant of the Conficker/Downadup worm, named Conficker B++. This variant propagates itself via multiple methods, including exploitation of the previously patched vulnerability addressed in MS08-067, password guessing, and the infection of removable media. Most significantly, Conficker B++ implements a new backdoor with "auto-update" functionality, allowing machines compromised by the new variant to have additional malicious code installed on them. According to Microsoft, there is no indication that systems infected with previous variants of Conficker can automatically be re-infected with the B++ variant.
Adobe Releases Security Bulletin for Critical Vulnerabilityadded February 20, 2009 at 11:20 am | updated February 20, 2009 at 03:55 pm
Adobe has released a Security Bulletin to alert users of a vulnerability in Adobe Reader and Acrobat. This vulnerability may allow an attacker to execute arbitrary code or cause a denial-of-service condition. Adobe indicates that it has received reports of active exploitation.
|
|||||||||||||||||||||||||||||||||||||||||||||||
Information For
Sign Up
Reporting
DHS Threat Advisory
The threat level in the airline sector is High or Orange. Read more
