I can think of better ways to end the year than with a last-minute zero day Internet Explorer (IE) exploit found in the wild. Yet that is exactly what happened last week. The good news is Microsoft has a quick fix. Late last week, FireEye reported that attackers had infected the Council of Foreign Relations' (CFR) web site with malicious code that leveraged a previously … [Read more...]
WatchGuard Security Week in Review: Episode 45 – OpWestboro
Hacktivists Against Hate, SMS Spam Bots, and Exynos Exploits Hey! Look at that. The world hasn't ended. I guess that means my decision to prepare my weekly security news video rather than my apocalyptical fallout shelter wasn't a tragic mistake. If you are in the mood for some information security (infosec) news on the last Mayan calendar day of the, well, er...ever...then … [Read more...]
WatchGuard Security Week in Review: Episode 44 – Ar.Drone Virus
Ar.Drone Virus, Skynet Bot, and #ProjectWhiteFox Despite the upcoming holiday season, information security (infosec) news hasn't slowed, with plenty of interesting new infosec stories this week. If you want a quick recap of the highlights, check out our short video below. In this episode, I cover a few breaches—including one that affected an exploit vendor—a botnet that … [Read more...]
WatchGuard Announces Fireware XTM and WSM v11.6.3
Available for All XTM Appliances WatchGuard is excited to announce the general release of Fireware XTM v11.6.3 and WatchGuard System Manager v11.6.3. This release demonstrates our continuing commitment to delivering high quality products to our customers, with a significant number of bug fixes and support for a couple of key enhancements. You can install Fireware XTM OS … [Read more...]
Adobe Patch Day: Flash and ColdFusion Updates
Severity: High Summary: These vulnerabilities affect: Flash Player and ColdFusion 1o How an attacker exploits them: Multiple vectors of attack, including enticing your users to open malicious files or visit specially crafted web sites Impact: Various results; in the worst case, an attacker can gain complete control of your computer What to do: Install the appropriate Adobe … [Read more...]