Forum Hijacks, Singapore Hacking, and IE 0day Happy Friday, everyone! The weekend is hours away; but before running off to finish of the last of your work week tasks, why not sit down with a hot cup of joe and catch up on what happened in security news this week? In this episode, I talk about security patches for Microsoft, Adobe, and OpenSSH, cover some interesting web site … [Read more...]
Microsoft Black Tuesday: Updates Correct One of Two Zero day
Today's the second Tuesday of the month, which means it's Microsoft (and Adobe) Patch Day. One of Microsoft updates fixes a zero day vulnerability, so we recommend you install at least that one as quickly as possible. According to their summary post for November 2013, Microsoft released eight security bulletins today, fixing 18 security flaws in products like Internet Explorer … [Read more...]
Bitcoin Weakness & Hack – WSWiR Episode 84
Microsoft Zero Day, PCI-DSS Update, and Bitcoin Attacks Ingest this week's biggest security news in one, easy to watch video with WatchGuard Security Week in Review. I consolidate the latest Infosec news in one place, so you don't have to. Today's episode covers the week's security-related software updates, a zero day flaw in Windows and Office, the latest update to PCI-DSS, … [Read more...]
Attackers Exploiting a Zero Day in Windows, Office, and Lync
Today, Microsoft released a critical security advisory warning customers of a serious new zero day vulnerability that affects Windows, Office, and Lync. In a nutshell, the vulnerability has to do with how certain versions of Windows, Office, and Lync handle specially crafted TIFF images. If an attacker can trick you into viewing a malicious image, including ones embedded in … [Read more...]