Federal Bureau of Investigation Warns Public of Fraudulent Spam Email The Federal Bureau of Investigation (FBI) has released information warning the public about fraudulent email messages purporting to come from the FBI or the Department of Homeland Security. These email messages contain a malicious attachment that claims to provide an intelligence report or bulletin, but [...]

Several thousand Hotmail usernames and passwords were exposed on over the weekend via a phishing attack, Microsoft confirmed late on Monday. Microsoft said it would block access to the accounts that were exposed and work with customers to reclaim access to them. “Over the weekend Microsoft learned that several thousand Windows Live Hotmail customers’ credentials [...]

Although they offer a convenient way to communicate with other people, there
are dangers associated with tools that allow real-time communication.

Apple has released iTunes 9.0.1 to address a vulnerability that may allow an attacker to execute arbitrary code or cause a denial-of-service condition.

A stitch in time saves nine. I couldn’t sew my way out of a bag, but it’s true advice for bloggers as well — a little bit of work on an upgrade now saves a lot of work fixing something later. Right now there is a worm making its way around old, unpatched versions of [...]

US-CERT Current Activity Apple Releases Security Updates Original release date: September 10, 2009 at 9:20 am Last revised: September 10, 2009 at 9:20 am Apple has released the following security updates: * OS 3.1 for iPhone * OS 3.1.1 for iPod touch * Quicktime 7.6.4 These security updates address vulnerabilities in multiple Apple products. Exploitation [...]

US-CERT Current Activity Mozilla Releases Security Advisory Original release date: September 10, 2009 at 9:20 am Last revised: September 10, 2009 at 9:20 am Mozilla has released a security advisory to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, mislead users by spoofing a URL, or cause a denial of [...]

Cyber Security Alert SA09-251A

Microsoft Updates for Multiple Vulnerabilities
Microsoft has released updates to address vulnerabilities in
Microsoft Windows.

Original release date: September 4, 2009 at 2:58 pm Last revised: September 4, 2009 at 2:58 pm Apple has released Java for Mac OS X 10.5 Update 5 to address multiple vulnerabilities in Java. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and [...]

Original release date: September 4, 2009 at 2:58 pm Last revised: September 4, 2009 at 2:58 pm US-CERT is aware that Apple’s recently released version of Mac OS X, Snow Leopard, includes a version of the Flash Player that contains previously addressed vulnerabilities. US-CERT encourages users and administrators to upgrade to the latest version of [...]

Original release date: September 3, 2009 at 3:29 pm Last revised: September 3, 2009 at 3:29 pm Microsoft has issued a Security Bulletin Advance Notification indicating that the September release cycle will contain five bulletins, all of which will have a severity rating of critical. The notification states that these critical bulletins are for Microsoft [...]