Question: What are these computer updates that I keep hearing about, and why should I care? Answer: If your computers and servers are updated properly, they can help keep your data safe, and will allow your employees to do their work. If they are not carefully screened, monitored, and installed properly, very bad things will [...]
Cyber security startup Perception Point revealed this week that as many as two thirds of Android users are running outdated software prone to be easily hacked. An potential attacker is granted root level privileges of an infected device using malware that targets a vulnerability in the Linux kernel. While exploit has yet to be used, [...]
Microsoft ended support for Windows XP earlier this month, meaning any new security holes won't be patched. Affecting Internet Explorer versions from 6.0 through 11, this bug lets the bad guys execute arbitrary code on your system. As soon as you visit a gimmicked website, you're pwned. Other Windows versions will get patched, but not [...]
There is a serious vulnerability in OpenSSL Certificates, known as the Heartbleed Bug. This vulnerability has existed for more than two years, and compromises the security of passwords, credit cards, and other sensitive information. Since this has widespread implications on the Internet, we wanted to inform you of this issue and assure you that IT [...]
The Security Alert for OpenSSL Heartbleed vulnerability CVE-2014-0160 was released on April 18th, 2014. This Security Alert addresses CVE-2014-0160 ('Heartbleed'), a security vulnerability which affects multiple OpenSSL versions implemented by various vendors in their products. This vulnerability also affects multiple Oracle products. Due to the severity and the reported exploitation of CVE-2014-0160 "in the wild," [...]
Vulnerability in Internet Explorer Could Allow Remote Code Execution Microsoft Security Advisory 2963983 Microsoft is aware of limited, targeted attacks that attempt to exploit a vulnerability in Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11. The vulnerability is a remote code execution vulnerability. The [...]
System Alert: OpenSSL Heartbleed Security Vulnerability On Monday, the OpenSSL project released an update to address a serious security vulnerability nicknamed "Heartbleed". This vulnerability impacts the encryption used for internet communications and could allow access to decrypted HTTPS traffic. What you should do: If have sites or applications hosted which store their credentials or other [...]
Summary of issue:TIFF attachments in Lync or Email Started at 11/05/2013 07:43 PM ET Microsoft has identified a “zero-day” vulnerability involving .TIFF files. This means that neither Microsoft nor the antivirus companies have been able to develop tools to address this vulnerability. Because this is a zero-day vulnerability, the only way to protect yourself is [...]
