ISC Monthly Threat Update New Format, (Thu, Jan 10th)
This month starts a new format for the ISC Monthly Threat Update! You can find the most recent podcasts including the daily StormCast at https://isc.sans.edu/podcast.html. The monthly podcast is now...
View ArticleI'll have PDF with another slice of PDF please., (Fri, Jan 11th)
Well, hot on the heals of Microsoft Patch Tuesday as we now know comes Adobe Patch Tuesday. Guy has already kindly alerted us to the Cold Fusion vulnerability announced in apsa13-01 but we also need...
View ArticleChrome Updated V24, (Fri, Jan 11th)
The Chrome team over at Google have been busy, and V24 of their Chrome browser has been released. V24 brings both new functionality with the introduction of Math MLand an update to the flash version...
View ArticleJava 0-day impact to Java 6 (and beyond?), (Sat, Jan 12th)
The ISC has covered Java recently a number of times with Johanness commentary and the January 2013 OUCH! heads-up by Adam of the issues with Java 7 update 10 and the current 0-day doing the rounds....
View ArticleOracle Patch Tuesday Pre-Release, (Sat, Jan 12th)
Oracle has publishedthe pre-release information for this coming Tuesdays Oracle Patch Tuesday. Of special note this months is Oracles CVSS2 scoring of a 10.0 for Mobile Server of Oracle Database...
View ArticleYou encrypt your laptops, but what about portable media?, (Sat, Jan 12th)
As a data loss control many organisations now ensure that laptops are mitigated by installing full disk encryption or by having a partition / area of disk which is encrypted. However, laptops are not...
View ArticleSysinternals Updates, (Sun, Jan 13th)
A handlers shift usually doesnt go by without Roseman writing in telling us that Microsoft have released another Sysinternals update and today is one of those days. A couple of days has passed since...
View ArticleISC StormCast for Monday, January 14th 2013...
(c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleJava 0-Day patched as Java 7 U 11 released, (Sun, Jan 13th)
Oracle has released Java Update 11 which addresses the 0-day vulnerability referenced CVE-2013-0422. Release notes are available on the Oracle Web Site. The release also contains a reminder to...
View ArticleMicrosoft Out of Cycle Patch: IE...
Richard Porter --- ISC Handler on Duty (c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleISC StormCast for Monday, January 14th 2013 Part 2...
(c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleJanuary 2013 Microsoft Out of Cycle Patch, (Mon, Jan 14th)
Overview of the January 2013 Microsoft Out of Cycle patches and their status. # Affected Contra Indications - KB Known Exploits Microsoft rating(**) ISC rating(*) clients servers MS13-008 Security...
View ArticleISC StormCast for Monday, January 15th 2013...
(c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleFedora 18 released:...
(c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleWhen Disabling IE6 (or Java, or whatever) is not an Option..., (Tue, Jan 15th)
Were getting a whole lot of bad advice regarding the latest crop of vulnerabilities. Folks are saying things like disable Java, or Migrate away from IE6/7/8, or even Migrate to IE10 or Firefox. While...
View ArticleHotfix available for ColdFusion -...
(c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleISC StormCast for Tuesday, January 16th 2013...
(c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleCisco introducing Cisco Security Notices 16 JAN 2013, (Tue, Jan 15th)
Cisco has announced that as of 16 JAN 2013 they will begin releasing a new publication type. Cisco Security Notices will document low- and medium-severity security vulnerabilities that directly...
View Article86 Oracle Updates, (Wed, Jan 16th)
Oracle has released a lengthy list of updates to many products. descriptions are available here: http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html Of the 86 Oracle updates...
View ArticleISC StormCast for Wednesday, January 16th 2013...
(c) SANS Internet Storm Center. http://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View Article