Adobe have published details of a critical vulnerability the following applications.


Adobe Flash Player 10.1.85.3 and earlier versions
Adobe Reader 9.4 and earlier 9.x versions
Adobe Acrobat 9.4 and earlier 9.x versions


The vulnerability could cause a crash and potentially allow an attacker to take control of the affected system.


From the Mozilla blog:


Issue:
Mozilla is aware of a critical vulnerability affecting Firefox 3.5 and Firefox 3.6 users. We have received reports from several security research firms that exploit code leveraging this vulnerability has been detected in the wild.


As stated by Help Net Security a new Firefox plugin, "Firesheep", can be used for "sniffing" HTTP sessions that are unencrypted. The plugin can be used for hijacking online services, such as social networks - and other online services that require a login. The Firesheep plugin makes it thereby possible for perpetrators to impersonate users by simply hijacking their sessions at services such as Facebook, WordPress,Twitter, Google, Flickr, Amazon.com etc.


New Rogue: ThinkPoint

by LS Anders on October 25th, 2010 in Rogues, Security Alert.

ThinkPoint is a new version of the fake Microsoft security essential alert rogue anti-spyware.













Firefox 3.6.11 and Thunderbird 3.15 have been released which include security updates for several critical vulnerabilities that can be exploited to run malicious code. Users are advised to update these applications.

Full details about the updates here:

Firefox
Thunderbird

Its a good idea to set these applications to check for updates automatically.


In a recent article by CBC News more security and privacy concerns for companies, and possibly individuals, have been highlighted.

The problem centers around your disused photocopier. Since modern photocopiers contain hard drives for storing the information they scan this information is available long after you have forgotten all about it.


RealNetworks, Inc. have published product upgrades addressing vulnerabilities in RealPlayer SP 1.1.4 and earlier.

The vulnerabilities may allow an attacker to execute arbitrary code.

Windows users of RealPlayer SP 1.1.4 and earlier are advised to upgrade to the latest version here

For more information, visit RealNetworks' security advisory here



Read a rogue?

by LS Anders on October 14th, 2010 in Rogues, Security Alert.

Today’s rogues have many ways of trying to trick user to install them.  Recently we discovered a page that was offering free books for download.



































New Rogue Sighted: Smart Engine

by Andy on October 12th, 2010 in Security Alert.

Check out the details on the Rogue's Gallery at http://www.lavasoft.com/mylavasoft/rogues/latest



Adobe have published a security update addressing critical vulnerabilities in Adobe Reader 9.3.4 and Acrobat 9.3.4 (and earlier versions)

The vulnerabilities could cause a crash and potentially allow an attacker to take control of the affected system.

Windows users of Adobe Reader 9.3.4 and Adobe Acrobat 9.3.4 (and earlier versions) are advised to upgrade to Adobe Reader 9.4

To upgrade to the latest version of Adobe Reader, visit http://get.adobe.com/reader/


New Rogue: AntivirusIS

by LS Anders on October 4th, 2010 in Rogues, Security Alert.

AntivirusIS is a new rogue antivirus application. It is a clone of SecuritySuite.















AntiVirusStudio 2010 is a new rogue anti-virus application. It is a clone of DesktopDefender2010.