Highlights and Updates

Blackberry issues Update for Remote Code Execution Vulnerability

Friday, 11th April 2014
Blackberry issued an advisory warning Blackberry 10 customers that a remote code execution vulnerability (RCE) could threaten phone security.

How to Fix OpenSSL Heart Bleed Bug on Ubuntu

Friday, 11th April 2014
The recently discovered "Heart Bleed" bug in OpenSSL is an extremely critical security issue. Fixing it is relatively simple now that Ubuntu has pushed out changes to their repositories containing a fixed version of OpenSSL.

Heartbleed Bug Found in Cisco Routers and Juniper Gear

Friday, 11th April 2014
Cisco Systems Inc. and Juniper Networks Inc. said yesterday that some of their products contain the Heartbleed bug.

Anonymous Targets 500 Israeli Web Sites over Gaza Conflict

Thursday, 10th April 2014
The Anonymous hacker group announced yesterday that it attacked some 500 Israeli web sites during a coordinated offensive over the Gaza conflict.

Old Vulnerability in JCE (Joomla Content Editor) Currently Being Heavily Exploited

Thursday, 10th April 2014
Although this vulnerability is a few years old, botnet owners are heavily scanning for sites that are vulnerable and attempting to exploit them.
If you run a Joomla site and haven't patched your site lately, please do so as soon as possible. 

China's unsupported XP machines hold the potential to become a massive botnet army

Thursday, 10th April 2014
Expert says that the vast number of XP computers in China represents the potential staging ground for large massive DDoS attacks if they ever become compromised.

Adobe issues Flash security update

Wednesday, 9th April 2014
Adobe has released security updates for Flash Player on Windows, Mac and Linux.
The update addresses four security vulnerabilities that affect all three operating systems.

Heartbleed Bug Checker

Wednesday, 9th April 2014
The Malaysian CERT has provided an online 'Heartbleed Checker' for Web and System Admins to test if their servers have this vulnerability. It is very simple, you just enter in you servers hostname and port number and click 'Check!'. Go here to use it. 

Microsoft Issues Final XP and Office 2003 Updates for Patch Tuesday

Wednesday, 9th April 2014
Microsoft released four security updates fixing 11 vulnerabilities in Windows, Microsoft Office, Internet Explorer, and Microsoft Publisher as part of its April Patch Tuesday release. 

The security updates for Windows XP and Office 2003 are the last publicly-released patches for these two products, as Microsoft ended support today. 

Microsoft to start blocking adware

Tuesday, 8th April 2014
Microsoft says that it is aiming to have a new system in place for its security products by July 1st that will block adware programs by default unless a user gives them explicit permission to run.