[Salutation]

I have started a newsletter about web and computer security issues that affect us all in the highspeed connected world that we live and work in today. Articles and links may contain late breaking news regarding the latest security threats and hacking incidents. I hope you find some interesting and useful topics that help you remain safe online.

This is a one time only mailing. If you like the content, which is timely and relevant to your computer and personal online security, please follow this link and subscribe to the newsletter. If you do I will send you a FREE report explaining phishing and pharming identity theft scams. PLUS if you subscribe before January 12th 2006 I will send you a customized search engine optimization report, with specific details and improvements for a web page and keyword of your choice. It's a $150 value and it can be yours ABSOLUTELY FREE!

Best wishes for a Happy and Prosperous 2006!

Sincerely
Steve Tickner
President

PS. Our NEW Newsletter Manager system is now available. If you would like more information click here.


Browsers / Internet

How Serious Is the WMF Vulnerability?
Opinion: Pretty serious, but it's not end of the world stuff. Lucky for us a white knight came along with an excellent interim solution. Depending on where you look, most people are either running in circles hysterically or ho-humming the Windows WMF vulnerability. It does have some of the earmarks of a nasty situation. For one thing, if you're running Windows—any version—you're vulnerable. Even the 1990 version of Windows 3.0 is vulnerable!
Read More...



Microsoft scrambles to fix 'severe' security flaw
A previously unknown flaw in Microsoft Corp.'s Windows operating system is leaving computer users vulnerable to spyware, viruses and other programs that could overtake their machines and has sent the company scrambling to come up with a fix. Read More...



2005 Was an Ugly Year for Security; 2006 Won't Be Any Prettier
Lawsuits and losses have followed data breaches at major companies. Security crews are getting smarter, but so are the crooks; both exploits and the gangs that run them are getting more sophisticated. 2006 doesn't look like it will be any easier than 2005. Read More...


Beware of Strange iTunes/QuickTime Movies
A heap overflow vulnerability in Apple Computer Inc.'s iTunes and QuickTime media players could put millions of PC and Mac users at risk of malicious hacker attacks, security experts warned Wednesday. Read More...

Google Desktop Tweaked to Avoid IE Flaw

Google Inc. has made an "adjustment" to its Google Desktop application to protect users from an unpatched design flaw in Microsoft Corp.'s Internet Explorer browser.

The bug, which was discovered and reported by Israeli hacker Matan Gillon, provides malicious attackers with an easy way to use Google Desktop or other Internet-facing applications to covertly hijack user information. Read More...



Why is Microsoft Delaying the Next IE Release?

The next pre-release of Internet Explorer 7 won't arrive until sometime after the first of the year, conflicting with earlier statements. One likely explanation is that the software giant is working to integrate it with Windows Vista. Read More...

Mozilla claims Firefox 1.5 hole poses minor risk
The first Firefox 1.5 security vulnerability, made public Thursday, is not as critical as initially perceived, but a patch will be available to fix it early next year, a Mozilla executive said today.

Mozilla plans to repair the hole in the latest version of its open-source browser when it releases its next regularly scheduled stability build of Firefox. That should happen in late January or early February, said Mike Schroepfer, vice president of engineering for Mozilla Corp. Firefox 1.5 was released Nov. 30. "Based on the information we have, it's a low-severity issue, but we will address it anyway." Read More...


US-CERT Cyber Security Tips
ST05-019: Preventing and Responding to Identity Theft
ST05-018: Understanding Voice over Internet Protocol (VoIP)
ST05-017: Cybersecurity for Electronic Devices
ST05-016: Understanding Internationalized Domain Names
ST05-015: Understanding Bluetooth Technology
ST05-014: Real-World Warnings Keep You Safe Online
ST05-013: Guidelines for Publishing Information Online
ST05-012: Supplementing Passwords
ST05-011: Effectively Erasing Files
ST05-010: Understanding Web Site Certificates
Security At Home
Security Tools: Frequently asked questions (FAQ)
RATs: Remote Access Trojans and how to help avoid them
Home office security checklist
Security updates summary for December 2005
What is spear phishing?
Password checker
Digital signatures help make Microsoft security newsletters more secure
Get a free safety scan for your computer
Strong passwords: How to create and use them
Help protect your privacy in online communities
Virus Threats
Virus Top Twenty for December 2005
Trojan programs exploiting the latest Windows vulnerability
Virus Top Twenty for November 2005
A survey of the antivirus industry by Russia's leading expert
Large number of new Sober clones pose a threat to users
New backdoor program uses Sony rootkit
Virus Top Twenty for October 2005
Malware Evolution: July - September 2005: sustained trends and new factors
Kaspersky Lab comments on a report regarding a vulnerability in the company's antivirus products
Virus Top Twenty for September 2005

Virus / Spyware / Adware

Where are Rootkits Coming From?
For those of you who have never heard of a rootkit before, a rootkit is a set of software tools used by an intruder after gaining access to a computer system. These tools are intended to conceal running processes, files or system data, which helps an intruder maintain access to a system without the user's knowledge. Rootkits are known to exist for a variety of operating systems such as Linux, Solaris and versions of Microsoft Windows. A computer with a rootkit on it is called a rooted computer.

The sharp rise in rootkit detections on Windows machines is a direct result of adware/spyware vendors using sophisticated techniques to hide processes and prevent uninstallation, according to anti-virus vendor F-Secure Corp.

The Finnish company, which ships an anti-rootkit scanner in its security suite, has identified ContextPlus, Inc., makers of the Apropos and PeopleOnPage adware programs, as the company responsible for a large number of stealth rootkit infections. More...


Spyware soars in 2005, says Sophos
Companies have seen a dramatic increase in spyware infections this year, according to the 2005 Security Threat Management Report from antivirus software company Sophos PLC. Sophos attributes the increase to the business model used by virus writers. The goal for virus writers is financial gain through long-term infection, which is why spyware usage has been so prevalent. More...


US-CERT Current Activity
Automatic Update Functionality in Latest Sober Worm Variant
Exploit for Vulnerability in Microsoft Windows Metafile Handling
RIM BlackBerry Vulnerabilities
Multiple Heap Buffer Overflow Vulnerabilities in Symantec Antivirus Library
Malware Exploiting Microsoft Distributed Transaction Coordinator Vulnerability (MS05-051)
Exploit for Vulnerability in Microsoft Internet Explorer window() object
Cross Domain Vulnerability in Internet Explorer
Reports of IRS Phishing Emails
Vulnerability in Cisco PIX
W32/Sober Revisited
Microsoft Security Advisories
Microsoft Security Advisory (912840): Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution. - 1/5/2006
Microsoft Security Advisory (912920): Systems that are infected with Win32/Sober.Z@mm may download and run malicious files from certain Web domains beginning on January 6, 2006 - 1/3/2006
Microsoft Security Advisory (911302): Vulnerability in the way Internet Explorer Handles Mismatched Document Object Model Objects Could Allow Remote Code Execution. - 12/13/2005
Microsoft Security Advisory (911052): Memory Allocation Denial of Service Via RPC - 11/18/2005
Microsoft Security Advisory (910550): Macromedia Security Bulletin: MPSB05-07 Flash Player 7 Improper Memory Access Vulnerability - 11/9/2005
Linux Security Advisories
RHSA-2006:0159-8: Moderate: httpd security update
RHBA-2005:871-6: rhr2 bug fix update
RHEA-2005:872-6: dt enhancement update
RHEA-2005:873-4: ltp enhancement update
RHEA-2005:874-4: lmbench enhancement update
RHSA-2005:840-10: Important: xpdf security update
RHSA-2005:843-8: Moderate: netpbm security update
RHSA-2005:864-6: Important: udev security update
RHSA-2005:867-5: Important: gpdf security update

 


For a special Eweek report about Internet Browser security click here.

Go Get A New Browser!

Get a FREE Apple iPod Photo

We've been using the McAfee Viruscan product for many years and recommend it!
VirusScan_125x125

Visit the Windows Live Safety Center and get a FREE online PC scan today!

What People are Searching For

We've been using DELL for our desktop PC and server needs for years now and cannot recommend them highly enough!
TII Computer Deals at Dell Home Systems 125x125

Visit the Microsoft Security At Home center to help keep your PC safe, clean and running at its best.


Lockergnomes Technobabble
RSS Metasearch
Googling Wal-Mart
Stamps
It's The Plasma Bowl!
Weight Loss Networks Gain
Ear Plugs
Taking Stock And Buying It, Too
Ring Tones?
Washing Machines, Reloaded
Gift Certificates


Get the NEW Antispyware program from Microsoft FREE!
Click to Download Now!

Information Technology News
Tech Analysts Debate: Will Microsoft Buy Yahoo?
ADV: Sip energy and gulp data with Sun's breakthrough, high-performance server.
CA Fills Application Management Holes with Wily Buy
New WD Hard Drive Aimed At Modders
HP, Blackstone May Bid for Computer Sciences-WSJ
CES 2006: First Blu-ray Movies
Gates Pitches CES Crowd on Vista's Content Handling
Netgear to Offer First Wi-Fi Phone for Skype Calling
Gates to Exhibit Vista Windows Upgrade at CES
Another Unofficial WMF Patch Released


We use the REV for nightly backups!
Iomega REV - 125x125 - Red

Make sure your stuff is insured on the road!
Button 1 

Need More Memory?
Crucial's Memory Advisor finds the right memory! 

Need More Bandwidth?