September 2008 Security Bulletin Release

As announced last week, Microsoft released four Security Bulletins, each deemed Critical. Complete information is available in Microsoft Security Bulletin Summary for September 2008 and the individually linked Bulletins below.

For a "behind the scenes" look at two of Security Bulletings MS08-052 and MS08-055, see the reports at the Microsoft Security Vulnerability Research & Defense Team blog:

• MS08-052: Explaining the Windows Side-By-Side Cache
• MS08-055: Microsoft security response process, behind the scenes

MS08-052

• Vulnerabilities in GDI+ Could Allow Remote Code Execution, KB 954593

MS08-053

• Vulnerability in Windows Media Encoder 9 Could Allow Remote Code Execution, KB 954156

MS08-054

• Vulnerability in Windows Media Player Could Allow Remote Code Execution, KB 954154

MS08-055

• Vulnerability in Microsoft Office Could Allow Remote Code Execution, KB 955047

References:

MSRT: Microsoft Windows Malicious Software Removal Tool
MSRC BLog: September 2008 Bulletin Monthly Release
TechNet: Microsoft Security Bulletin Summary for September 2008

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Intercage going down in flames

What is Intercage? In short, a (hopefully) former host of thousands of sites purveying malware. But since I ran out of time this evening and only got as far as collecting some of the sources so will post a link to the news via Alex at Sunbelt Blog. See Dancing in the streets (almost): Intercage going down in flames and The Atrivo/Intercage saga continues. From Alex' posts, be sure to follow the links to Brian Krebs reports.

Also see the update posted at Hosts News.

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Recognize the 5 Most Common Types of E-mail Scams

The Windows Live Hotmail team recently published a fantastic article providing not only examples but explanations on recognizing E-mail scams. A couple of the examples are Microsoft-specific, using a Hotmail and a "Microsoft Promotions" example. Apply the learnings in the examples provided and you may not only save getting your computer infected, but prevent identity theft as well.

Even if you are cautious and recognize scams, perhaps your "Great Aunt Emma" is gullible or too trusting. Take the time to share this information with that gullible aunt, trusting uncle or kindly neighbor who "only uses the internet to check her E-mail".

Windows Live Hotmail: Learn how to recognize the 5 most common types of E-mail Scams

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Trackback