Cyber Security Alerts

Cyber Security Alerts

Cyber Security Alerts provide timely information about current security issues, vulnerabilities, and exploits. They outline the steps and actions that non-technical home and corporate computer users can take to protect themselves from attack.

Source: United States - Computer Emergency Readiness Team (US-CERT)

2011
ID	Title	Release Date
SA11-067A	Microsoft Updates for Multiple Vulnerabilities	8-Mar-11
SA11-039A	Microsoft Updates for Multiple Vulnerabilities	8-Feb-11
SA11-011A	Microsoft Updates for Multiple Vulnerabilities	11-Jan-11
2010
ID	Title	Release Date
SA10-348A	Microsoft Updates for Multiple Vulnerabilities	14-Dec-10
SA10-313A	Microsoft Updates for Multiple Vulnerabilities	9-Nov-10
SA10-285A	Microsoft Updates for Multiple Vulnerabilities	12-Oct-10
SA10-279A	Adobe Reader and Acrobat Affected by Multiple Vulnerabilities	6-Oct-10
SA10-263A	Adobe Flash Vulnerabilities	20-Sep-10
SA10-257A	Microsoft Updates for Multiple Vulnerabilities	14-Sep-10
SA10-231A	Adobe Reader and Acrobat Vulnerabilities	19-Aug-10
SA10-224A	Apple Updates iOS for Multiple Vulnerabilities	12-Aug-10
SA10-223A	Adobe Flash and AIR Vulnerabilities	11-Aug-10
SA10-222A	Microsoft Updates for Multiple Vulnerabilities	10-Aug-10
SA10-194A	Microsoft Updates for Multiple Vulnerabilities	13-Jul-10
SA10-162A	Adobe Flash and AIR Vulnerabilities	11-Jun-10
SA10-159B	Microsoft Updates for Multiple Vulnerabilities	8-Jun-10
SA10-159A	Adobe Flash, Reader, and Acrobat Vulnerability	8-Jun-10
SA10-131A	Microsoft Updates for Multiple Vulnerabilities	11-May-10
SA10-103C	Adobe Reader and Acrobat Vulnerabilities	13-Apr-10
SA10-103A	Microsoft Updates for Multiple Vulnerabilities	13-Apr-10
SA10-089A	Microsoft Internet Explorer Vulnerabilities	30-Mar-10
SA10-068A	Microsoft Updates for Multiple Vulnerabilities	9-Mar-10
SA10-040A	Microsoft Updates for Multiple Vulnerabilities	9-Feb-10
SA10-021A	Microsoft Internet Explorer Vulnerabilities	21-Jan-10
SA10-013A	Adobe Reader and Acrobat Vulnerabilities	13-Jan-10
SA10-012B	Microsoft Windows and Adobe Flash Player 6 Vulnerabilities	12-Jan-10
2009
ID	Title	Release Date
SA09-343A	Adobe Flash Vulnerabilities Affect Flash Player and Adobe AIR	9-Dec-09
SA09-342A	Microsoft Updates for Multiple Vulnerabilities	8-Dec-09
SA09-314A	Microsoft Updates for Multiple Vulnerabilities	10-Nov-09
SA09-286B	Adobe Reader and Acrobat Vulnerabilities	13-Oct-09
SA09-286A	Microsoft Updates for Multiple Vulnerabilities	13-Oct-09
SA09-251A	Microsoft Updates for Multiple Vulnerabilities	8-Sep-09
SA09-223A	Microsoft Updates for Multiple Vulnerabilities	11-Aug-09
SA09-218A	Apple Updates for Multiple Vulnerabilities	6-Aug-09
SA09-209A	Microsoft Windows and Internet Explorer Vulnerabilities	28-Jul-09
SA09-195A	Microsoft Updates for Multiple Vulnerabilities	14-Jul-09
SA09-187A	Microsoft Video ActiveX Control Vulnerability	6-Jul-09
SA09-161A	Adobe Acrobat and Reader Vulnerabilities	10-Jun-09
SA09-160A	Microsoft Updates for Multiple Vulnerabilities	9-Jun-09
SA09-133B	Adobe Reader and Acrobat Vulnerabilities	13-May-09
SA09-133A	Apple Updates for Multiple Vulnerabilities	13-May-09
SA09-132A	Microsoft PowerPoint Multiple Vulnerabilities	12-May-09
SA09-104A	Microsoft Updates for Multiple Vulnerabilities	14-Apr-09
SA09-088A	Conficker Worm Targets Microsoft Windows Systems	29-Mar-09
SA09-069A	Microsoft Updates for Multiple Vulnerabilities	10-Mar-09
SA09-051A	Adobe Acrobat and Reader Vulnerability	20-Feb-09
SA09-041A	Microsoft Updates for Multiple Vulnerabilities	10-Feb-09
SA09-022A	Apple QuickTime Updates for Multiple Vulnerabilities	22-Jan-09
SA09-013A	Microsoft Updates for Multiple Vulnerabilities	13-Jan-09
2008
ID	Title	Release Date
SA08-352A	Microsoft Internet Explorer Data Binding Vulnerability	17-Dec-08
SA08-350A	Apple Updates for Multiple Vulnerabilities	15-Dec-08
SA08-344A	Microsoft Updates for Multiple Vulnerabilities	9-Dec-08
SA08-340A	Sun Java Updates for Multiple Vulnerabilities	5-Dec-08
SA08-319A	Mozilla Updates for Multiple Vulnerabilities	14-Nov-08
SA08-316A	Microsoft Updates for Multiple Vulnerabilities	11-Nov-08
SA08-309A	Adobe Reader and Acrobat Vulnerabilities	4-Nov-08
SA08-297A	Microsoft Windows Server Service Vulnerability	23-Oct-08
SA08-288A	Microsoft Updates for Multiple Vulnerabilities	14-Oct-08
SA08-260A	Apple Updates for Multiple Vulnerabilities	16-Sep-08
SA08-253A	Microsoft Updates for Multiple Vulnerabilities	9-Sep-08
SA08-225A	Microsoft Updates for Multiple Vulnerabilities	12-Aug-08
SA08-193A	Sun Updates for Multiple Vulnerabilities	11-Jul-08
SA08-190A	Microsoft Updates for Multiple Vulnerabilities	8-Jul-08
SA08-162C	Apple QuickTime Updates for Multiple Vulnerabilities	10-Jun-08
SA08-162B	Microsoft Updates for Multiple Vulnerabilities	10-Jun-08
SA08-150A	Apple Updates for Multiple Vulnerabilities	29-May-08
SA08-149A	Exploitation of Adobe Flash Vulnerability	28-May-08
SA08-134A	Microsoft Updates for Multiple Vulnerabilities	13-May-08
SA08-100A	Adobe Updates for Multiple Vulnerabilities	9-Apr-08
SA08-099A	Microsoft Updates for Multiple Vulnerabilities	8-Apr-08
SA08-094A	Apple QuickTime Updates for Multiple Vulnerabilities	3-Apr-08
SA08-087A	Mozilla Updates for Multiple Vulnerabilities	27-Mar-08
SA08-079A	Apple Updates for Multiple Vulnerabilities	19-Mar-08
SA08-071A	Microsoft Updates for Multiple Vulnerabilities	11-Mar-08
SA08-066A	Sun Updates for Multiple Vulnerabilities in Java	6-Mar-08
SA08-043C	Microsoft Updates for Multiple Vulnerabilities	12-Feb-08
SA08-043B	Apple Updates for Multiple Vulnerabilities	12-Feb-08
SA08-043A	Adobe Reader and Acrobat Vulnerabilities	12-Feb-08
SA08-016A	Apple QuickTime Updates for Multiple Vulnerabilities	16-Jan-08
SA08-008A	Microsoft Updates for Multiple Vulnerabilities	8-Jan-08
2007
ID	Title	Release Date
SA07-355A	Adobe Updates for Multiple Vulnerabilities	21-Dec-07
SA07-352A	Apple Updates for Multiple Vulnerabilities	18-Dec-07
SA07-345A	Microsoft Updates for Multiple Vulnerabilities	11-Dec-07
SA07-334A	Apple QuickTime RTSP Vulnerability	30-Nov-07
SA07-319A	Apple Updates for Multiple Vulnerabilities	15-Nov-07
SA07-317A	Microsoft Updates for Multiple Vulnerabilities	13-Nov-07
SA07-310A	Apple QuickTime Updates for Multiple Vulnerabilities	6-Nov-07
SA07-303A	Federal Trade Commission Reports Spoofed Email	30-Oct-07
SA07-297B	Adobe Updates for Microsoft Windows Vulnerability	24-Oct-07
SA07-297A	RealNetworks RealPlayer ActiveX Playlist Buffer Overflow	24-Oct-07
SA07-282A	Microsoft Updates for Multiple Vulnerabilities	9-Oct-07
SA07-254A	Microsoft Updates for Multiple Vulnerabilities	11-Sep-07
SA07-226A	Microsoft Updates for Multiple Vulnerabilities	14-Aug-07
SA07-199A	Mozilla Updates for Multiple Vulnerabilities	18-Jul-07
SA07-193A	Apple Releases Security Updates for QuickTime	12-Jul-07
SA07-192A	Adobe Flash Player Updates for Multiple Vulnerabilities	11-Jul-07
SA07-191A	Microsoft Updates for Multiple Vulnerabilities	10-Jul-07
SA07-163A	Microsoft Updates for Multiple Vulnerabilities	12-Jun-07
SA07-151A	Mozilla Updates for Multiple Vulnerabilities	31-May-07
SA07-128A	Microsoft Updates for Multiple Vulnerabilities	8-May-07
SA07-109A	Apple Updates for Multiple Vulnerabilities	19-Apr-07
SA07-100A	Microsoft Updates for Multiple Vulnerabilities	10-Apr-07
SA07-093A	Microsoft Update for Windows Animated Cursor Vulnerability	3-Apr-07
SA07-089A	Microsoft Windows ANI Vulnerability	30-Mar-07
SA07-072A	Apple Updates for Multiple Vulnerabilities	13-Mar-07
SA07-065A	Apple Releases Security Updates for QuickTime	6-Mar-07
SA07-047A	Apple Updates for Multiple Vulnerabilities	16-Feb-07
SA07-044A	Microsoft Updates for Multiple Vulnerabilities	13-Feb-07
SA07-024A	Apple QuickTime Update for RTSP Vulnerability	24-Jan-07
SA07-022A	Sun Updates for Multiple Vulnerabilities in Java	22-Jan-07
SA07-009A	Microsoft Updates for Multiple Vulnerabilities	9-Jan-07
2006
ID	Title	Release Date
SA06-354A	Mozilla Addresses Multiple Vulnerabilities	20-Dec-06
SA06-346A	Vulnerabilities in Microsoft Products	12-Dec-06
SA06-333A	Apple Releases Security Update to Address Multiple Vulnerabilities	29-Nov-06
SA06-318A	Microsoft Security Updates for Windows, Internet Explorer, and Adobe Flash	14-Nov-06
SA06-312A	Mozilla Products Contain Multiple Vulnerabilities	8-Nov-06
SA06-283A	Microsoft Updates for Vulnerabilities in Windows, Office, and Internet Explorer	10-Oct-06
SA06-275A	Multiple Vulnerabilities in Apple and Adobe Products	2-Oct-06
SA06-270A	Microsoft Internet Explorer ActiveX Vulnerability	27-Sep-06
SA06-262A	Microsoft Internet Explorer VML Vulnerability	19-Sep-06
SA06-258A	Microsoft Internet Explorer ActiveX Vulnerability	15-Sep-06
SA06-256A	Apple QuickTime Vulnerabilties	13-Sep-06
SA06-255A	Microsoft Windows and Publisher Vulnerabilities	12-Sep-06
SA06-250A	Microsoft Word Vulnerability	7-Sep-06
SA06-220A	Microsoft Products Contain Multiple Vulnerabilities	8-Aug-06
SA06-214A	Apple Mac Products Affected by Multiple Vulnerabilities	2-Aug-06
SA06-208A	Mozilla Products Contain Multiple Vulnerabilities	27-Jul-06
SA06-192A	Microsoft Windows, Office, and IIS Vulnerabilities	11-Jul-06
SA06-167A	Microsoft Excel Vulnerability	16-Jun-06
SA06-164A	Microsoft Windows, Internet Explorer, Media Player, Word, and PowerPoint Vulnerabilities	13-Jun-06
SA06-153A	Mozilla Products Contain Multiple Vulnerabilities	2-Jun-06
SA06-139A	Microsoft Word Vulnerability	19-May-06
SA06-132B	Apple QuickTime Vulnerabilities	12-May-06
SA06-132A	Apple Mac Products Affected by Multiple Vulnerabilities	12-May-06
SA06-129A	Microsoft Windows Vulnerabilities	9-May-06
SA06-117A	Scripts in eBay Postings May Enable Phishing Attacks	27-Apr-06
SA06-107A	Mozilla Products Contain Multiple Vulnerabilities	17-Apr-06
SA06-101A	Microsoft Windows and Internet Explorer Vulnerabilities	11-Apr-06
SA06-075A	Adobe Macromedia Flash Products Contain Vulnerabilities	16-Mar-06
SA06-073A	Microsoft Office and Excel Vulnerabilities	14-Mar-06
SA06-062A	Apple Mac Products are Affected by Multiple Vulnerabilities	3-Mar-06
SA06-053A	Apple Mac OS X Safari Command Execution Vulnerability	22-Feb-06
SA06-045A	Microsoft Windows, Windows Media Player, and Internet Explorer Vulnerabilities	14-Feb-06
SA06-038A	Multiple Vulnerabilities in Mozilla Products	7-Feb-06
SA06-032A	Winamp Playlist Vulnerability	1-Feb-06
SA06-011A	Apple QuickTime Vulnerabilities	11-Jan-06
SA06-010A	Microsoft Windows, Outlook, and Exchange Vulnerabilities	10-Jan-06
SA06-005A	Microsoft Windows Metafile Vulnerability	5-Jan-06
2005
ID	Title	Release Date
SA05-347A	Microsoft Internet Explorer Vulnerabilities	13-Dec-05
SA05-312A	Microsoft Windows Image Processing Vulnerabilities	8-Nov-05
SA05-284A	Microsoft Windows, Internet Explorer, and Windows Media Technology Vulnerabilities	11-Oct-05
SA05-229A	Apple Mac OS X Multiple Vulnerabilities	17-Aug-05
SA05-221A	Microsoft Windows and Internet Explorer Vulnerabilities	9-Aug-05
SA05-193A	Microsoft Windows, Internet Explorer, and Word Vulnerabilities	12-Jul-05
SA05-165A	Microsoft Windows and Internet Explorer Vulnerabilities	14-Jun-05
SA05-136A	Apple Mac OS X is affected by multiple vulnerabilities	16-May-05
SA05-102A	Multiple Vulnerabilities in Microsoft Windows Components	12-Apr-05
SA05-039A	Multiple Vulnerabilities in Microsoft Windows Components	8-Feb-05
SA05-012A	Multiple Vulnerabilities in Microsoft Windows	12-Jan-05
2004
ID	Title	Release Date
SA04-336A	Update for Microsoft Internet Explorer	1-Dec-04
SA04-315A	Vulnerability in Microsoft Internet Explorer	10-Nov-04
SA04-286A	Multiple Vulnerabilities in Microsoft Windows, Internet Explorer, and Excel	12-Oct-04
SA04-261A	Multiple Vulnerabilities in Mozilla Products	17-Sep-04
SA04-258A	Vulnerability in Microsoft Image Processing Component	14-Sep-04
SA04-243A	Security Improvements in Windows XP Service Pack 2	30-Aug-04
SA04-212A	Multiple Vulnerabilities in Systems Running Microsoft Windows	30-Jul-04
SA04-208A	New Variant of MyDoom Virus	26-Jul-04
SA04-196A	Multiple Vulnerabilities in Microsoft Windows Components and Outlook Express	14-Jul-04
SA04-184A	Important Internet Explorer Update Available	2-Jul-04
SA04-163A	Cross-Domain Vulnerability in Internet Explorer	11-Jun-04
SA04-104A	Summary of Windows Security Updates for April 2004	13-Apr-04
SA04-079A	Continuing Threats to Home Users	19-Mar-04
SA04-070A	Vulnerability in Microsoft Outlook 2002	10-Mar-04
SA04-041A	Multiple Vulnerabilities in Microsoft Windows	10-Feb-04
SA04-033A	Multiple Vulnerabilities in Microsoft Internet Explorer	2-Feb-04
SA04-028A	MyDoom.B Virus	28-Jan-04

ST06-002: Debunking Some Common Myths

National Cyber Alert System

ST06-002: Debunking Some Common Myths

Today, March 09, 2011, 2 minutes ago

Debunking Some Common Myths

There are some common myths that may influence your online security practices. Knowing the truth will allow you to make better decisions about how to protect yourself.

How are these myths established?

There is no one cause for these myths. They may have been formed because of a lack of information, an assumption, knowledge of a specific case that was then generalized, or some other source. As with any myth, they are passed from one individual to another, usually because they seem legitimate enough to be true.

US-CERT Current Activity - Mozilla Releases Updates for Firefox, Thunderbird, and SeaMonkey

US-CERT Current Activity

Mozilla Releases Updates for Firefox, Thunderbird, and SeaMonkey

Original release date: March 1, 2011 at 2:51 pm
Last revised: March 2, 2011 at 8:01 am


The Mozilla Foundation has released Firefox 3.6.14 and Firefox 3.5.17
to address multiple vulnerabilities. Exploitation of these
vulnerabilities may allow an attacker to execute arbitrary code,
conduct cross-site request forgery attacks, cause a denial-of-service
condition, or operate with elevated privileges.

Some of these vulnerabilities also affect Thunderbird and SeaMonkey.
The Mozilla Foundation has released Thunderbird 3.1.8 and SeaMonkey
2.0.12 to address these vulnerabilities.

US-CERT encourages users and administrators to review the Mozilla
Foundation security advisories for Firefox 3.6.14 and apply any
necessary updates to help mitigate the risks.

Relevant Url(s):
<http://www.mozilla.org/security/known-vulnerabilities/firefox36.html>

This entry is available at:
http://www.us-cert.gov/current/index.html#mozilla_releases_thunderbird_3_1

US-CERT Current Activity - Apple Releases iTunes 10.2

US-CERT Current Activity

Apple Releases iTunes 10.2

Original release date: March 3, 2011 at 7:51 am
Last revised: March 3, 2011 at 7:51 am


Apple has released iTunes 10.2 to address multiple vulnerabilities
affecting the ImageIO, libxml, and WebKit packages. Exploitation of
these vulnerabilities may allow an attacker to execute arbitrary code
or cause a denial-of-service condition.

US-CERT encourages users and administrators to review Apple article
HT4554 and apply any necessary updates to help mitigate the risks.

Relevant Url(s):
<http://support.apple.com/kb/HT4554>

This entry is available athttp://www.us-cert.gov/current/index.html#apple_releases_itunes_10_2

US-CERT Cyber Security Bulletin SB11-066 -- Vulnerability Summary for the Week of February 28, 2011

Vulnerability Summary for the Week of February 28, 2011

This bulletin provides a summary of new vulnerabilities that have been
recorded by the National Institute of Standards and Technology (NIST)
National Vulnerability Database (NVD) the week of February 28, 2011. It is
available here:

    http://www.us-cert.gov/cas/bulletins/SB11-066.html

For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.

US-CERT Current Activity - Microsoft Releases March Security Bulletin

US-CERT Current Activity

Microsoft Releases March Security Bulletin

Original release date: March 8, 2011 at 1:31 pm
Last revised: March 8, 2011 at 1:31 pm


Microsoft has released updates to address vulnerabilities in Microsoft
Windows and Office as part of the Microsoft Security Bulletin Summary
for March 2011. These vulnerabilities may allow an attacker to execute
arbitrary code.

US-CERT encourages users and administrators to review the bulletin and
follow best-practice security policies to determine which updates
should be applied.

Relevant Url(s):
<http://www.microsoft.com/technet/security/bulletin/ms11-mar.mspx>

====
This entry is available athttp://www.us-cert.gov/current/index.html#microsoft_releases_march_security_bulletin4

US-CERT Technical Cyber Security Alert TA11-067A -- Microsoft Updates for Multiple Vulnerabilities

 National Cyber Alert System

 Technical Cyber Security Alert TA11-067A


Microsoft Updates for Multiple Vulnerabilities

   Original release date: March 08, 2011
   Last revised: --
   Source: US-CERT


Systems Affected

     * Microsoft Windows
     * Microsoft Office


Overview

   There are multiple vulnerabilities in Microsoft Windows and
   Microsoft Office. Microsoft has released updates to address these
   vulnerabilities.


I. Description

   The Microsoft Security Bulletin Summary for March 2011 describes
   multiple vulnerabilities in Microsoft Windows and Microsoft Office.
   Microsoft has released updates to address the vulnerabilities.


II. Impact

   A remote, unauthenticated attacker could execute arbitrary code,
   cause a denial of service, or gain unauthorized access to your
   files or system.


III. Solution

   Apply updates

   Microsoft has provided updates for these vulnerabilities in the
   Microsoft Security Bulletin Summary for March 2011. That bulletin
   describes any known issues related to the updates. Administrators
   are encouraged to note these issues and test for any potentially
   adverse effects. In addition, administrators should consider using
   an automated update distribution system such as Windows Server
   Update Services (WSUS).


IV. References

 * Microsoft Security Bulletin Summary for March 2011 -
   <https://www.microsoft.com/technet/security/bulletin/ms11-mar.mspx>

 * Microsoft Windows Server Update Services -
   <http://technet.microsoft.com/en-us/wsus/default.aspx>

 ______________________________________________________

   The most recent version of this document can be found at:

     <http://www.us-cert.gov/cas/techalerts/TA11-067A.html>
 ______________________________________________________
   Feedback can be directed to US-CERT Technical Staff. Please send
   email to <cert@cert.org> with "TA11-067A Feedback VU#955804" in
   the subject.
 ______________________________________________________

   For instructions on subscribing to or unsubscribing from this
   mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
 ______________________________________________________

   Produced 2011 by US-CERT, a government organization.

   Terms of use:

     <http://www.us-cert.gov/legal.html>
 ____________________________________________________

Revision History

  March 08, 2011: Initial release

US-CERT Current Activity - Google Releases Chrome 10.0.648.127

US-CERT Current Activity

Google Releases Chrome 10.0.648.127

Original release date: March 9, 2011 at 7:45 am
Last revised: March 9, 2011 at 7:45 am


Google has released Chrome 10.0.648.127 for all platforms to address
multiple vulnerabilities. Exploitation of these vulnerabilities may
allow an attacker to execute arbitrary code, cause a denial-of-service
condition, or bypass security restrictions.

US-CERT encourages users and administrators to review the Google
Chrome Releases blog entry and apply any necessary updates to help
mitigate the risks.

Relevant Url(s): http://googlechromereleases.blogspot.com/2011/03/chrome-stable-release.html

This entry is available at: http://www.us-cert.gov/current/index.html#google_releases_chrome_10_0

ETF Weekly Performance Review Information For Week Ending 03/04/11

ETF Weekly Performance Review Information For Week Ending 03/04/11

Stock Weekly Screener For Week Ending 03/04/11. Top Weekly Dividend Stocks.

Stock Weekly Screener For Week Ending 03/04/11. Top Weekly Dividend Stocks.