SECURITY WARNINGS & Notices - Please post them here

Dwarden · 2011-11-10T21:59:45.000Z

Adobe Flash and Adobe AIR security vulnerability fixed, new versions released
http://www.adobe.com/support/security/bulletins/apsb11-28.html

details and download: http://forum.avast.com/index.php?topic=9671.msg706346#msg706346

SpeedyPC · 2011-11-13T04:48:08.000Z

FBI busts global internet fraud ring.
http://www.dailytelegraph.com.au/technology/fbi-busts-internet-fraud-ring-affecting-tens-of-thousands-of-australian-computers/story-fn7bsi21-1226192935830

Asyn · 2011-11-14T11:12:27.000Z

Steam compromised by hackers
http://www.h-online.com/security/news/item/Steam-compromised-by-hackers-1377240.html

Asyn · 2011-11-15T09:51:16.000Z

Malware Signed With a Governmental Signing Key
http://www.f-secure.com/weblog/archives/00002269.html

SpeedyPC · 2011-11-15T13:17:29.000Z

Asyn post:1663:

Steam compromised by hackers
http://www.h-online.com/security/news/item/Steam-compromised-by-hackers-1377240.html

Thanks for the warning as I used Steam for all my Call of Duty Modern Warfare games

Asyn · 2011-11-15T13:25:22.000Z

SpeedyPC post:1665:

Asyn post:1663:

Steam compromised by hackers
http://www.h-online.com/security/news/item/Steam-compromised-by-hackers-1377240.html

Thanks for the warning as I used Steam for all my Call of Duty Modern Warfare games

NP pal.

Asyn · 2011-11-15T13:43:39.000Z

Apple OS X Sandbox Predefined Profiles Bypass
http://www.coresecurity.com/content/apple-osx-sandbox-bypass

system · 2011-11-15T17:45:14.000Z

Asyn post:1663:

Steam compromised by hackers
http://www.h-online.com/security/news/item/Steam-compromised-by-hackers-1377240.html

It was really only the forums that were affected and that has been resolved.

Dwarden · 2011-11-16T14:40:19.000Z

not true, both STEAM forum and STEAM user database were leaked,
it’s unknown what type of encryption was used for STEAM account passwords
only that the part with CreditCards info was by AES256

system · 2011-11-16T20:26:39.000Z

Dwarden post:1669:

not true, both STEAM forum and STEAM user database were leaked,
it’s unknown what type of encryption was used for STEAM account passwords
only that the part with CreditCards info was by AES256

That’s what they thought at first but there is no evidence of any compromise or illegal usage of customer data. The only impact was on the forums which had to taken down temporarily. It’s nothing like the fiasco with Sony. They may have gotten in but anything they got seems to have been unusable to them.

Left123 · 2011-11-16T20:38:30.000Z

New facebook virus,here we go again :
http://www.zdnet.com/blog/facebook/facebook-confirms-images-of-porn-and-violence-is-investigating/5330?tag=content;siu-container
Facebook says it is aware of users reporting a huge flood of unwanted content. This includes links, videos, and images depicting pornography, acts of violence, self-mutilation, and bestiality.

Asyn · 2011-11-18T11:05:13.000Z

Unknown network event causing BIND 9 DNS server crashes
http://www.h-online.com/open/news/item/Unknown-network-event-causing-BIND-9-DNS-server-crashes-1380518.html
https://www.isc.org/software/bind/advisories/cve-2011-4313

Asyn · 2011-11-18T14:24:22.000Z

XSS vulnerability in the translate helper method in Ruby on Rails
http://groups.google.com/group/rubyonrails-security/browse_thread/thread/2b61d70fb73c7cc5

Pondus · 2011-11-18T17:56:35.000Z

Spam Gets a Touch of Facebook Camouflage
http://blogs.norman.com/2011/for-consumption/spam-gets-a-touch-of-facebook-camouflage

Recycling – Not Always A Good Idea
http://blogs.norman.com/2011/for-consumption/recycling-not-always-a-good-idea

Invisible YNK, a Code Signing Conundrum
http://blogs.norman.com/2011/malware-detection-team/invisible-ynk-a-code-signing-conundrum

Back to the trojans. The one above is signed in June, and it’s now November, so this trojan has lived an undisturbed and validated life for about 4.5 months.