PC Security and Other Useful Information

Data for a whopping 26 million stolen payment cards leaked in hack of fraud bazaar

A thriving online bazaar selling stolen payment card data has been hacked in a heist that leaked the records for more than 26 million cards, KrebsOnSecurity reported on Tuesday.

Oracle Critical Patch Updates, Security Alerts and Bulletins

This page contains the following sections:

• Critical Patch Updates
• Security Alerts
• Solaris Third Party Bulletins
• Oracle Linux Bulletins
• Oracle VM Server for x86 Bulletins
• Map of CVE to Advisory
• Policy on information provided in Critical Patch Update Advisories and Security Alerts
• Applicability of Critical Patch Updates and Security Alerts to Oracle Cloud
• References

Security Mailer Volume 2019 Number 41

• Adobe security update prenotification
• Apple Security updates
• Browser updates
  • Chrome
  • Firefox
• Cisco security advisories
• Linux updates
• Microsoft
  • Tuesday updates
  • update revisions
  • advisory
• General Security
  • reviews last week
  • Notepad++ update

Security Mailer Volume 19 Number 40

• Browsers
  • Firefox update
  • Vendors begin depricating TLS 1.0 and TLS 1.1
• Cisco Security Advisories
• Open Source
  • Linux Kernel getting new Lockdown feature
  • Linux updates;
• Microsoft Updates released
  • Updates revised
  • SDX Helper issues
• General Security reviews last week,
• Updates for TCPDUMP and LIBPCAP

CU 17 for SQL Server 2017 RTM

CU 10 for SQL Server 2016 SP2

CU 9 for SQL Server 2016 SP2

.NET Framework October 2019 Security and Quality Rollup
(No security fixes)

October 2019 Security Updates

The October security release consists of security updates for the following software:

Microsoft Windows
Internet Explorer
Microsoft Edge (EdgeHTML-based)
ChakraCore
Microsoft Office and Microsoft Office Services and Web Apps
SQL Server Management Studio
Open Source Software
Microsoft Dynamics 365
Windows Update Assistant

Cybersecurity giant Comodo can’t even keep its own website secure

“According to the disclosure, Comodo said the hackers stole usernames, names and email addresses, as well as the user’s last IP address used to access the forum. Some social media handles were also stolen in the breach.

Comodo said it has about 245,000 registered forum users.

It’s not the most damaging breach on record, but it’s a bruising security lapse for a company that claims to be half-decent at this stuff.

This is Comodo’s second security snafu this year following another breach involving an exposed password, which allowed a security researcher access to the company’s intranet — and access to internal files and documents.”

MS identified a printing problem:

Windows 10 1903 KB4522016 Cumulative Update Breaks Printing

Looks like MS has re-released an out-of-band update to fix a couple of problems.

October 3, 2019—KB4524150 (OS Build 16299.1421)

“IMPORTANT This is a required security update that expands the out-of-band update dated September 23, 2019. This security update includes the Internet Explorer scripting engine security vulnerability (CVE-2019-1367) mitigation and corrects a recent printing issue some users have experienced. Customers using Windows Update or Windows Server Update Services (WSUS) will be offered this update automatically. To help secure your devices, we recommend that you install this update as soon as a possible and restart your PC to fully apply the mitigations. Like all cumulative updates, this update supersedes any preceding update.

Note This update does not replace the upcoming October 2019 monthly update, which is scheduled to release on October 8, 2019.“

Windows 10 1903 KB4522016 Cumulative Update Breaks Printing

Shortly after the release of the “optional” cumulative release for Windows 10 1903, reports came in that there was a big problem with HP printers being unable to print. It turns out that the problem is a bit more extensive. Of course, Microsoft’s “work around is to:

• try again
• reboot the printer
• install newer (r older) driver

They promise a more permanent fix “as part of an upcoming release”.

Security Mailer Volume 19 Number 39Balsam#2019MVP

• Browsers- urgent Chrome update
• Cisco Security Advisories
• Linux updates
• Microsoft
  • Security updates released
  • Emergency update for Internet Explorer 0-day
  • Cumulative update for Windows 10 1903
  • File extension types banned in OWA
  • New fileless malware
• General Security covers last week vulnerabilities