PC Security and Other Useful Information

Avast Network Breached As Hackers Target CCleaner Again

“Avast said that it believes that the intrusion, first detected on Sept. 25, was likely targeting its CCleaner business in a supply chain attack. CCleaner, which is software that fights infections in PCs, was previously infiltrated by attackers in 2017 and led to the compromise of 2.27 million people’s systems.”

Avast, NordVPN Breaches Tied to Phantom User Accounts

“Antivirus and security giant Avast and virtual private networking (VPN) software provider NordVPN each today disclosed months-long network intrusions that — while otherwise unrelated — shared a common cause: Forgotten or unknown user accounts that granted remote access to internal systems with little more than a password.”

Security Mailer Volume 19 Number 42

• Cisco Security Advisories
• Linux Updates
• Microsoft
  • Update released
  • Known issues reported
  • Windows 10 end of service reminders
• General Security reviews last week

Data for a whopping 26 million stolen payment cards leaked in hack of fraud bazaar

A thriving online bazaar selling stolen payment card data has been hacked in a heist that leaked the records for more than 26 million cards, KrebsOnSecurity reported on Tuesday.

Oracle Critical Patch Updates, Security Alerts and Bulletins

This page contains the following sections:

• Critical Patch Updates
• Security Alerts
• Solaris Third Party Bulletins
• Oracle Linux Bulletins
• Oracle VM Server for x86 Bulletins
• Map of CVE to Advisory
• Policy on information provided in Critical Patch Update Advisories and Security Alerts
• Applicability of Critical Patch Updates and Security Alerts to Oracle Cloud
• References

Security Mailer Volume 2019 Number 41

• Adobe security update prenotification
• Apple Security updates
• Browser updates
  • Chrome
  • Firefox
• Cisco security advisories
• Linux updates
• Microsoft
  • Tuesday updates
  • update revisions
  • advisory
• General Security
  • reviews last week
  • Notepad++ update

Security Mailer Volume 19 Number 40

• Browsers
  • Firefox update
  • Vendors begin depricating TLS 1.0 and TLS 1.1
• Cisco Security Advisories
• Open Source
  • Linux Kernel getting new Lockdown feature
  • Linux updates;
• Microsoft Updates released
  • Updates revised
  • SDX Helper issues
• General Security reviews last week,
• Updates for TCPDUMP and LIBPCAP

CU 17 for SQL Server 2017 RTM

CU 10 for SQL Server 2016 SP2

CU 9 for SQL Server 2016 SP2

.NET Framework October 2019 Security and Quality Rollup
(No security fixes)

October 2019 Security Updates

The October security release consists of security updates for the following software:

Microsoft Windows
Internet Explorer
Microsoft Edge (EdgeHTML-based)
ChakraCore
Microsoft Office and Microsoft Office Services and Web Apps
SQL Server Management Studio
Open Source Software
Microsoft Dynamics 365
Windows Update Assistant

Cybersecurity giant Comodo can’t even keep its own website secure

“According to the disclosure, Comodo said the hackers stole usernames, names and email addresses, as well as the user’s last IP address used to access the forum. Some social media handles were also stolen in the breach.

Comodo said it has about 245,000 registered forum users.

It’s not the most damaging breach on record, but it’s a bruising security lapse for a company that claims to be half-decent at this stuff.

This is Comodo’s second security snafu this year following another breach involving an exposed password, which allowed a security researcher access to the company’s intranet — and access to internal files and documents.”

MS identified a printing problem:

Windows 10 1903 KB4522016 Cumulative Update Breaks Printing

Looks like MS has re-released an out-of-band update to fix a couple of problems.

October 3, 2019—KB4524150 (OS Build 16299.1421)

“IMPORTANT This is a required security update that expands the out-of-band update dated September 23, 2019. This security update includes the Internet Explorer scripting engine security vulnerability (CVE-2019-1367) mitigation and corrects a recent printing issue some users have experienced. Customers using Windows Update or Windows Server Update Services (WSUS) will be offered this update automatically. To help secure your devices, we recommend that you install this update as soon as a possible and restart your PC to fully apply the mitigations. Like all cumulative updates, this update supersedes any preceding update.

Note This update does not replace the upcoming October 2019 monthly update, which is scheduled to release on October 8, 2019.“