PC Security and Other Useful Information

Sprint Exposed Customer Support Site to Web “Fresh on the heels of a disclosure that Microsoft Corp. leaked internal customer support data to the Internet, mobile provider Sprint has addressed a mix-up in which posts to a private customer support community were exposed to the Web.”

Security Mailer Volume 20 Number 4 Cisco security advisories Linux updates & patches Microsoft Security update revised Office 365 ProPlus users will get Bing forced in Chrome Unpatched 0-day for Internet Explorer under attack CryptoAPI vulnerability is a must patch now General Security reviews last week Citrix ADC under active attack – patches released

Apple Addresses iPhone 11 Location Privacy Concern Apple is rolling out a new update to its iOS operating system that addresses the location privacy issue on iPhone 11 devices that was first detailed by KrebsOnline last month.

Security mailer Volume 20 Number 3 Adobe Security bulletins Updates for Experience Manager and Illustrator Cisco Security Advisories Linux updates and patches Microsoft Tuesday Patch for 0-day that has exploit code available Security Advisories Security bulletin revisions New Microsoft Edge browser released General Security reviews last week Wireshark updates released

Microsoft will fix an Internet Explorer security flaw under active attack “Microsoft has confirmed to TechCrunch that it will fix an Internet Explorer security exploit already being used for “limited targeted attacks.” The vulnerability lets attackers corrupt memory used for the scripting engine in IE9, IE10 and IE11 in a way that would let the […]

Security Mailer Volume 20 Number 2 Browsers 0-day updates for Firefox Firefox ESR Thunderbird, Firefox to drop TLS 1.1 and earlier Firefox for Android Cisco security advisories Linux updates & patches Microsoft Windows 7 free support ends next week General Security reviews last weeks vulnerabilities

Tricky Phish Angles for Persistence, Not Passwords “Late last year saw the re-emergence of a nasty phishing tactic that allows the attacker to gain full access to a user’s data stored in the cloud without actually stealing the account password. The phishing lure starts with a link that leads to the real login page for […]

Security Mailer Volume 20 Number 1 Cisco security advisories Linux update and patche General security review of last weeks vulnerabilities

Company shuts down because of ransomware, leaves 300 without jobs just before holidays “An Arkansas-based telemarketing firm sent home more than 300 employees and told them to find new jobs after IT recovery efforts didn’t go according to plan following a ransomware incident that took place at the start of October 2019.”