WatchGuard Wire
Security Alerts and Advice

Quicktime falls victim to yet another zero day vulnerability
by lsseditor@watchguard.com
13 Feb 2008 at 7:06pm
A post to the FullDisclosure mailing-list late yesterday warns of a new zero day vulnerability affecting Quicktime 7.4.1. The vulnerability lies within an ActiveX control that ships with Quicktime.
Don't let your business stampede to Facebook until you face the terms
by lsseditor@watchguard.com
13 Feb 2008 at 12:54pm
SearchCIO.com columnist Kate Evans-Correia has issued a worthwhile challenge: Every CIO and IT manager should set themselves up on Facebook so that they can understand what threats it presents.
Beware: spoofed Microsoft Update site uses almost-real URL
by lsseditor@watchguard.com
12 Feb 2008 at 6:32pm
A fraudulent site that wants to install a trojan on your computer has been made to resemble the actual Microsoft Update site -- all the way down to a URL which contains part of Microsoft's URL. Would you notice the difference between a . and a / ?
Microsoft Black Tuesday: WebDAV flaw is most critical among eleven bulletins
by lsseditor@watchguard.com
12 Feb 2008 at 2:00pm
Today, Microsoft released 11 security bulletins, fixing some 17 vulnerabilities in their products. With so many bulletins rated as Critical, where do you patch first? Here are some of our thoughts, which may help you formulate your own.
Tight-lipped Adobe got it right and wrong as "secret" Reader flaws are revealed
by lsseditor@watchguard.com
11 Feb 2008 at 1:10pm
Last Wednesday, Adobe released a patch for Adobe Reader, but would not specify what the holes were, how they were exploited, nor the result of a successful exploit. So how do you alert subscribers about a security problem when you have no facts to report?
Twelve Microsoft patches in February; seven are critical
by lsseditor@watchguard.com
7 Feb 2008 at 6:41pm
Microsoft has posted their Advanced Notification for February's Black Tuesday, predicting that they will release seven Critical bulletins and five ranked Important.
iPhoto's photocasts deliver malware to Mac users
by lsseditor@watchguard.com
6 Feb 2008 at 12:45pm
Apple has released a security update for iPhoto that fixes a vulnerability in its photocast feature. iPhoto suffers from a format string vulnerability involving the way it handles maliciously crafted photocasts.
Keeping in touch with friends may allow hackers to reach out and touch you
by lsseditor@watchguard.com
1 Feb 2008 at 7:21pm
Yesterday, researchers reported a couple of vulnerabilities in popular software and Web sites which many people use to keep in touch with one another. Specifically, these vulnerabilities were found in Skype, MySpace and FaceBook.
New exploit video provides a gentle reminder to apply Microsoft's January pat...
by lsseditor@watchguard.com
1 Feb 2008 at 6:53pm
ImmunitySec has released a flash video showing off an exploit against Microsoft's recent IGMPv3 vulnerability. If you haven't used security penetration testing software, the contents of the video may not seem entirely clear; we show it to you and explain.
Flaw involving Firefox extensions could let hackers steal session information
by lsseditor@watchguard.com
31 Jan 2008 at 1:38pm
A flaw in Firefox could allow hackers to take advantage of extensions packaged in a particular way, helping them hijack your web sessions. Until Mozilla releases a patch next week, here's a quick fix.
French banker takes "insider trading" to a new low
by lsseditor@watchguard.com
29 Jan 2008 at 7:29pm
Punging world stock markets exposed a futures trader who defrauded the French bank Société Générale of 4.9 billion euros, through a series of phoney transactions. Makes it a good idea to get to know the person in the cubicle next door.
"Bud" Goes Global; password video grows in popularity
by lsseditor@watchguard.com
21 Jan 2008 at 3:33pm
This movie star never says a word, and his claim to fame is one appearance in an educational film by a security vendor. He may not have a Golden Globe to show off; but Bud's done pretty well for himself, sometimes netting over 1,000 views per day.
TSA should hold itself to same standard as its travelers
by lsseditor@watchguard.com
17 Jan 2008 at 3:44pm
Homeland Security's Transportation Security Administration was taken to task last week for putting travelers at risk of identity theft. The site was not initially hosted on a government domain, and one of its data submission pages was not encrypted.
Bank robbery con jobs treat incident response as a joke
by lsseditor@watchguard.com
16 Jan 2008 at 1:45pm
We all know a few "guy walks into a bar..." jokes. But in this story, it's "guy walks into a bank," and the joke may be on you.
TV host Jeremy Clarkson learns security the hard way
by lsseditor@watchguard.com
10 Jan 2008 at 1:07pm
British TV host Jeremy Clarkson, certain that the furor over the loss of 25 million private records in the UK was "much ado about nothing," tried to prove his point by revealing his bank account numbers in a newspaper column. He was quickly proven wrong.

To POST a comment about one of the above articles go HERE.
All articles are copyright their respective authors.