Web page to help with installation of WIndows anti-hacker security patch
305737
Information Technology Systems and Services (ITSS) has created a Web page that will walk Microsoft Windows XP users on campus through a major update being released worldwide this month to make the operating system less vulnerable to computer hackers and ...
42644
(InfoWorld) - With Microsoft's monthly patch release expected on Tuesday, scammers are sending out fake security bulletins that attempt to install malicious software on victim's computers. The e-mail messages claim to describe a "Cumulative Security Update for Internet Explorer" that fixes a critical security flaw in the browser. It comes with a link entitled "Download this update." When users click on this link, they are taken to a server that attempts to install malicious software known as Trojan-Downloader.Win32.Agent.avk. This Trojan software then attempts to reach out to other computers on the Internet in order to install more programs on the victim's computer. The SANS Internet Storm Center received its first and only report of the scam on Thursday night, but a second sample has also been posted to the Chinese Internet Security Response Team blog. SANS volunteer Lenny Zeltser believes that the criminals behind this scam may be gearing up for more activity. The trojan looks for three different servers, and two of them have domains that haven't yet been registered. He suspects the authors of the scam may be planning to register those domains before embarking on a more widespread campaign. The two e-mail samples contained obvious errors that would be caught by technically savvy users. For example, although the patch Zeltser examined claimed to have been issued in June 2007, it was entitled MS06-4 instead of the more-plausible MS07-004. Still, these scams need to fool only a small percentage of victims in order to be successful, said Zeltser, information security practice leader at Gemini Systems in New York. "You wonder, does it really matter that there are these strange discrepancies in the way the fake security alert is written," he said. "People who would notice probably would be the kind of people who wouldn't click on the link." Another tip-off: Microsoft does send out notification e-mail when it publishes security bulletins, but the links in these alerts take users to the bulletins themselves, not to executable downloads
104663
Worried about spyware? spam? "spim"? AOL wants to set your mind at rest. Also: Putting patches in place.
216439
Acknowledging that its patching process has "not been an example of our best work," Microsoft this week issued a second update to security bulletin MS06-042, which was released in August. The original patch included a security vulnerability - and it turns out the fix introduced even more.
429232
DecemberÃ¢ÂÂs Patch Tuesday finds Vista in the bad guysÃ¢ÂÂ sights. Plus: Get Office 2007 SP1, get your fix for Flash, and avoid an HP laptop disaster.
364679
In a curious decision on the part of a security software company, a white paper released today on the Symantec's Web site contains the address of an independent research paper which includes a demonstration of defeating PatchGuard, complete with source code, in an early Windows Vista beta.  The address comes by way of a 16-page reduction of Vista's security technologies.
245292
Description: A new Microsoft upgrade tries to make Windows XP more secure against attack. Service Pack 2 contains a program -- known as a firewall -- that keeps out some destructive computer worms.
551854
InfoWorld - A hacker has released attack code that could be used to exploit a critical bug in some versions of the Windows operating system.
741214
Workshop Windows virus cleanup primer
265180
Microsoft has released bulletin MS04-039 reporting a security vulnerability in Internet Security and Acceleration (ISA) Server 2000 and in Proxy Server 2.0, and has also announced the availability of the patches to resolve these issues.
506946
Microsoft posted a patch on Tuesday afternoon for Internet Security &amp; Acceleration Server 2000 and Proxy Server 2.0. The patch fixed a spoofing vulnerability that Microsoft rated an &quot;important&quot; problem.
425846
Microsoft's monthly set of security patches fix problems in Windows, Internet Explorer and the SSL software used for secure Web browsing.
618884
An alert posted on the company&#39;s Web site outlined the patches that should be posted to fix numerous security holes in a number of applications.
301996
Microsoft has a massive patch for some of the many bugs and security holes in Windows XP. If you&#39;re using Windows XP, you might want to download the software patch and install it.
195221
Windows XP Service Pack 2 promises to raise the security bar for the sometimes beleaguered operating system. Unfortunately, one of the new features could be spoofed so that it reports misleading information
688722
Sample code that exploits a yet-to-be-fixed Windows flaw is circulating. Microsoft plans to deal with it on the next Patch Tuesday.
414849
The giant has released a patch so that Windows doesn&#39;t let in hackers when it handles JPEG graphics formats. The flaw means that attackers can create an image file that will automatically run dodgy code, dump