Wednesday, July 10, 2013

Google Alert - Vulnerabilities

=== News - 10 new results for [Vulnerabilities] ===

Microsoft patches 34 vulnerabilities
Help Net Security
This is quite a high ratio compared to past months, and it is mostly due to
the font parsing vulnerability, which is present in three of the seven
bulletins. Overall, the focus is clearly on the workstation part of your
infrastructure because most ...
<http://www.net-security.org/secworld.php?id=15203>
See all stories on this topic:
<http://news.google.com/news/story?ncl=http://www.net-security.org/secworld.php%3Fid%3D15203&hl=en&geo=us>

Vulnerabilities of US Emergency Alert System exposed
FierceCIO
The US Emergency Alert System has a serious vulnerability that may allow it
to be hijacked by a remote attacker. The problem revolves around systems
used to receive and authenticate emergency alert messages, and pertains to
specific Linux-powered ...
<http://www.fiercecio.com/techwatch/story/vulnerabilities-us-emergency-alert-system-exposed/2013-07-09>
See all stories on this topic:
<http://news.google.com/news/story?ncl=http://www.fiercecio.com/techwatch/story/vulnerabilities-us-emergency-alert-system-exposed/2013-07-09&hl=en&geo=us>

Microsoft to pull apps with critical vulnerabilities
PCWorld (blog)
In a bid to purge insecure software from the Windows Store, Microsoft
Tuesday announced that it would remove apps that it deems to have critical
vulnerabilities. Within 180 days, Microsoft said, those apps must either be
patched or they will be removed.
<http://www.pcworld.com/article/2043952/microsoft-to-pull-apps-with-critical-vulnerabilities.html>
See all stories on this topic:
<http://news.google.com/news/story?ncl=http://www.pcworld.com/article/2043952/microsoft-to-pull-apps-with-critical-vulnerabilities.html&hl=en&geo=us>

Microsoft addresses TrueType, Windows vulnerabilities
TechTarget
The vulnerabilities can be exploited if users read certain content with
TrueType font. It is one of three critical bulletins that include fixes for
TrueType font vulnerabilities. TrueType fonts are handled in three
different places: Silverlight ...
<http://searchwindowsserver.techtarget.com/news/2240187736/Microsoft-addresses-TrueType-Windows-vulnerabilities>
See all stories on this topic:
<http://news.google.com/news/story?ncl=http://searchwindowsserver.techtarget.com/news/2240187736/Microsoft-addresses-TrueType-Windows-vulnerabilities&hl=en&geo=us>

'Zombie Apocalypse' Broadcast Hoax Explained
InformationWeek
The first vulnerability -- affecting EAS devices from Digital Alert Systems
as well as its parent company, Monroe Electronics -- stems from the devices
shipping with a firmware updater package that includes a copy of their
default private root SSH key ...
<http://www.informationweek.com/security/vulnerabilities/zombie-apocalypse-broadcast-hoax-explain/240157934>
See all stories on this topic:
<http://news.google.com/news/story?ncl=http://www.informationweek.com/security/vulnerabilities/zombie-apocalypse-broadcast-hoax-explain/240157934&hl=en&geo=us>

Hackers can hijack unpatched Emergency Alert System devices, broadcast ...
Computerworld (blog)
In the case of an actual emergency, your regularly scheduled TV or radio
shows would be interrupted by a screeching tone before broadcasting a
"this is not a test" warning. So file this one—about vulnerabilities
to remotely hijack the Emergency Alert ...
<http://blogs.computerworld.com/malware-and-vulnerabilities/22450/hackers-can-hijack-unpatched-emergency-alert-system-devices-broadcast-bogus-warnings>
See all stories on this topic:
<http://news.google.com/news/story?ncl=http://blogs.computerworld.com/malware-and-vulnerabilities/22450/hackers-can-hijack-unpatched-emergency-alert-system-devices-broadcast-bogus-warnings&hl=en&geo=us>

Study: Bug bounty programs provide strong value for vendors
PCWorld
Their study looked at vulnerability reward programs (VRPs) run by Google
and Mozilla for the Chrome and Firefox web browsers. Over the last three
years, Google has paid US$580,000 in rewards, and Mozilla has paid
$570,000. In the course of those ...
<http://www.pcworld.com/article/2043998/study-bug-bounty-programs-provide-strong-value-for-vendors.html>
See all stories on this topic:
<http://news.google.com/news/story?ncl=http://www.pcworld.com/article/2043998/study-bug-bounty-programs-provide-strong-value-for-vendors.html&hl=en&geo=us>

Microsoft administers fixes for 34 vulnerabilities on Patch Tuesday
SC Magazine
The former resolves eight vulnerabilities, two of which were publicly known
and being exploited in "limited, targeted attacks," in the Windows kernel.
The latter is a familiar cumulative patch for vulnerabilities in Internet
Explorer, this one closing ...
<http://www.scmagazine.com/microsoft-administers-fixes-for-34-vulnerabilities-on-patch-tuesday/article/302324/>
See all stories on this topic:
<http://news.google.com/news/story?ncl=http://www.scmagazine.com/microsoft-administers-fixes-for-34-vulnerabilities-on-patch-tuesday/article/302324/&hl=en&geo=us>

EAS vulnerability exposes the soft underbelly of firmware
GCN.com
Operators of the Emergency Alert System have begun updating equipment to
close vulnerabilities that exposed the nationwide system to exploit by
unauthorized users. Vendors of the affected codec equipment have replaced
firmware that exposed sensitive ...
<http://gcn.com/articles/2013/07/09/emergency-alert-system-firmware-vulnerability.aspx>
See all stories on this topic:
<http://news.google.com/news/story?ncl=http://gcn.com/articles/2013/07/09/emergency-alert-system-firmware-vulnerability.aspx&hl=en&geo=us>

Digital Defense Offers Remedy For Security Flaws That Enable Hackers
Dark Reading
SAN ANTONIO, July 9, 2013 /PRNewswire/ -- Organizations are waking up to
the reality that a dangerous implementation issue could lead to devastating
operational disruption by providing hackers the ability to bypass typical
security controls and take ...
<http://www.darkreading.com/vulnerability/digital-defense-offers-remedy-for-securi/240157980>
See all stories on this topic:
<http://news.google.com/news/story?ncl=http://www.darkreading.com/vulnerability/digital-defense-offers-remedy-for-securi/240157980&hl=en&geo=us>

This once a day Google Alert is brought to you by Google.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Delete this Google Alert:
http://www.google.com/alerts/remove?hl=en&gl=us&source=alertsmail&s=AB2Xq4h73uDuUaTj8-CUHcryQFnZut4U2bzcgRg

Create another Google Alert:
http://www.google.com/alerts?hl=en&gl=us&source=alertsmail

Sign in to manage your alerts:
http://www.google.com/alerts/manage?hl=en&gl=us&source=alertsmail

0 Comments:

Post a Comment

<< Home