Monday, July 21, 2014

Oracle Critical Patch Update For Q3 of 2014

Oracle have released updates for their products that fix 113 security issues (including 20 Java fixes) in total. The updates are a part of Oracle's quarterly released critical patch update (CPU).

Detailed list of vulnerabilities with patching instructions can be read from Oracle CPU Advisory.

Next Oracle CPU is planned to be released in October 2014.

Friday, July 18, 2014

Symantec Intelligence Report: June 2014

Symantec have published their Intelligence report that sums up the latest threat trends for June 2014.

Report highlights:
- There was an average of 88 spear-phishing attacks per day in June.
- The number of Android variants per family reached the lowest levels seen in the last twelve months, at 18 variants per family.
- The largest data breach reported in June took place in May, and resulted in the exposure of 1.3 million identities.


The report (in PDF format) can be viewed here.

Friday, July 11, 2014

ESET Global Threat Report for June 2014

ESET have published a report discussing global threats of June 2014.

TOP 10 threats list (previous ranking listed too):

1. WIN32/Bundpil (1.)
2. JS/Kryptik.I (-)
3. LNK/Agent.AK (2.)
4. Win32/Sality (3.)
5. INF/Autorun (5.)
6. Win32/Conficker (7.)
7. Win32/Ramnit (8.)
8. HTML/ScrInject (4.)
9. HTML/Iframe (-)
10. Win32/Dorkbot (10.)


Complete report (with a description about each of the above listed threats) can be downloaded here (in PDF format).

Thursday, July 10, 2014

Adobe Flash Player And Adobe AIR Updates Available

Adobe have released updated versions of their Flash Player and AIR. The new versions fix critical vulnerabilities that could cause a crash and potentially allow an attacker to take control of the affected system.

Affected versions:

- Users of Adobe Flash Player 14.0.0.125 and earlier versions for Windows and Macintosh should update to Adobe Flash Player 14.0.0.145

- Users of Adobe Flash Player 11.2.202.378 and earlier versions for Linux should update to Adobe Flash Player 11.2.202.394

- Flash Player integrated with Google Chrome will be updated by Google via Chrome update

- Flash Player integrated with Internet Explorer 10 and 11 (on Windows 8.0 and Windows 8.1) will be updated via Windows Update

- Users of the Adobe AIR 14.0.0.110 SDK and earlier versions should update to the Adobe AIR 14.0.0.137 SDK.

- Users of the Adobe AIR 14.0.0.110 SDK & Compiler and earlier versions should update to the Adobe AIR 14.0.0.137 SDK & Compiler.

- Users of Adobe AIR 14.0.0.110 and earlier versions for Android should update to Adobe AIR 14.0.0.137.

- Users of Adobe AIR 14.0.0.110 and earlier versions for Windows and Macintosh should update to Adobe 14.0.0.137.


More information can be read from Adobe's security bulletin.

Microsoft Security Updates For July 2014

Microsoft have released security updates for July 2014. This month update contains six security bulletins of which three categorized as critical, two as important and one as moderate.

A new version of Windows Malicious Software Removal Tool (MSRT) was released too.

More information can be read from the bulletin summary.

Saturday, July 5, 2014

PHP Versions 5.5.14 and 5.4.30 Released

PHP development team has released 5.5.14 and 5.4.30 versions of the PHP scripting language. New versions contain several bug fixes to vulnerabilities which may allow an attacker to execute arbitrary code in affected system. All PHP users are recommended to upgrade their versions to the latest release of the correspondent branch.

Changelogs can be viewed here.

Monday, June 30, 2014

RealPlayer Update

RealNetworks has released updated version of their RealPlayer. New version contains a fix to a buffer overflow vulnerability (CVE-2014-3113).

Users of affected versions are advised to update their RealPlayer to the latest one available. More information can be read from related security advisory.