DarkFiber Consulting – IT Managed Services

Google Releases Chrome 4.0.249.78

January 27th, 2010 . by DarkFiber Consulting

Google has released Chrome 4.0.249.78 for Windows to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, obtain sensitive information, bypass security restrictions, or cause a denial-of-service condition.

DarkFiber Consulting encourages users and administrators to review the Google Chrome Releases blog entry and update to Chrome 4.0.249.78 for Windows to help mitigate the risks.

RealNetworks, Inc. Releases Updates to Address Vulnerabilities

January 27th, 2010 . by DarkFiber Consulting

RealNetworks, Inc. has released updates to address multiple vulnerabilities in several versions of RealPlayer for Windows, Mac, and Linux and several versions of the Helix Player for Linux. These vulnerabilities may allow an attacker to execute arbitrary code.

DarkFiber Consulting encourages users and administrators to review the RealNetworks, Inc. advisory and apply any necessary updates to help mitigate the risks.

Microsoft Releases Cumulative Security Update for Internet Explorer

January 27th, 2010 . by DarkFiber Consulting

Microsoft has released Security Bulletin MS10-002 as a Cumulative Security Update for Internet Explorer. This update addresses multiple vulnerabilities that when exploited, may allow an attacker to execute arbitrary code.

DarkFiber Consulting encourages users and administrators to review Microsoft Security Bulletin MS10-002 and apply any necessary updates to help mitigate the risks.

Apple Releases Security Update 2010-001

January 27th, 2010 . by DarkFiber Consulting

Apple has released Security Update 2010-001 to address multiple vulnerabilities in a number of applications. These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition.

DarkFiber Consulting encourages users and administrators to review Apple article HT4004 and apply any necessary updates to help mitigate the risks.

Adobe Releases Shockwave Player Update

January 27th, 2010 . by DarkFiber Consulting

Adobe has released an update for Shockwave Player to address multiple vulnerabilities. These vulnerabilities affect Adobe Shockwave Player 11.5.2.602 and earlier versions for Windows and Macintosh. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code.

DarkFiber Consulting encourages users and administrators to review Adobe Security Bulletin APSB10-03 and apply any necessary updates to help mitigate the risks.

Microsoft Releases Security Advisory 979352

January 27th, 2010 . by DarkFiber Consulting

Microsoft has released Security Advisory 979352 to alert users of a vulnerability in Microsoft Internet Explorer. The advisory indicates that exploitation of this vulnerability may allow an attacker to execute arbitrary code. Microsoft also indicates that it is aware of public, active exploitation of this vulnerability.

DarkFiber Consulting encourages users and administrators to review Microsoft Security Advisory 979352 and apply the suggested workaround of setting the Internet zone security setting to High to help mitigate the risks.

Additional information about this vulnerability can be found in Vulnerability Note VU#492515.

Haitian Earthquake Disaster Email Scams and Search Engine Poisoning Campaigns

January 27th, 2010 . by DarkFiber Consulting

DarkFiber Consulting would like to warn users of potential email scams and search engine poisoning campaigns that may circulate regarding the Haitian Earthquake disaster. The scam emails may contain links or attachments which may direct users to phishing or malware-laden websites. Fraudulent search engine results may return similar malicious web links to phishing and malware websites.

DarkFiber Consulting encourages users to take the following measures to protect themselves:

IRS Warns of Online Scams

January 27th, 2010 . by DarkFiber Consulting

DarkFiber Consulting is aware of reports of tax season phishing scams. The U.S. Internal Revenue Service has issued a news release on its website warning consumers about potential scams. These scams are circulating via fraudulent email or other online messages appearing to come from the IRS. They attempt to convince consumers to reveal personal and financial information that can be used to gain access to bank accounts, credit cards, and other financial institutions.

DarkFiber Consulting encourages users to do the following to mitigate the risks:

Adobe Releases Update for Adobe Reader and Acrobat

January 27th, 2010 . by DarkFiber Consulting

Adobe has released an update for Reader and Acrobat to address multiple vulnerabilities. These vulnerabilities affect Adobe Reader 9.2 and earlier versions for Windows, Macintosh, and UNIX and Adobe Acrobat 9.2 and earlier versions for Windows and Macintosh. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition.

DarkFiber Consulting encourages users and administrators to review Adobe Security Bulletin APBS10-02 and apply any necessary updates to help mitigate the risks. 

Oracle Releases Critical Patch Update for January 2010

January 27th, 2010 . by DarkFiber Consulting

Oracle has released its Critical Patch Update for January 2010 to address 24 vulnerabilities across several products. This update contains the following security fixes:

  • 10 for Oracle Database
  • 3 for Oracle Application Server
  • 3 for the Oracle Applications Suite
  • 1 for PeopleSoft and JD Edwards Suite
  • 5 for the BEA Products Suite
  • 2 for the Oracle Primavera Products Suite

DarkFiber Consulting encourages users and administrators to review the January 2010 Critical Patch Update and apply any necessary updates to help mitigate the risks. Additional information can be found in DarkFiber Consulting Technical Cyber Security Alert TA10-012A.