Information about vulnerabilities that may effect your computing

Twitter Mouse-Over Flaw Send Users to Dangerous Links

/
Earlier in the day a security flaw turned Twitter's Website into a chaotic and potentially unsafe place, filled with annoying pop-up windows that activated just by rolling the mouse over another user's tweets.

Microsoft Security Bulletin Summary for September 2010 – Issued: September 14, 2010

/
With the release of the bulletins for September 2010, this bulletin summary replaces the bulletin advance notification originally issued on September 9, 2010. For more information about the bulletin advance notification service, see http://www.microsoft.com/technet/security/Bulletin/advance.mspx.

Adobe Zero-Day Strikes Again

/
For the second time in nearly a week, Adobe Systems is warning users about a zero-day vulnerability under attack.

Spammers Stay Busy Despite Pushdo Botnet Hit

/
From the shutdown of McColo to last week's disruption of the Pushdo botnet, spammers have continually found ways to stay in business. Nearly 20 of the 30 command and control (CnC)servers associated with Pushdo were taken offline last week due to efforts by security vendor LastLine. The servers were supported by eight hosting providers, some of which did not respond to the vendor's requests for action.

Apple Mac Security Update Plugs 13 Vulnerabilities

/
Apple released a security update for Mac OS X that patches 13 vulnerabilities. The release fixes issues in several components, including CoreGraphics and Apple Type Services. Several of the vulnerabilities are buffer overflows, and can be exploited to execute arbitrary code.

Facebook “Dislike” Button a Scam

/
Facebook users are being targeted again in a scam that offers them a chance to install a "dislike" button. This scam has been making its way around Facebook this past weekend and it is said thousands of users have been affected, effected and infected. The scam asks users if they would like to install a "dislike" button on their Facebook page, once they select the link the user are tricked into allowing a rogue application to access their profile page, which then begin post spam messages. The rouge application also attempts to lure the user into completing an online survey, for which the responsible party of the scam are paid money.

Apple’s iDevices Gets Latest Patch against Latest Jailbreak Issue

/
Apparently, everyone was waiting for the update, while small in size and a quick download for the iPad, the same could not be said for the iPhone. The patch for the iPhone took over an hour for the 300+ MB file to be downloaded. The latest versions are now 4.0.2 for the iPhone and 3.2.2 for the iPad.

Jailbreaking Apple’s Mobile iProducts Get Easier

/
As the popularity of the small Apple products (iPhone, iPad, iTouch) take off, they are drawing the attentions of hackers. Some hackers just want to access the OS so they remove roadblocks for application customization and to add unauthorized tools and programs, while others might want to do damage or steal your information.

Adobe confirms PDF zero-day, plans rush patch

/
Adobe today said it would issue an emergency patch the week of Aug. 16 to fix a critical flaw in its Reader and Acrobat software. The bug was disclosed by researcher Charlie Miller at last month's Black Hat security conference when he demonstrated how the open-source BitBlaze toolkit could be used to boost bug-hunting productivity tenfold.

New threat: Hackers look to take over power plants

/
Computer hackers have begun targeting power plants and other critical operations around the world in bold new efforts to seize control of them, setting off a scramble to shore up aging, vulnerable systems.