Security News - Blogging in support of Linux - By Tony

[Tony]

Don't read further if you use Linux.

Well, do if you want to. A Demonstration through fact why you use Linux; no biggy, just a taste of what you don't want...
Move along smartly or you'll be here all day !
Following on from my post: 04 January 2013, 09:33:44
... where we learned: These Facts ...

Post 2.) All Details Gleaned in first instance from: http://www.calendarofupdates.com/home - by Tony on Sun Jan 6th 2013.

Glitch in Facebook's 'Midnight Delivery' feature exposes private messages - Quote from reporter:

With the kiddie scribblers that must write FB code, I wouldn't touch it if I was paid to.

Platform: All
SUMMARY
Adobe is planning to release security updates on Tuesday, January 8, 2013 for Adobe Reader and Acrobat XI (11.0.0) and earlier versions for Windows and Macintosh, and Adobe Reader 9.5.1 and earlier 9.x versions for Linux.

Elderwood Project Behind Latest Internet Explorer Zero-Day Vulnerability

In our recent blogs about the latest Internet Explorer zero-day vulnerability, we explained what watering hole attacks are and referenced our research paper about the Elderwood Project. The paper highlights a string of watering hole attacks by the Elderwood group.After revisiting those previous attacks, we have been able to confirm that this latest Internet Explorer zero-day is a continuation of the Elderwood Project.

 

Related Elderwood zero-day vulnerabilities

The following are the vulnerabilities produced by the Elderwood group that are directly related to the most recent Internet Explorer zero-day.

http://www.symantec.com/connect/blogs/elderwood-project-behind-latest-internet-explorer-zero-day-vulnerability

More fraudulent digital certificates could allow spoofing

http://www.ntcompatible.com/news/story/microsoft_security_advisory_fraudulent_digital_certificates_could_allow_spoofing.html
Posted by Philipp Esselbach on: 01/04/2013 09:22 AM
Microsoft has released updates for Windows for the Microsoft Untrusted Certificate Store.
Affected software:

"All editions of Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012"

That just about covers it.

 

fyi, the certs are for

*.google.com issued by *.EGO.GOV.TR

e-islem.kktcmerkezbankasi.org issued by TURKTRUST Elektronik Sunucu Sertifikasi Hizmetleri

*.EGO.GOV.TR issued by TURKTRUST Elektronik Sunucu Sertifikasi Hizmetleri