Microsoft issued three “critical” security bulletins as part of its monthly patch Tuesday. The top of the list is MS11-003, which is a cumulative update for Internet Explorer that resolves four vulnerabilities. CSS bug outlined in Security Advisory 2488013 is a bug that could give attackers control of people’s computers.
Subscribe to get the latest posts sent to your email.
A vulnerability has been reported in the e-commerce software called osCommerce. osCommerce is an open source e-commerce solution for running an online store front with minimal effort and cost. The attack takes advantage of multiple vulnerabilities and insecure configuration settings with osCommerce installations. As a result, an attacker is able to take complete control and/or plant…
Patch Tuesday. When it releases its monthly patches September 13, Microsoft will publish five bulletins categorized as “important” to close 15 holes. Most of the bulletins fix vulnerabilities in Microsoft Office, which attackers can use to inject malicious code and escalate rights. Arbitrary code can also be executed in the Mac edition of Office, and…
Merchants that use Scottsdale, Ariz.-based security services provider Chief Security Officers (CSO) to validate their adherence with the Payment Card Industry Data Security Standard (PCI DSS) will have to find a new assessor. The PCI Security Standards Council, the group responsible for managing payment security, last week revoked CSO’s status as a Qualified Security Assessor…
As pay-at-the-pump skimming scams grow in the United States and Europe, police in Camarillo, California, have taken the unique step of enlisting help from civilians to fight skimming crimes. Known as the citizen patrol unit, the group of 30 civilian volunteers has been tasked with monitoring pay-at-the pump terminals throughout Camarillo, looking for signs of…
From the Desk of Chad M. Barr, CISSP, CISA An increasing number of domestic and international criminals are using the Internet for illegal purposes. Computers and other electronic devices can be used to commit crimes. This newsletter will discuss who are potential targets, the nature of computer and cyber crime, and what you can do…
From the Desk of Chad M. Barr, CISSP, CISA Cyberbullying, or harassment through electronic messaging, can affect adults at work or at home, but it is more common for youth to be exposed to this dangerous behavior. Cyberbullying can occur via cell phone text messaging, email, instant messaging, or even within online games and social…
