The latest TDL rookit family contains malware that evades security mechanisms built into the latest x64 operating systems, including Microsoft's Windows Vista and Windows 7.
Microsoft updated the following security bulletin:
- MS11-025 - Important: Vulnerability in Microsoft Foundation Class (MFC) Library Could Allow Remote Code Execution (2500212) - Version:2.0
- MS11-025 - Important: Vulnerability in Microsoft Foundation Class (MFC) Library Could Allow Remote Code Execution (2500212) - Version:2.0
Adobe has released patches for its Reader and Acrobat products to plug a hole in the Flash Player that was first reported in March and is being used in attacks on the Internet.
A German software company known for its Windows utilities is warning customers to be on the alert for malicious e-mail messages after its servers were hacked.
Microsoft published the following security bulletin updates:
- MS11-031 - Critical: Vulnerability in JScript and VBScript Scripting Engines Could Allow Remote Code Execution (2514666) - Version:1.1
- MS11-024 - Important: Vulnerability in Windows Fax Cover Page Editor Could Allow Remote Code Execution (2527308) - Version:1.1
- MS11-022 - Important: Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (2489283) - Version:1.1
- MS10-070 - Important: Vulnerability in ASP.NET Could Allow Information Disclosure (2418042) - Version:4.1
- MS11-031 - Critical: Vulnerability in JScript and VBScript Scripting Engines Could Allow Remote Code Execution (2514666) - Version:1.1
- MS11-024 - Important: Vulnerability in Windows Fax Cover Page Editor Could Allow Remote Code Execution (2527308) - Version:1.1
- MS11-022 - Important: Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (2489283) - Version:1.1
- MS10-070 - Important: Vulnerability in ASP.NET Could Allow Information Disclosure (2418042) - Version:4.1
Microsoft Tuesday released a pair of security advisories for Chrome, the browser built by rival Google.
Microsoft updated the following security bulletin:
MS11-017 - Important: Vulnerability in Remote Desktop Client Could Allow Remote Code Execution (2508062) - Version:1.4
MS11-017 - Important: Vulnerability in Remote Desktop Client Could Allow Remote Code Execution (2508062) - Version:1.4
Adobe is planning to patch the recently disclosed Flash Player vulnerability on Friday for users on Windows, Mac OS X and Linux.
Microsoft updated the following two security bulletins:
- MS11-019 - Critical: Vulnerabilities in SMB Client Could Allow Remote Code Execution (2511455) - Version:1.1
- MS11-017 - Important: Vulnerability in Remote Desktop Client Could Allow Remote Code Execution (2508062) - Version:1.3
- MS11-019 - Critical: Vulnerabilities in SMB Client Could Allow Remote Code Execution (2511455) - Version:1.1
- MS11-017 - Important: Vulnerability in Remote Desktop Client Could Allow Remote Code Execution (2508062) - Version:1.3
A man-in-the-middle attack can use the IPv6 protocol to eavesdrop on IPv4 networks, though an attacker would have to physically place a router in the targeted environment for it to work.
Microsoft officially published the Security Bulletin Summary for April 2011
Here part 3 of today's Microsoft security updates:
- Security Update for Microsoft Office 2007 System (KB2509488)
- Security Update for Windows Server 2008 (KB2506212)
- Security Update for Windows Server 2008 for Itanium-based Systems (KB2506212)
- Security Update for Windows Vista for x64-based Systems (KB2506212)
- Security Update for IIS FTP 7.5 for Vista for x64-based Systems (KB2489256)
- Security Update for Windows XP (KB2506212)
- Security Update for Windows Server 2003 (KB2506212)
- Security Update for Windows Server 2008 x64 Edition (KB2506212)
- Security Update for Microsoft Office Excel Viewer (KB2466158)
- Security Update for Windows Embedded Standard 7 for x64-based Systems (KB2506212)
- Security Update for Microsoft Office 2003 (KB2509503)
- Security Update for Windows XP x64 Edition (KB2506212)
- Security Update for Windows Vista (KB2506212)
- Security Update for Windows Embedded Standard 7 (KB2506212)
- Security Update for Windows 7 for x64-based Systems (KB2506212)
- Security Update for IIS FTP 7.5 For Vista (KB2489256)
- Security Update for Windows 7 (KB2506212)
- Security Update for Windows Server 2003 x64 Edition (KB2506212)
- Security Update for Windows Server 2003 for Itanium-based Systems (KB2506212)
- Security Update for Windows Server 2008 R2 for Itanium-based Systems (KB2506212)
- Security Update for Windows Server 2008 R2 x64 Edition (KB2506212)
- Security Update for Windows Server 2008 x64 Edition (KB2506223)
- Security Update for Windows Server 2008 (KB2506223)
- Security Update for Windows Server 2003 (KB2508429)
- Security Update for Windows Vista for x64-based Systems (KB2509553)
- Security Update for Windows Embedded Standard 7 for x64-based Systems (KB2506223)
- Security Update for Windows Vista for x64-based Systems (KB2511455)
- Security Update for Windows 7 for x64-based Systems (KB2511455)
- Security Update for Microsoft Office 2007 System (KB2509488)
- Security Update for Windows Server 2008 (KB2506212)
- Security Update for Windows Server 2008 for Itanium-based Systems (KB2506212)
- Security Update for Windows Vista for x64-based Systems (KB2506212)
- Security Update for IIS FTP 7.5 for Vista for x64-based Systems (KB2489256)
- Security Update for Windows XP (KB2506212)
- Security Update for Windows Server 2003 (KB2506212)
- Security Update for Windows Server 2008 x64 Edition (KB2506212)
- Security Update for Microsoft Office Excel Viewer (KB2466158)
- Security Update for Windows Embedded Standard 7 for x64-based Systems (KB2506212)
- Security Update for Microsoft Office 2003 (KB2509503)
- Security Update for Windows XP x64 Edition (KB2506212)
- Security Update for Windows Vista (KB2506212)
- Security Update for Windows Embedded Standard 7 (KB2506212)
- Security Update for Windows 7 for x64-based Systems (KB2506212)
- Security Update for IIS FTP 7.5 For Vista (KB2489256)
- Security Update for Windows 7 (KB2506212)
- Security Update for Windows Server 2003 x64 Edition (KB2506212)
- Security Update for Windows Server 2003 for Itanium-based Systems (KB2506212)
- Security Update for Windows Server 2008 R2 for Itanium-based Systems (KB2506212)
- Security Update for Windows Server 2008 R2 x64 Edition (KB2506212)
- Security Update for Windows Server 2008 x64 Edition (KB2506223)
- Security Update for Windows Server 2008 (KB2506223)
- Security Update for Windows Server 2003 (KB2508429)
- Security Update for Windows Vista for x64-based Systems (KB2509553)
- Security Update for Windows Embedded Standard 7 for x64-based Systems (KB2506223)
- Security Update for Windows Vista for x64-based Systems (KB2511455)
- Security Update for Windows 7 for x64-based Systems (KB2511455)
Here part 2 of today's Microsoft security updates:
- Security Update for Windows Server 2003 (KB2510531)
- Security Update for Windows Server 2003 for Itanium-based Systems (KB2510587)
- Security Update for Windows XP x64 Edition (KB2510587)
- Security Update for Windows Server 2008 for Itanium-based Systems (KB2510581)
- Security Update for Microsoft Excel 2002 (KB2466169)
- Security Update for Windows XP x64 Edition (KB2503658)
- Security Update for Windows Server 2003 (KB2506223)
- Security Update for Windows Server 2003 x64 Edition (KB2510531)
- Security Update for Windows Server 2003 x64 Edition (KB2510581)
- Security Update for Windows Server 2003 (KB2510587)
- Security Update for Windows XP x64 Edition (KB2510531)
- Security Update for Windows Server 2003 for Itanium-based Systems (KB2506223)
- Security Update for Windows Vista (KB2510581)
- Security Update for Windows Embedded Standard 7 (KB2503658)
- Security Update for Windows Embedded Standard 7 for x64-based Systems (KB2510531)
- Security Update for Windows 7 for x64-based Systems (KB2510531)
- Security Update for Windows Server 2003 (KB2510581)
- Security Update for Windows XP (KB2510531)
- Security Update for Windows XP (KB2510581)
- Security Update for Windows XP x64 Edition (KB2510581)
- Security Update for Windows Server 2003 x64 Edition (KB2510587)
- Security Update for Windows Server 2008 R2 x64 Edition (KB2503658)
- Security Update for Windows Server 2008 (KB2510531)
- Security Update for Windows Server 2008 x64 Edition (KB2510531)
- Security Update for Windows 7 (KB2510531)
- Security Update for Windows Server 2008 x64 Edition (KB2510581)
- Security Update for Windows Embedded Standard 7 for x64-based Systems (KB2503658)
- Security Update for the 2007 Microsoft Office System (KB2466156)
- Security Update for Windows Vista (KB2510531)
- Security Update for Windows Server 2008 R2 x64 Edition (KB2510531)
- Security Update for Windows Vista for x64-based Systems (KB2510581)
- Security Update for Windows Vista (KB2506223)
- Security Update for Windows Vista for x64-based Systems (KB2510531)
- Security Update for Windows Server 2008 (KB2510581)
- Security Update for Microsoft Excel 2010 (KB2466146), 64-Bit Edition
- Security Update for Windows Server 2003 x64 Edition (KB2506223)
- Security Update for Windows Embedded Standard 7 (KB2510531)
- Security Update for Windows Server 2008 R2 for Itanium-based Systems (KB2510531)
- Security Update for Windows Server 2003 for Itanium-based Systems (KB2510581)
- Security Update for Windows Server 2008 (KB2503658)
- Security Update for Windows XP (KB2503658)
- Security Update for Windows Server 2003 for Itanium-based Systems (KB2503658)
- Security Update for Windows Embedded Standard 7 (KB2507618)
- Security Update for Windows 7 for x64-based Systems (KB2503658)
- Security Update for Windows Server 2008 x64 Edition (KB2503658)
- Security Update for Microsoft Office Excel 2003 (KB2502786)
- Security Update for Windows XP x64 Edition (KB2507618)
- Security Update for Windows Server 2003 (KB2510531)
- Security Update for Windows Server 2003 for Itanium-based Systems (KB2510587)
- Security Update for Windows XP x64 Edition (KB2510587)
- Security Update for Windows Server 2008 for Itanium-based Systems (KB2510581)
- Security Update for Microsoft Excel 2002 (KB2466169)
- Security Update for Windows XP x64 Edition (KB2503658)
- Security Update for Windows Server 2003 (KB2506223)
- Security Update for Windows Server 2003 x64 Edition (KB2510531)
- Security Update for Windows Server 2003 x64 Edition (KB2510581)
- Security Update for Windows Server 2003 (KB2510587)
- Security Update for Windows XP x64 Edition (KB2510531)
- Security Update for Windows Server 2003 for Itanium-based Systems (KB2506223)
- Security Update for Windows Vista (KB2510581)
- Security Update for Windows Embedded Standard 7 (KB2503658)
- Security Update for Windows Embedded Standard 7 for x64-based Systems (KB2510531)
- Security Update for Windows 7 for x64-based Systems (KB2510531)
- Security Update for Windows Server 2003 (KB2510581)
- Security Update for Windows XP (KB2510531)
- Security Update for Windows XP (KB2510581)
- Security Update for Windows XP x64 Edition (KB2510581)
- Security Update for Windows Server 2003 x64 Edition (KB2510587)
- Security Update for Windows Server 2008 R2 x64 Edition (KB2503658)
- Security Update for Windows Server 2008 (KB2510531)
- Security Update for Windows Server 2008 x64 Edition (KB2510531)
- Security Update for Windows 7 (KB2510531)
- Security Update for Windows Server 2008 x64 Edition (KB2510581)
- Security Update for Windows Embedded Standard 7 for x64-based Systems (KB2503658)
- Security Update for the 2007 Microsoft Office System (KB2466156)
- Security Update for Windows Vista (KB2510531)
- Security Update for Windows Server 2008 R2 x64 Edition (KB2510531)
- Security Update for Windows Vista for x64-based Systems (KB2510581)
- Security Update for Windows Vista (KB2506223)
- Security Update for Windows Vista for x64-based Systems (KB2510531)
- Security Update for Windows Server 2008 (KB2510581)
- Security Update for Microsoft Excel 2010 (KB2466146), 64-Bit Edition
- Security Update for Windows Server 2003 x64 Edition (KB2506223)
- Security Update for Windows Embedded Standard 7 (KB2510531)
- Security Update for Windows Server 2008 R2 for Itanium-based Systems (KB2510531)
- Security Update for Windows Server 2003 for Itanium-based Systems (KB2510581)
- Security Update for Windows Server 2008 (KB2503658)
- Security Update for Windows XP (KB2503658)
- Security Update for Windows Server 2003 for Itanium-based Systems (KB2503658)
- Security Update for Windows Embedded Standard 7 (KB2507618)
- Security Update for Windows 7 for x64-based Systems (KB2503658)
- Security Update for Windows Server 2008 x64 Edition (KB2503658)
- Security Update for Microsoft Office Excel 2003 (KB2502786)
- Security Update for Windows XP x64 Edition (KB2507618)
No patch is yet available against threat targeting government workers that uses malicious Flash inserted into Microsoft Word documents.
Microsoft just released the first part of today's security updates:
- Cumulative Security Update for Internet Explorer 8 in Windows Vista x64 Edition (KB2497640)
- Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 R2 x64 Edition (KB2497640)
- Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 (KB2497640)
- Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 x64 Edition (KB2497640)
- Cumulative Security Update for Internet Explorer 8 for Windows XP x64 Edition (KB2497640)
- Cumulative Security Update for Internet Explorer 8 in Windows Vista (KB2497640)
- Cumulative Security Update for Internet Explorer 8 for Windows XP (KB2497640)
- Cumulative Security Update for Internet Explorer for Windows Server 2003 x64 Edition (KB2497640)
- Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 R2 for Itanium-based Systems (KB2497640)
- Cumulative Security Update for Internet Explorer 7 in Windows Server 2008 x64 Edition (KB2497640)
- Cumulative Security Update for Internet Explorer for Windows XP x64 Edition (KB2497640)
- Cumulative Security Update for Internet Explorer 7 in Windows Vista x64 Edition (KB2497640)
- Cumulative Security Update for Internet Explorer 8 in Windows 7 x64 Edition (KB2497640)
- Cumulative Security Update for Internet Explorer 8 in Windows Vista x64 Edition (KB2497640)
- Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 R2 x64 Edition (KB2497640)
- Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 (KB2497640)
- Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 x64 Edition (KB2497640)
- Cumulative Security Update for Internet Explorer 8 for Windows XP x64 Edition (KB2497640)
- Cumulative Security Update for Internet Explorer 8 in Windows Vista (KB2497640)
- Cumulative Security Update for Internet Explorer 8 for Windows XP (KB2497640)
- Cumulative Security Update for Internet Explorer for Windows Server 2003 x64 Edition (KB2497640)
- Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 R2 for Itanium-based Systems (KB2497640)
- Cumulative Security Update for Internet Explorer 7 in Windows Server 2008 x64 Edition (KB2497640)
- Cumulative Security Update for Internet Explorer for Windows XP x64 Edition (KB2497640)
- Cumulative Security Update for Internet Explorer 7 in Windows Vista x64 Edition (KB2497640)
- Cumulative Security Update for Internet Explorer 8 in Windows 7 x64 Edition (KB2497640)
Microsoft published the Microsoft Security Bulletin Advance Notification for April 2011
Hackers have broken into The Hartford insurance company and installed password-stealing programs on several of the company's Windows servers.
There were more than 286 million new malware threats last year and the number of measured web-based attacks per day increased by 93pc compared to 2009, according to Symantec's annual Norton Internet Security Threat Report.
Howtogeek posted a guide about removing Win 7 Anti-Spyware 2011
IObit Malware Fighter 2.0 Beta has been released