Apple releases a Security Update
Apple has released Security Update 2005-005 to address multiple vulnerabilities affecting Mac OS X and Mac OS X Server. The most serious of these vulnerabilities may allow a remote attacker to execute arbitrary code. Impacts of other vulnerabilities addressed by the update include disclosure of information and denial of service.

Affected Operating Systems are MacOS X version 10.3.9 (Panther) and MacOS X Server version 10.3.9 .

More Info: Apple Security Update 2005-005
Posted Monday, May 16, 2005 by Support

Multiple vulnerabilities in Systems Running Microsoft Windows
From US-CERT: "Microsoft has reported two vulnerabilities in the way Internet Explorer processes certain types of images. Attackers may be able to gain control of your machine if you view a malicious image, visit a web page, or open an email message that contains these images.

Microsoft has also published an update to address the cross-domain vulnerability discussed in SA04-163A. This vulnerability may allow an attacker to alter a web site to point to a different location. If the attacker can convince you to visit the site, they may be able to gain control of your machine."

Please make sure that your operating system is up-to-date by visiting Windows Update.
Posted Monday, August 2, 2004 by Support

W32.Mydoom.M@mm Worm Warning
From US-CERT:

"A new variant of the MyDoom virus is spreading through email. In addition to infecting your computer and emailing itself to other machines, the virus may open a backdoor that could make your machine vulnerable to future attacks."

Trojan horse virus notice
Customers receive emails with attachments that appear to come from Primus with the following information at the end of the message:

+-+-+ X- Mail_Scanner: No Virus found
+-+-+ ISPNAME- AntiVirus Service
+-+-+ http://www.ispname.com

Where ISPNAME is the name of your Internet service provider.

This message is in fact a Trojan horse virus and should be deleted immediately. Do not execute the attached files. Primus’ virus checker would never insert text in the body of a message stating if it was virus scanned or not.
Posted Friday, June 4, 2004 by Support

W32/Sasser Worm
From CERT US:
US-CERT has received reports of a new worm, referred to as "W32/Sasser". This worm attempts to take advantage of a buffer overflow vulnerability in the Windows Local Security Authority Service Server (LSASS). The vulnerability allows a remote attacker to execute arbitrary code with SYSTEM privileges. More information on this vulnerability is available in Vulnerability Note VU#753212 and Microsoft Security Bulletin MS04-011.

The worm has been reported to propagate by scanning random IP addresses on port 445/tcp for vulnerable systems. When a vulnerable system is found, the worm will exploit this vulnerability, create a remote shell on port 9996/tcp, and start an FTP server on port 5554/tcp. The victim system will then connect back to the attacking system on port 5554/tcp to retrieve a copy of the worm. Systems infected by this worm may notice significant performance degradation.

US-CERT strongly encourages users to install anti-virus software, and keep its virus signature files up-to-date.
Posted Tuesday, May 4, 2004 by Support