Text 19329, 86 rader
Skriven 2006-07-07 15:12:00 av George Vandervort (1:382/8)
  Kommentar till text 19321 av Charles Scaglione (1:123/789.0)
Ärende: security?
=================
Hello Charles!

Friday July 07 2006 14:47, Charles Scaglione wrote to JEAN PARROT:

 CS> On Fri, 7 Jul 2006 10:14:00 -0400, "JEAN PARROT -> CHARLES SCAGLIONE"
 CS> <1:123/140> wrote:
 CS>
 CS> Hi Jean:
 CS>
 JP>>         I might be wrong but I feel that the security is due as
 JP>> for   the Mac, to the ignorance of the malwarers as the "targets"
 JP>> are so   few and not worth their attention. If you connect to the
 JP>> Web you   are a target.
 CS>
 CS> No doubt the big target for malware and other nasties are Windows
 CS> users.  I suspect as the Mac continues to grow in popularity the bad
 CS> boys will begin to set their sights there.  For now at least, Mac OS X
 CS> and Linux users are fairly safe.
 CS>
 CS> Regards.
 CS>
 CS> -+- Forte Agent 3.3/32.846
 CS>  + Origin:  (1:123/789.0)



=== Cut ===

Microsoft will release seven security patches next Tuesday. Four will fix holes
in Windows, while three patch flaws in Office. Both groups of patches address
critical flaws, Microsoft's most severe rating. The patches for Office are
expected to fix issues that were reported last month.



http://www.networkworld.com/news/2006/070606-july-to-be-another-big.html


Security conference at Carnegie-Mellon focuses on usability

Four of the updates will fix bugs in Windows, while another three will address
flaws in Microsoft Office, Microsoft said Thursday in a bulletin on its Web
site. Both sets of patches will address critical flaws, which attackers could
exploit to run unauthorized code on a PC without any user action.

The patches will be released on July 11 as part of Microsoft's regularly
scheduled monthly security updates. Microsoft's advance note on the updates can
be found here.

The new software will likely fix a number of publicly reported vulnerabilities
in Office, some of which concern Excel, said Gunter Ollmann, director of
Internet Security Systems' X-Force threat analysis service.

Last month, Microsoft confirmed that it was investigating three issues that
relate to Office, following reports that hackers had launched a targeted
attack, against an unnamed government contractor, that took advantage of a bug
in its Excel spreadsheet software.

Two of the bugs could be used to compromise a PC, but they would first require
user action like opening a malicious document and clicking on hyperlinks. The
third appears to be less critical, but it could be used to run an unauthorized
ActiveX control, Microsoft said.

On Thursday another bug was added to the mix with security vendor Secunia
warning of a flaw affecting Asian language versions of Excel. As with the other
bugs, victims would need to be tricked into doing a little work before
compromising their systems, but if this were to happen, attackers could run
their malicious software on the PC, Secunia said.

More details on this latest flaw can be found here.

The seven patches may keep system administrators busy next week, but not as
busy as they were in June. Last month Microsoft released 12 security updates.



=== Cut ===


Regards,
George Vandervort

... the Beatles said it best, Obla-Dee, Obla-Daa, Life Goes On...

--- FMail/Win32 1.60
 * Origin: Bill Gates does my Windows (FidoNet 1:382/8)