Severity Rating: Critical
Revision Note: V1.0 (January 12, 2016): Bulletin published.
Summary: This security update resolves vulnerabilities in Microsoft Edge. The vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Microsoft Edge. An attacker who...
Original release date: December 03, 2015
Systems Affected
Microsoft Windows
Overview
Dorkbot is a botnet used to steal online payment, participate in distributed denial-of-service (DDoS) attacks, and deliver other types of malware to victims’ computers. According to Microsoft, the family of...
Original release date: October 13, 2015
Systems Affected
Microsoft Windows
Overview
Dridex, a peer-to-peer (P2P) bank credential-stealing malware, uses a decentralized network infrastructure of compromised personal computers and web servers to execute command-and-control (C2). The United...
The Skype Translator Preview was released December 2014 and has now been added to the Windows Store.. No need to sign up just download! :)
Ref:
http://blogs.skype.com/2015/05/12/skype-translator-preview-access-just-got-easier/
accessibility
application
communication
connect
download
feedback
globalization
impact
language
multilingual
nonprofit
preview
services
skype
technology
translator
user experience
windows 10
windows 8.1
windows store
Original release date: April 29, 2015
Systems Affected
Systems running unpatched software from Adobe, Microsoft, Oracle, or OpenSSL.
Overview
Cyber threat actors continue to exploit unpatched software to conduct attacks against critical infrastructure organizations. As many as 85 percent of...
Original release date: April 13, 2015
Systems Affected
Misconfigured Domain Name System (DNS) servers that respond to global Asynchronous Transfer Full Range (AXFR) requests.
Overview
A remote unauthenticated user may request a DNS zone transfer from a public-facing DNS server. If...
Original release date: April 09, 2015
Systems Affected
Microsoft Windows 95, 98, Me, 2000, XP, Vista, 7, and 8
Microsoft Server 2003, Server 2008, Server 2008 R2, and Server 2012
Overview
AAEH is a family of polymorphic downloaders created with the primary purpose of downloading other...
Original release date: February 20, 2015
Systems Affected
Lenovo consumer PCs that have Superfish VisualDiscovery installed and potentially others.
Overview
Superfish adware installed on some Lenovo PCs install a non-unique trusted root certification authority (CA) certificate, allowing an...
Original release date: November 19, 2014
Systems Affected
Microsoft Windows Vista, 7, 8, and 8.1
Microsoft Server 2003, Server 2008, Server 2008 R2, Server 2012, and Server 2012 R2
Overview
A remote escalation of privilege vulnerability exists in implementations of Kerberos Key Distribution...
administrator
attack
bulletin
cve
defense
domain controller
domain user
escalation
impact
kerberos
microsoft
privilege escalation
remote access
research
security
service tickets
systems affected
update
vulnerability
windows
Original release date: November 14, 2014
Systems Affected
Microsoft Windows Vista, 7, 8, 8.1, RT, and RT 8.1
Microsoft Server 2003, Server 2008, Server 2008 R2, Server 2012, and Server 2012 R2
Microsoft Windows XP and 2000 may also be affected.
Overview
A critical vulnerability in...
Original release date: November 14, 2014
Systems Affected
Microsoft Windows Vista, 7, 8, 8.1, RT, and RT 8.1
Microsoft Server 2003, Server 2008, Server 2008 R2, Server 2012, and Server 2012 R2
Overview
A vulnerability in Microsoft Windows Object Linking and Embedding (OLE) could allow...
administrator
arbitrary code
cve-2014-6332
execution
exploit
impact
internet explorer
memory
mitigation
ole
privileged access
remote code
safearrayredim
security
server 2003
server 2008
update
vbscript
vulnerability
windows
Original release date: September 25, 2014
Systems Affected
GNU Bash through 4.3.
Linux, BSD, and UNIX distributions including but not limited to:
CentOS 5 through 7
Debian
Mac OS X
Red Hat Enterprise Linux 4 through 7
Link Removed 10.04 LTS, 12.04 LTS, and 14.04 LTS
Overview
A critical...
apache
arbitrary code
attacks
bash
command execution
cve-2014-6271
debian
environment variables
impact
linux
mac os x
openssh
patch
red hat
remote execution
security
shellshock
solution
unix
vulnerability