threats

Severity Rating: Critical Revision Note: V1.0 (May 10, 2016): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote code execution if a user opens a specially crafted document or visits a...

Really nice whitepaper on Cryptowall 4. It is pretty technical but still a good read. http://www.talosintel.com/files/publications_and_presentations/papers/CryptoWall4_WhitePaper.042016.pdf

Just a cool site that shows real-time attacks on honeypots deployed across the world. Link Removed

Original release date: November 10, 2015 Systems Affected Web servers that allow web shells Overview This alert describes the frequent use of web shells as an exploitation vector. Web shells can be used to obtain unauthorized access and can lead to wider network compromise. This alert...

Microsoft Threat Modeling Tool 2016 is a tool that helps in finding threats in the design phase of software projects. Link Removed

Severity Rating: Critical Revision Note: V1.0 (September 8, 2015): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Office. The most severe of the vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file...

Severity Rating: Important Revision Note: V1.0 (September 8, 2015): Bulletin published. Summary: This security update resolves vulnerabilities in Skype for Business Server and Microsoft Lync Server. The most severe of these vulnerabilities could allow elevation of privilege if a user clicks a...

Severity Rating: Critical Revision Note: V1.0 (August 18, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Internet Explorer. The vulnerability could allow remote code execution if a user views a specially crafted webpage using Internet Explorer. An attacker...

A security issue has been identified in a Microsoft software product that could affect your system. Link Removed

Severity Rating: Important Revision Note: V1.0 (August 11, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if an attacker forces an encrypted Secure Socket Layer (SSL) 2.0 session with a...

There was once a time when you might only expect to pick up some malicious software on certain types of websites. It seems now, almost anywhere might expose you to such things. I was doing something as innocent as looking for the radio frequencies used in Microwave ovens and ended up getting...

Link Removed

A security issue has been identified in a Microsoft software product that could affect your system. Link Removed

Today, as part of Update Tuesday, we released 8 security bulletins. We encourage customers to apply all of these updates. For more information about this month’s security updates, including the detailed view of the Exploitability Index (XI), visit the Microsoft Bulletin Summary webpage. If you...

Severity Rating: Important Revision Note: V1.0 (June 9, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an attacker places a malicious .dll file in a local directory on the machine or...

Microsoft Security Intelligence Report Volume 18 Regional Threat Assessment Link Removed

This is rather worrying, today Malwarebytes finds a Trojan called Sathurbot however, when the computer reboots after cleaning, it's back in the icons folder. also google isn't aware of it's existence: Can anyone shed any light on this, much appreciated.

Today, as part of Update Tuesday, we released 13 security bulletins. We encourage customers to apply all of these updates. For more information about this month’s security updates, including a detailed view of the Exploitability Index (XI), visit the Microsoft Bulletin Summary webpage. If you...

Original release date: April 29, 2015 Systems Affected Systems running unpatched software from Adobe, Microsoft, Oracle, or OpenSSL. Overview Cyber threat actors continue to exploit unpatched software to conduct attacks against critical infrastructure organizations. As many as 85 percent of...

Link Removed