threats

Today, as part of Update Tuesday, we released 11 security bulletins. We encourage customers to apply all of these updates. For more information about this month’s security updates, including the detailed view of the Exploitability Index (XI), visit the Microsoft Bulletin Summary webpage. If you...

Severity Rating: Important Revision Note: V1.0 (March 10, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow spoofing if an attacker who is logged on to a domain-joined system runs a specially crafted application...

Original release date: February 20, 2015 Systems Affected Lenovo consumer PCs that have Superfish VisualDiscovery installed and potentially others. Overview Superfish adware installed on some Lenovo PCs install a non-unique trusted root certification authority (CA) certificate, allowing an...

I've never downloaded InfoAxe but it keeps showing that it exists in my computer. I've quarantined and deleted everything but it keeps showing up again.. If I type flipora in the search bar in the start menu it's showing a registry file named cc_(numbers) <--Random numbers, but I forgot. How...

Severity Rating: Important Revision Note: V1.0 (January 13, 2015): V1.0 (January 13, 2015): Bulletin published. Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow security feature bypass by unintentionally relaxing the...

For years our customers have been in the trenches against cyberattacks in an increasingly complex digital landscape. We’ve been there with you, as have others. And we aren’t going anywhere. Forces often seek to undermine and disrupt technology and people, attempting to weaken the very devices...

Original release date: December 19, 2014 Systems Affected Microsoft Windows Overview US-CERT was recently notified by a trusted third party of cyber threat actors using a Server Message Block (SMB) Worm Tool to conduct cyber exploitation activities recently targeting a major entertainment...

Severity Rating: Critical Revision Note: V1.0 (August 12, 2014): Bulletin published. Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user opens a specially crafted Microsoft Office file that...

I've been using windows8.1 for 6 months now. Tonight I found this thing worry me much. under NETWORK icon in winodws file explorer, go down to computer name, profile name and the folder searches I found an icon named "search everyplaces" like folder or file or symbolic link, when I click on it...

Today, Microsoft is pleased to announce the private preview of Link Removed, a security and threat information exchange platform for analysts and researchers working in cybersecurity. Interflow uses industry specifications to create an automated, machine-readable feed of threat and security...

The news on anti-virus death is greatly exaggerated. The right way to look at it is that antivirus is not, and may never have been, a sufficient means by which to protect the user against attack. But, for most users, it's still an important front-line defense. One great advantage of Windows 8.1...

So I was looking through the Program Files (x86) file on my computer, and I stumble upon these strange "Surf and Keep" files. Link Removed Should I be worried? Are these viruses? Trojans? Adware? Should I delete them? Any help will be appreciated.

Hi When I booted my computer this morning this message box came up. I've never seen this before so I said no, and am running Malwarebytes. Link Removed The disturbing thing about this is that there is no identity as to what program is prompting this to display. Looking at View Certificate...

Severity Rating: Important Revision Note: V1.1 (December 16, 2013): Revised bulletin to announce a detection change to correct an offering issue for Windows RT (2839894). This is a detection change only. There were no changes to the update files. Customers who have successfully installed the...

Severity Rating: Important Revision Note: V1.0 (February 11, 2014): Bulletin published. Summary: This security update resolves a publicly disclosed vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker sends a large number of specially crafted IPv6...

Severity Rating: Critical Revision Note: V1.0 (February 11, 2014): Bulletin published. Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user views a specially crafted webpage using Internet...

Continue reading...

Link Removed Two problems, possibly a single issue from Webroot Secure AnyWhere; I don't think my computer is infested, but I could be wrong. First, a number of AutoRun.INF files I have authored keep vanishing. I have a large number of drives on my computer, and I have created AutoRun files to...

Something odd has been going on when watching Hulu videos that have an advertisement by Kay Jewelers, that I don't understand. Adobe Flash Player pops this dialog: I'm not quite certain the function of the two buttons, but I'm guessing that "Dismiss" means to abort something, and "Continue"...

For some reason, I just ran MBAM, even though it had only been a couple of days since I last ran it, and it found the malware shown in the screenshot: I don't know what 4 of them are about, but trojan.banker caught my eye right away. I had MBAM delete them and am now also running a full scan...