Browse Blog Posts by Tags

All Tags » Security (RSS)

MVP WordPress Blogs

Browse Blog Posts by Tags

Showing related tags and posts for the Blogs application. See all tags in the site

Want to play a game?

A game of picking passphrases? Okay here's the rules. Think of a passphrase that you would use. Say.... Mountain Dew comes in five flavors! Now send that to passstud@microsoft.com . In the latest installment of Passwords versus Passphrases by Dr. Jesper Johansson he asks: In this installment of the passwords...

Posted to THE OFFICIAL BLOG OF THE SBS DIVA by bradley on Sun, Oct 24 2004
Filed under: Filed under: Security
Man Ordered to Disable Spyware Programs

“CONCORD, N.H.—A federal judge has ordered a man known as the "Spam King" to disable so-called spyware programs that infiltrate people's computers, track their Internet use and flood them with pop-up advertising. “ “Wallace also is accused of trying to sell computer users $30...

Posted to Windows Shell/User (MSN & OneCare Too) by ericvogel on Sat, Oct 23 2004
Filed under: Filed under: Security, News
Okay I'm in a mood....

Fredly posted in the newsgroup asking a question about Watchgard versus ISA and where ever he crossposted to responded back that he had gotten another response that said this: “The best thing you can do is to get a firewall as Watchguard or another box and remove the ISA. Its never any good ide...

Posted to THE OFFICIAL BLOG OF THE SBS DIVA by bradley on Sat, Oct 23 2004
Filed under: Filed under: Security, Rants
Secure That Login

So I got a call from a client “we can't send email to company XYZ - the say we're sending SPAM or something, can you please find out what's going on?” (well, they didn't quite say it like that but I figured I should paraphrase a little for clarity). OK - I knew they weren't an open relay...

Posted to Looking at the world - from Down Under by calvert on Thu, Oct 21 2004
Filed under: Filed under: Security
Ever notice how people tell you things ...after....

My Dad calls. “I got this notification that my AOL account has been locked down to a terms of service violation and I have to go into the master account to re-open it” . Okay, Dad, no problem. It's probably an expired credit card or something, I'll take care of it as I'm the master account...

Posted to THE OFFICIAL BLOG OF THE SBS DIVA by bradley on Thu, Oct 21 2004
Filed under: Filed under: Security
I'm just going to stop using the Internet...maybe that's the proper answer?

So I'm reading that Internet Explorer, XP sp2 is screwed, Firefox and Mozilla have vulnerabilties and as the Incidents.org web page so aply puts it, “If you are reading this diary with any web browser other then 'lynx' or 'wget', you are likely vulnerable to one of the issues released today.”...

Posted to THE OFFICIAL BLOG OF THE SBS DIVA by bradley on Thu, Oct 21 2004
Filed under: Filed under: Security, Rants
GDI+ Enterprise Update Scanning Tool

This new tool was released today - 12 Oct 2004 It checks for MS04-028 They support both a SMS and standalone version For non SMS environments: http://support.microsoft.com/default.aspx?kbid=886988 For SMS: http://support.microsoft.com/kb/885920

Posted to Mark Dormer by Mark Dormer on Wed, Oct 13 2004
Filed under: Filed under: Security
Microsoft Security Bulletins October 2004

October Summary http://www.microsoft.com/technet/security/Bulletin/ms04-oct.mspx Critical Bulletins: MS04-032 - Security Update for microsoft Windows (840987) http://www.microsoft.com/technet/security/Bulletin/ms04-032.mspx MS04-033 - Vulnerability in microsoft Excel Could Allow Code Execution (886836...

Posted to Mark Dormer by Mark Dormer on Wed, Oct 13 2004
Filed under: Filed under: Security
Handicappin' the Patches

In the SBS newsgroup someone asked if they applied “all“ of the critical security bulletins because they were afraid of breaking something on their boxes. First off, realize that not only do these patches go through an internal testing process, but they go through external testing by OEMs...

Posted to THE OFFICIAL BLOG OF THE SBS DIVA by bradley on Tue, Oct 12 2004
Filed under: Filed under: Security
Gentlemen, Start your Patch Testing

October Summary http://www.microsoft.com/technet/security/Bulletin/ms04-oct.mspx Critical Bulletins: MS04-032 - Security Update for Microsoft Windows (840987) http://www.microsoft.com/technet/security/Bulletin/ms04-032.mspx MS04-033 - Vulnerability in Microsoft Excel Could Allow Code Execution (886836...

Posted to THE OFFICIAL BLOG OF THE SBS DIVA by bradley on Tue, Oct 12 2004
Filed under: Filed under: Security
Tomorrow is SECURITY BULLETIN DAY but I have a patch to apply tonight

Remember that tomorrow is Security Bulletin day, but in the meantime tonight I'll be ensuring that I'm all patched up for any ASP.net vulnerability. The patch to apply is located here and has been SBS approved. Microsoft has released an ASP.NET HTTP module that Web site administrators can apply to their...

Posted to THE OFFICIAL BLOG OF THE SBS DIVA by bradley on Mon, Oct 11 2004
Filed under: Filed under: Security
Mark Stevens and nine questions

Nine questions to ask when evaluating a security threat - Computerworld: http://computerworld.com/securitytopics/security/story/0,10801,96425,00.html 1. Does the new threat affect software we use? 2. Is this exploit an insider threat or from the outside? 3. How difficult is this exploit? 4. What is the...

Posted to THE OFFICIAL BLOG OF THE SBS DIVA by bradley on Sun, Oct 10 2004
Filed under: Filed under: Security
So? How do you patch?

If you didn't know already, I'm a nutcase on patch and patch management and found this section on patching in a Risk Management checklist. Good things to think about. * When applying a patch to any system vulnerability, do you have a process for verifying the integrity, and testing the proper functioning...

Posted to THE OFFICIAL BLOG OF THE SBS DIVA by bradley on Sat, Oct 9 2004
Filed under: Filed under: Security
Have you checked out the SANS top 20?

SANS Top 20 lists is a list of 10 Windows and 10 Unix vulnerabilities that need immediate action. I'd invite you to read through and compare last year to this years: SANS Top 20 for 2003 http://www.sans.org/top20/top20_oct03.php SANS Top 20 for 2004 http://www.sans.org/top20 Web servers Workstation Service...

Posted to THE OFFICIAL BLOG OF THE SBS DIVA by bradley on Fri, Oct 8 2004
Filed under: Filed under: Security, News
The real weapons of mass destruction

The press talk about “weapons of mass destruction” but you know what the biggest weapon of mass destruction we have around here? Windows XP with local admin and a keyboard. Get something inside your system, get a compromise in a forest, and can you clear out that network? Think in terms of...

Posted to THE OFFICIAL BLOG OF THE SBS DIVA by bradley on Fri, Oct 8 2004
Filed under: Filed under: Security
Microsoft ASP.NET ValidatePath Module

microsoft ASP.NET ValidatePath Module has been released. This is not the final security update. It is an interim fix that will protect your webserver from all known (by microsoft ) canoncalisation vulnerabilities

Posted to Mark Dormer by Mark Dormer on Fri, Oct 8 2004
Filed under: Filed under: Security
ASP.net vulnerability update - Remote Web Workplace

Just to let you know that Microsoft has updated the ASP.net security incident page with a program to help protect from this information disclosure vulnerability. The application called Validate Path Module has just been released and we've asked for clarification to see if us SBS 2003 boxes need this...

Posted to THE OFFICIAL BLOG OF THE SBS DIVA by bradley on Thu, Oct 7 2004
Filed under: Filed under: Security, News
What You Should Know About a Reported Vulnerability in Microsoft ASP.NET

Information is available here and will be updated when the security update is ready. There is a KB article addressing the issue as well. Programmatically check for canonicalization issues with ASP.NET Note: This vulnerability affects all versions of ASP.NET

Posted to Mark Dormer by Mark Dormer on Thu, Oct 7 2004
Filed under: Filed under: Security
MSN Messenger 7 Beta has been leaked, users must downgrade to MSN Messenger 6.2 Today

There is a Security. issue in MSN Messenger 7 that allows someone to run a program on your PC, do damage or take it over. Microsoft is releasing a block for the build of MSN Messenger 7. All users must downgrade to MSN Messenger 6.2. http://messenger.msn.com to download MSN Messenger 6.2.

Posted to Windows Shell/User (MSN & OneCare Too) by ericvogel on Wed, Oct 6 2004
Filed under: Filed under: Security, News, Products
What You Should Know About a Reported Vulnerability in Microsoft ASP.NET

I posted in the links the other day that Dana has posted about the ASP.NET vulnerability and today the following have been released: What You Should Know About a Reported Vulnerability in Microsoft ASP.NET http://support.microsoft.com/?kbid=887459 http://www.microsoft.com/security/incident/aspnet.mspx

Posted to THE OFFICIAL BLOG OF THE SBS DIVA by bradley on Wed, Oct 6 2004
Filed under: Filed under: Security, News

Page 162 of 171 (3410 items) « First ... < Previous 160 161 162 163 164 Next > ... Last »

Questions? Contact Susan at Susan-at-msmvps.com. Each post's copyright held by the original author. All rights reserved. Blog site is an independent site not sponsored by Microsoft.
Our servers would like to thank www.ownwebnow.com and www.exchangedefender.com. We wouldn't be here without the generosity of Vlad Mazek and his companies.

Powered by Community Server (Commercial Edition), by Telligent Systems

Theme based on the Paperclip Blog Theme included in Community Server.
Enhanced to a Site-Wide Theme by Interscape Technologies.