computersecuritynews

Sony hacked, held ransom, shut down – or not?

by

Is this a sign of things to come? Geek.com story  The Guardians of Peace (#GOP) hacked Sony  Pictures   Some specific details are on Reddit.com  When one person downloaded the stolen files and they reviewed the contents: Email addresses (including the Guardians of Peace email addresses apparently) Files of internal Sony Financial reports.   But … Read more

Microsoft issues out-of-band patch – but wait for now.

by

MS14-068 has been issued an out-of-band patch, as mentioned at Darkreading This is a Server patch – for Windows 2008, and Windows 2012 patch, this is a critical patch due to Kerberos authentication  needing this fix. SANS Dr. Ullrich has a statement: ” Ullrich says privilege escalation rarely gets the critical rating because the step of … Read more

Windows2003 security updates end Jul2015

by

US-CERT (Computer Emergeny Readyness Team)  reminds us that Support is ending soon(July 14, 2015). Microsoft says there are 24 million instances still running 2003 server. It is time to upgrade, for those of you still running Windows Server 2003, or at least put in a plan to replace the system with a 2012 machine by … Read more

Patch Tuesday Report November 2014

by

Patch Tuesday has passed, but the ramifications have not.  All over sysadmins are deciding what patches to apply and when.   Here is the report of what is happening: https://support.microsoft.com/kb/2992611    MS14-066 Schannel vulnerability is a bad remote code execution bug (must be patched) Internet Storm Center recommends this is a patch now kind of … Read more