* Patches from Debian, Ubuntu, Mandriva, others * Top 10 viruses reported in January * Dolphins' Web sites hacked in advance of Super Bowl, and other interesting reading
Today’s bug patches and security alerts:
Vista hole opens door to ‘shout hacking’
This has to be one of the more bizarre exploits of all time:
The honeymoon ended early for Microsoft’s Vista operating system, after word spread Wednesday about a flaw that could allow remote attackers to take advantage of the new operating system’s speech recognition feature. InfoWorld, 02/01/07.
**********
New security update available for Drupal content management system
According to the Drupal advisory, “Previews on comments were not passed through normal form validation routines, enabling users with the ‘post comments’ permission and access to more than one input filter to execute arbitrary code. By default, anonymous and authenticated users have access to only one input format.”
**********
Debian, Ubuntu patch GTK flaw
A denial-of-service flaw has been found in the GTK+ graphical user interface library. Both Debian and Ubuntu have released updates.
**********
Four new updates from Mandriva:
kdelibs (cross scripting attack)
**********
Top 10 viruses reported in January, according to Sophos:
1. Dorf (46.1%)
3. Mytob (9.8%)
5. Zafi (3.6%)
8. Bagle (2.5%)
9. Nyxem (1.0%)
10. Wukill (0.8%)
**********
From the interesting reading department:
Dolphins’ Web sites hacked in advance of Super Bowl
The Web sites of Dolphin Stadium and the Miami Dolphins, host to Sunday’s Super Bowl football game have been hacked, and malicious code on those sites have been attempting to infect PCs for at least a week, security experts said Friday. IDG News Service, 02/02/07.
Kasperskys on cybercrime: Don’t blame the Russian mafia and why we need anti-anti-anti virus software
Russian security professionals Eugene and Natalya Kaspersky dropped by Network World this week en route from Moscow to the RSA Conference in California. In a wide-ranging interview with Features Editor Neal Weinberg, the Kaspersky Lab duo discussed the Russian mafia, the latest in hacker tricks and their view that the bad guys are winning. Network World, 02/01/07.
Fiberlink adds zero-day threat protection service
Security add-on offers a cost-effective way to keep mobile users’ laptops safe, Fiberlink says. Network World, 02/01/07.
