Carpe Diem: Flaphead@Home

Just found this up on the Forefront blog http://blogs.technet.com/fss/archive/2008/08/11/forefront-for-exchange-sp1-rollup-3-has-been-released.aspx   Forefront for Exchange SP1 Rollup3 has been released.  The fixes that are included with in Forefront for Exchange SP1 Rollup3 are as follows. Prior to full publication of Forefront for ...

This makes an interesting read .. Found it up on the Security Vulnerability Research & Defense Blog Today we released MS08-039 which addressed several XSS vulnerabilities in Microsoft Exchange’s Outlook Web Access component.  While this is an update to be applied to the Exchange server, the clients who use OWA are the computers ...

So we have a KB, Download and a Security Bulletin ;-)  NOTE: This also affects Exchange 2007, but is included in RU3 for Exchange 2007 SP1 and RU7 for Exchange 2007 RTM Source: http://www.microsoft.com/downloads/details.aspx?FamilyID=e099c1d1-5af6-4d6c-b735-9599412b3131&DisplayLang=en This update addresses the Microsoft Exchange ...

Just an update from my previous blog. Computer Says no, well it actually still says Could not start the Microsoft Exchange Transport service on Local Computer. Error 1053: The service did not respond to the start or control request in a timely fashion. I have opened a case with Microsoft and will keep you updated 

Doh, looks like the an old antigen issue has crept in. Source: http://support.microsoft.com/kb/939365 Anyway, you should try an get this fix, as it's a FULL installation, all 30ish MB It gives you version 10.0.0701.0, which is later than rollup 1 Also looks like it might have fixed my issue with the Microsoft Exchange Transport service ...

This is another product I have been playing .. found two great things. First was this error my Hub Transport Server.  It looks very much like Forefront caused this .. don't know what or why, but still it's a bit scarey! This is my favorite.  In the Forefront Server Security administrator I have specified the following under Scanner ...

Interesting .. http://www.microsoft.com/technet/security/bulletin/ms07-026.mspxThis update resolves several newly discovered, privately reported vulnerabilities. Each vulnerability is documented in its own subsection in the Vulnerability Details section of this bulletin.An attacker who successfully exploited the most severe of these ...

ooops Source: http://www.theregister.co.uk/2007/03/14/apple_megapatch/ Apple has released a security update to its Mac OS X operating systems to plug multiple security holes. Bugs in third-party components have also been addressed by the security update. The availability of Mac OS X 10.4.9 and Security Update 2007-003 on Tuesday follows a ...

How cool is this for a bug. Dead easy to replicate and potentially very deadly! Basically it is possible to pass parameters toa pdf doc to do things to it.  Check out this link (http://www.disenchant.ch/blog/hacking-with-browser-plugins/34) Would seem it only affects Adobe Reader 6.x and 7.x. On  my vista machine it tells me of ...

Be afraid, very afraid Source: http://www.schneier.com/blog/archives/2006/12/realworld_passw.html and http://www.wired.com/news/columns/0,72300-0.html … The attack was pretty basic. The attackers created a fake MySpace login page, and collected login information when users thought they were accessing their own account on the ...

InterestingFor those of you with customers looking at ways of better monitoring Security issues and \ or Compliance auditing issues then there are a couple of Management Packs that may help with these challenges. The offerings are from a company called SecureVantage, however they will come with some associated cost. Please see the two links ...

http://www.microsoft.com/technet/windowsvista/security/guide.mspx The guide documents the major security-related countermeasures available in Windows Vista, the vulnerabilities that the countermeasures address, and the functionality considerations related to implementing them. Vulnerability, risk, and exposure analyses inform you of the ...

You have been warned Source: http://www.sophos.com/security/hoaxes/parcel_delivery.html The following chain letter has been distributed widely. The chain letter contains factual inaccuracies as a £15 telephone tariff does not exist. According to ICSTIS (The Independent Committee for the Supervision of Standards of Telephone ...

Looks like Windows Defender has RTMed Source: http://www.microsoft.com/downloads/details.aspx?FamilyId=435BFCE7-DA2B-4A6A-AFA4-F7F14E605A0D&displaylang=en Windows Defender is a free program that helps you stay productive by protecting your computer against pop-ups, slow performance and security threats caused by spyware and other ...

Ooops! Source: http://news.bbc.co.uk/1/hi/technology/6062074.stm 18 October 2006: Apple is warning that some video iPods are harbouring a Windows virus. In a statement on its website Apple said that a small number of video iPods sold after 12 September are carrying the RavMonE virus. The company said that, so far, it had seen ''less ...

Now this shows the power of Windows Powershell! Source: http://www.leeholmes.com/blog/PermaLink,guid,4033cc3a-98f3-4ee6-a846-c1831bd2dd11.aspx Humm, but I have having some “issues” with this, but you get the ideas!

Now this is a cool tool … Another one from Bruce Read the comments at the end Bruce’s post, they make very interesting reading! The original website is in french: http://www.secuobs.com/news/07062006-sstic_usbdumper.shtml but bablefish does a good job at ...

Check it out now Funk Soul Brother. source:  http://sapien.eponym.com/blog/_archives/2006/8/24/2262158.html Basically its search engine especially for looking for scripts .. it rocks! check it out: http://www.searchscripting.com

Bruce Schneier pointed me to this.  Check it out, it made me laugh … and cry Source: http://www.wired.com/news/politics/privacy/0,71622-0.htmlI quite like #7. Discovery of data on used hard drives for sale and #2. AT&T lets the NSA listen to all phone calls worries me!

This did make ma laugh.  These guys are part of the U.S. Department of Homeland Security.  http://www.tsa.gov/travelers/airtravel/prohibited/new-items.shtm The article talks about Prohibited Items items allowed on a plane.  This paragraph made me laugh We encourage everyone to pack gel-filled bras in their checked baggage. ...

Doh Source: http://vil.nai.com/vil/content/v_140292.htm MSH/Cibyz!p2p is a proof of concept worm written in Windows Powershell script. It attempts to spread via the popular peer to peer application KaZaa by dropping a copy of itself in its shared folders. Note: Windows Powershell is a command line shell and ...

Humm, so on Thursday it said this: http://www.rsasecurity.com/press_release.asp?doc_id=6976&id=1034 Bedford, MA, Thursday, June 29, 2006 — RSA Security Inc. (NASDAQ: RSAS) issued today the following statement: While it is our policy not to comment on rumors, this statement is made in response to a report appearing in today's New York ...

I have been asked this a few times recently and Greg found this link: http://www.microsoft.com/exchange/evaluation/bettertogether/BT_ISAFP1.mspx Better Together: Using ISA Server 2004 with Exchange Server 2003 Attacks against IT networks are on the rise and becoming increasingly complex. Traditional firewalls are often inadequate to protect ...

About time Source: http://www.microsoft.com/presspass/press/2006/jun06/06-06AntigenPR.mspx REDMOND, Wash. — June 6, 2006 — Microsoft Corp. today announced the release of Microsoft® Antigen e-mail security products — including Antigen for Exchange, Antigen for SMTP Gateways, Antigen Spam Manager and Antigen Enterprise ...

This is an interesting Hotfix for Exchange 2000/2003 that you should be aware off especially if you use Outlook Web Access (OWA)   http://support.microsoft.com/kb/911829   When you access Microsoft Outlook Web Access by using Microsoft Internet Explorer 6 or a later version of Internet Explorer, you experience one of the following ...

Watch out for this one! Source: http://www.sophos.com/pressoffice/news/articles/2006/05/yagnuul.html 8 May 2006: Experts at SophosLabs™, Sophos's global network of virus, spyware and spam analysis centers, have warned users about a new virus that infects Excel files under the camouflage of a fantasy football worksheet. ...

I really should stop reading this blog, it scares the daylights out of me … I suppose it like a good book! Source: http://www.schneier.com/blog/archives/2006/05/who_owns_your_c.html When technology serves its owners, it is liberating. When it is designed to serve others, over the owner's objection, it is oppressive. There's a battle ...

Microsoft is today (Tuesday, May 09, 2006) releasing the following security bulletins for newly discovered vulnerabilities: Moderate         MS06-018         Microsoft Windows         Denial of Service Critical ...

Now I have never, ever been a great fan of RFID chips in any form of personal ID.  Just imagine it, some nice person plants a bomb that will go off, only if your RFID enabled passport identifies you as say American or British, but lets other nationalities go past unharmed! Source: ...

Source: http://www.schneier.com/blog/archives/2006/04/computercontrol.html It's a really clever idea: bolts and latches that fasten and unfasten in response to remote computer commands.What Rudduck developed are fasteners analogous to locks in doors, only in this case messages are sent electronically to engage the parts to lock or unlock. A quick ...

Maybe it's an April fools joke, but lots of people are suggesting ideas.  Check it out! http://www.schneier.com/blog/archives/2006/04/announcing_movi.html

This is a bit scarey! Source: http://www.schneier.com/blog/archives/2006/03/the_architectur.html The British security service MI5 is warning business leaders that their offices are probably badly designed against terrorist bombs. The common modern office consists of large rooms without internal walls, which puts employees at greater risk ...

Interesting, Do you fancy applying for this?  Check out this link (http://212.140.220.27/ind/en/home/applying/iris/time_line.html)  BTW it didn’t work with my version of IE 7! Source: http://www.computing.co.uk/computing/news/2071427/uk-airports-live-iris-scans The UK's first biometric immigration controls will go live ...

Source: http://www.sendmail.com/company/advisory/March 22, 2006 Sendmail, Inc. has recently become aware of a security vulnerability in certain versions of sendmail Mail Transfer Agent (MTA) and UNIX and Linux products that contain it.  Sendmail was notified by security researchers at ISS that, under some specific timing conditions, this ...

Hummmm, I didn’t this had crept out! Source: http://www.microsoft.com/downloads/details.aspx?FamilyID=d22ec2b9-4cd3-4bb6-91ec-0829e5f84063&DisplayLang=en The ISA Server Best Practices Analyzer is a diagnostic tool that automatically performs specific tests on configuration data collected on the local ISA Server 2004 computer from ...

Source: http://isc.sans.org/diary.php?storyid=1184 Friday we started receiving reports of file deletion problems from admins using McAfee AV, scans that were using the 4715 DAT's issued Friday were incorrectly identifying many executables as as W95/CTX virus. Portions of the information submitted are excerpted below, and we thank all of the ...

You can run, but now you can’t hide!  What ever happened to privacy?  In London we have enough CCTV cameras to watch your every move, now they can track you in your car! Oh let me guess, it’s all down to tracking terrorism … do we really have that many terrorist in the UK that need a system this big? Source: ...

Source: http://news.bbc.co.uk/2/hi/technology/4755492.stm Computer viruses are the single biggest cause of security problems for UK businesses, a survey by the Department of Trade and Industry shows. The study found almost 50% of the biggest security breaches suffered by companies in the last two years were due to infection by malicious ...

Source: http://news.bbc.co.uk/2/hi/technology/4739432.stm Experts have uncovered a serious security hole in the way Apple software handles downloaded files. The flaw could give malicious attackers a back door into Mac computers if users visit carefully crafted websites and download booby-trapped files. Although no attackers were known to be ...

Title Who should read this bulletin Impact of vulnerability Maximum Severity Rating Recommendation Additional Comments Microsoft Security Bulletin MS06-004 Cumulative Security Update for Internet Explorer (910620) http://www.microsoft.com/technet/security/Bulletin/MS06-004.mspx Customers who use Microsoft ...

Two came out on the 10th Jan.  For a list of all the current security updates go here: http://www.microsoft.com/technet/security/current.aspx MS06-002: Vulnerability in Embedded Web Fonts Could Allow Remote Code Execution An attacker who successfully exploited this vulnerability could take control of an affected system. If a user is ...

Hummm Source: http://www.schneier.com/blog/archives/2005/09/national_intern.html The Minister of the Interior of Bavaria requested that the industry produces web content filtering on ''instructions on how to build a bomb.'' These pages, he claims, are ''a very dangerous security problem.'' He hopes filters like those for parental filtering ...

Doh! Source: http://www.eweek.com/article2/0,1895,1854724,00.asp Multimedia company Creative acknowledged that 3,700 of the company's Zen Neeon MP3 players that shipped from a company factory in late July contain a Windows worm. The 5GB Neeon digital audio players contain a copy of W32.Wullik.B, according to a statement posted on Creative ...

Shame :-| Source: http://news.bbc.co.uk/1/hi/technology/4189996.stm Two men, one in Morocco and one in Turkey, have been arrested over the unleashing of a computer worm that affected US firms earlier this month. Moroccan authorities detained Farid Essebar, 18, while Atilla Ekici, 21, was arrested by Turkish authorities on Thursday, the ...

Source: http://www.microsoft.com/presspass/press/2005/aug05/08-16zotob.mspx Editor's Note, August 17, 2005 -- The statement has been updated to include new information on Zotob and how Windows 2000 customers can protect themselves from the worm. REDMOND, Wash., August 16, 2005 -- Microsoft has made a no-cost, software-based cleaner tool ...

Source: http://www.f-secure.com/weblog/#00000613 An Austrian virus writer has published five simple viruses targeting Microsoft MSH in a virus writing magazine. These proof-of-concept viruses will never became a real-world problem, but the case is interesting historically, as these are the first viruses for a totally new platform. MSH, or ...

One to watch out for! Source: http://www.f-secure.com/weblog/#00000584 We've seen some copies of a fake Microsoft security bulletin. This bulletin is being spammed via email and it tries to con users into downloading a new Microsoft security update. Real bulletins don't link directly to downloadable binaries; instead they link to a ...

Still at beta 1, but the build had changed from 1.0.501 to 1.0.613 Source: http://www.microsoft.com/downloads/details.aspx?FamilyID=321cd7a2-6a57-4c57-a8bd-dbf62eda9671&DisplayLang=en Windows AntiSpyware (Beta) is a security technology that helps protect Windows users from spyware and other potentially unwanted software. Known spyware ...

Source: http://www.microsoft.com/presspass/features/2005/jun05/06-21nash.mspx REDMOND, Wash., June 21, 2005 — Enterprise customers looking to implement powerful and flexible security solutions will benefit from Microsoft's recent acquisition of Sybari Software Inc., which was completed today. Sybari's security products currently provide ...

This is just sooooo funny  and TRUE, that I just had to share it! Source: http://silverstr.ufies.org/blog/archives/000837.html

Make sure you read on know .. this is MI5 talking! Here are some snippets, but do read it.  Source: http://www.mi5.gov.uk/output/Page365.html Espionage has been described as the ''world's second oldest profession''. As stated in The Threats section of this website, many countries still make extensive use of espionage against the UK. ...

Oh wow, check this out! Source: http://news.com.com/Microsoft+meets+the+hackers/2009-1002_3-5747813.html?tag=nefd.lede REDMOND, Wash.--The random chatter of several hundred Microsoft engineers filled the cavernous executive briefing center recently at the company's sprawling campus outside Seattle. Within minutes after their meeting was ...

Source: http://www.microsoft.com/technet/security/bulletin/ms05-jun.mspx CRITCAL UPDATES:Microsoft Security Bulletin MS05-025: Cumulative Security Update for Internet Explorer (883939)Vulnerabilities exist in Internet Explorer, the most sever of these could allow an attacker to take complete control of an affected system. Microsoft Security ...

Source: http://www.microsoft.com/technet/security/bulletin/MS05-029.mspx <-READ THIS FIRST Download: http://www.microsoft.com/downloads/details.aspx?familyid=08435b77-9f3a-40f5-b13a-a7019cb1c244&displaylang=en We recommend that you install this update on all Microsoft Exchange 5.5 servers in your organization. Installation ...

What the hell :-| Source: http://management.silicon.com/government/0,39024677,39131099,00.htm Legislation that would require telephone companies and internet service providers (ISPs) to save information about customers' communications is set to proceed despite being rejected by the European parliament. The legislation's draft proposal ...

More toilet reading.  Only 53 pages of pdf  Source: http://www.microsoft.com/downloads/details.aspx?familyid=95a85136-f08f-4b20-942f-dc9ce56bcd1a&displaylang=en The Security Monitoring and Attack Detection Planning Guide is a practical support document for business and information technology professionals who are working to ...

Source: http://news.bbc.co.uk/1/hi/uk/4071708.stm A British man who allegedly hacked into US military and Nasa computer networks has been arrested, say Scotland Yard. Gary McKinnon, 39, of Wood Green, north London, faces extradition proceedings over claims he hacked into 53 military and Nasa computers in 2001 and 2002. The US government believe ...

Cool Source: http://www.sybari.com/portal/alias__Rainbow/lang__en-US/tabID__70003627/DesktopDefault.aspx The Sybari Antigen Management Pack for MOM 2005 is a powerful new module that enables Antigen for Microsoft Exchange, Antigen for SMTP Gateways, and Advanced Spam Manager to provide critical security management data to Microsoft ...

I must admit, your Tax Dollars are should be spent on more important things, but hey!?! Source: http://www.schneier.com/blog/archives/2005/06/dhs_enforces_co_1.html Why is the Department of Homeland Security involved in copyright issues? Agents shut down a popular Web site that allegedly had been distributing copyrighted music and movies, ...

What a load of !@#!?£''? Source: http://www.theregister.co.uk/2005/06/01/fbi_opposes_air_mobiles/ The FBI is objecting to plans to relax the current ban on the use of mobile phones on planes. In a joint submission with the Department of Homeland Security, the FBI says that unless carriers set up systems to allow law enforcement to wiretap ...

And the lessions is to watch what you open in email or download from a cd! Source: http://www.haaretz.com/hasen/spages/581819.html Dozens of leading companies and top private investigators were named yesterday as suspects in a massive industrial espionage investigation that local police have been conducting for the past six months. The companies ...

Source: http://www.microsoft.com/presspass/press/2005/may05/05-26MSNPostmasterPR.asp REDMOND, Wash. -- May 26, 2005 -- Microsoft Corp. today announced new MSN® Hotmail® tools and services designed to expand e-mail industry collaboration in fighting spam -- MSN Postmaster and Smart Network Data Services. These new services complement ongoing ...

This is a damm good read! Source: http://www.washingtonpost.com/wp-dyn/content/article/2005/05/19/AR2005051900711_pf.html The caper had all the necessary ingredients to spark a media firestorm -- a beautiful socialite-turned-reality TV star, embarrassing photographs and messages, and the personal contact information of several young music and ...

Ohh Err Misses! Source: http://www.microsoft.com/presspass/press/2005/may05/05-13WindowsOneCarePR.asp REDMOND, Wash. -- May 13, 2005 -- The dynamic nature of the Internet and technology can make the protection, maintenance and optimal performance of PCs a challenge for consumers. Keeping a PC ''healthy'' today can be daunting and ...

You have to read this it's just mad and excellent at the same time! Source: http://www.f-secure.com/weblog/#00000553 Couple of months ago there were rumours floating around that Bluetooth viruses could infect the on-board computers of some Lexus cars, or at least cause some visible effects on them. In February we published an official ...

These are good - 4 sets of PowerPoints Source: http://www.microsoft.com/downloads/details.aspx?familyid=a171f0e2-cfbe-47a8-8d84-fc8399ac1f6c&displaylang=en Presentations based on IT Security Training on 28th April 2005 Starting with an open and vulnerable system, this series of seminars will teach the key areas you need to know to ...

Hummmm Source: http://www.newscientist.com/article.ns?id=dn7326&feedId=online-news_rss20 DO YOU prefer your police officers to be armed with a gun or a good old-fashioned truncheon or night stick? Or perhaps something in between: say a radio-frequency stun weapon, or a semiconductor laser that can bring down a man from across the ...

This looks good! It's an add-in to the Exchange 2003 Intelliegent Message Filter Source: http://www.windeveloper.com/imftune/ Ability to setup granular email handling configurations - With IMF Tune each SPAM SCL rating can be configured with a unique set of options. Tight integration with MS Exchange Intelligent Message Filter - IMF Tune ...

Source: http://europe.f-secure.com/v-descs/googkle.shtml F-Secure staff has found a malicious website that utilizes a spelling error when typing the name of the popular search engine - 'Google.com'. If a user opens a malicious website, his/her computer gets hijacked - a lot of different malware gets automatically downloaded and installed: trojan ...

The world is going crazy! Source: http://www.schneier.com/blog/archives/2005/04/lighters_banned.html Lighters are now banned on U.S. commercial flights, but not matches. The Senators who proposed the bill point to Richard Reid, who unsuccessfully tried to light explosives on an airplane with matches. They were worried that a lighter might have ...

This is quite a good read Source: http://www.microsoft.com/issues/essays/2005/04-20phishing.asp Pretending to be someone else used to be a game for children and a job for actors. Today, it is the No. 1 subject of consumer complaints to the Federal Trade Commission. The complaints are about identity theft, including a rising wave ...

Looks interesting.  You need to register to see the webcast Source: http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?EventID=1032269128&EventCategory=5&culture=en-US&CountryCode=US In this webcast and learn how criminals use the Internet to infiltrate the security of your network. Learn about the underground ...