Microsoft ASP.Net OOB Patch

sorry to interrupt the flow of the Making the Web Work for You series, but this is somewhat important. Microsoft issued a patch last week for the outstanding .Net issue that could pose a significant threat to those of you with Internet facing IIS servers. Although all .Net systems are vulnerable, the affected IIS boxes …

Windows LNK vulnerability

There has been quite a bit of talk in security circles with regard to the latest 0day Windows LNK (short-cut) vulnerability, which has potential to be fairly serious.  There are partial fixes and workarounds but not a complete patch as yet.  The following links should help you get informed and cover your bases: http://www.sophos.com/products/free-tools/sophos-windows-shortcut-exploit-protection-tool.html http://www.sophos.com/security/topic/shortcut.html

Taking down the botnets

Botnet, by and large, are responsible either directly or indirectly, for most of the malicious activity on the internet.  When it’s spam, viruses, drive-by downloaded, rogueware, scareware or all-out DDoS attacks, these large, distributed networks of zombie computers are usually behind it. Recently a couple of the big ones have been taken down (or at …

IE Zero Day Exploit

If you have not heard, there is a very serious Internet Explorer Zero Day exploit making it’s rounds.  How serious?  Serious enough for Microsoft to put forth an Out-of-Band patch for it.  This is very much related to the Google China network compromise that has been in the news recently – this was one of …