Network flaw causes scary web error

Stupid title, but scary none-the-less......  Wonder how many people this happened to with G-Mail or perhaps bank accounts?

AP Exclusive: Network flaw causes scary Web error

Microsoft Internet Exploder 0-day Advisory

Here is the advisory for the Internet Exploder 0-day that was supposedly an vector of attack in the Google/Adobe/etc.. hack.

Microsoft Advisory 979352 - Remote Code Execution

Google Hacked

So there is a lot going on....

As of last week, Google is threatening to pull out of China after they determined the Chinese Government was behind hacks on them. This isn't a light move considering China is a huge market and accusing a nations government isn't done unless you are serious.

Original Google Blog post:
http://googleblog.blogspot.com/2010/01/new-approach-to-china.html


Some links on the Google hack:

Google Attack Part of Widespread Spying Effort

Hack of Google, Adobe Conducted Through Zero-Day IE Flaw

Google's internal spy system was Chinese hacker target

 Google on the defensive, vulnerable; China risks international and U.S. response

WIRED: 7-Eleven Hack From Russia Led to ATM Looting in New York

This isn't breaking news, but this is a pretty good article over at WIRED Threat Level.

Over $2 Million dollars is siphoned out of banks with the use of fake cards. And it all started from a hack of the 7-Eleven public facing website.

http://www.wired.com/threatlevel/2009/12/seven-eleven/

Bank firewalls cracked by cyberhackers

Ok, this is a stupid and misleading title. If you read the story, it is more about user accounts getting compromised via malware/etc....  It isn't about "cyberhackers" cracking bank firewall perimeters at all.

Here is the story with the stupid title:
Bank firewalls cracked by cyberhackers

It's MS Patch Tuesday!!

There's a critical Internet Explorer in this bunch you should get patched first....

See the Microsoft Security Bulletin Summary for December 2009

See the MSRC Exploitability Index and Deployment Priority

Happy Patching!!

How to build and maintain a tiered WSUS infrastructure

Here is a link to a great article over at Ars Technica about building and maintaining a tiered WSUS infrastructure. This really is a good thing to do to help eliminate the vulnerabilities where you can immediately and get the more difficult patching done when it is safe.

Ars Technica: How to build and maintain a tiered WSUS infrastructure