Microsoft Security Bulletin Summary for April 2010

• e-mail scam announcing Fidel Castro's funeral ... and nasty malware to your computer., (Sun, May 23rd)
• SANS 2010 Digital Forensics Summit - APT Based Forensic Challenge, (Sat, May 22nd)
• MySQL 5.1.47 is now available - http://www.mysql.com/downloads/mysql/, (Fri, May 21st)
• 2010 Digital Forensics and Incident Response Summit, (Fri, May 21st)
• Is this version of PuTTY legit?, (Thu, May 20th)
• Bind patches are out, (Thu, May 20th)
• MS10-030 - Critical: Vulnerability in Outlook Express and Windows Mail Could Allow Remote Code Execution (978542) - Version:1.2
• MS10-031 - Critical: Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution (978213) - Version:1.1
• Microsoft Security Bulletin Summary for May 2010
• EFF paper about browser tracking, (Wed, May 19th)
• Canonical Display Driver Vulnerability, (Tue, May 18th)
• Microsoft Security Advisory (2028859): Vulnerability in Canonical Display Driver Could Allow Remote Code Execution
• Upcoming MySQL patch fixes several critical vulnerabilites, (Sun, May 16th)
• Symantec triggers on World of Warcraft update, (Sun, May 16th)
• Onboard Computers Subject to Attack?, (Sat, May 15th)
• Google Acknowledges Grabbing Personal Data, (Sat, May 15th)
• New tool from Mozilla for updating plug-ins, (Thu, May 13th)
• Layer 2 Security - Private VLANs (the Story Continues ...), (Wed, May 12th)
• Adobe Shockwave Update, (Wed, May 12th)
• .de TLD Outage, (Wed, May 12th)
• Microsoft Security Bulletin Summary for May 2010
• MS10-030 - Critical: Vulnerability in Outlook Express and Windows Mail Could Allow Remote Code Execution (978542) - Version:1.1
• MS10-031 - Critical: Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution (978213) - Version:1.0
• MS09-061 - Critical: Vulnerabilities in the Microsoft .NET Common Language Runtime Could Allow Remote Code Execution (974378) - Version:1.3
• Another round of WordPress Attacks, (Mon, May 10th)
• Wireshark DOCSIS Dissector DoS Vulnerability, (Sat, May 8th)
• Microsoft Patch Tuesday May 2010 Pre-Release, (Sat, May 8th)
• Security Awareness – Many Audiences, Many Messages (Part 2), (Fri, May 7th)
• non-latin TLD to be issued, (Thu, May 6th)
• Microsoft Security Bulletin Advance Notification for May 2010
• DNSSEC...not a bang but a whimper?, (Tue, May 4th)
• MS10-022 - Important: Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (981169) - Version:1.1
• Malicious iFrame on US Treasury and other sites?, (Tue, May 4th)
• SIFT review in the ISSA Toolsmith, (Tue, May 4th)
• Social engineering via paper mail, (Mon, May 3rd)
• Microsoft Security Bulletin Summary for March 2010
• MS10-016 - Important: Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (975561) - Version:2.0
• Zbot Social Engineering, (Sun, May 2nd)
• Happy May Day, (Sat, May 1st)
• The Importance of Small Files, (Fri, Apr 30th)
• Opera 10.53 Released to Address Security Issue, (Fri, Apr 30th)
• Who needs exploits when you have social engineering?, (Thu, Apr 29th)
• Microsoft Security Advisory (983438): Vulnerability in Microsoft SharePoint Could Allow Elevation of Privilege
• Opera 10.52 is released, most updates are for stability ==> http://www.opera.com/docs/changelogs/, (Wed, Apr 28th)
• Layer 2 Security - L2TPv3 for Disaster Recovery Sites, (Tue, Apr 27th)
• MS10-025 - Critical: Vulnerability in Microsoft Windows Media Services Could Allow Remote Code Execution (980858) - Version:3.0
• Microsoft Security Bulletin Summary for April 2010
• Snort 2.8.6 is released!, (Mon, Apr 26th)
• PulledPork v0.4.1 is released!, (Mon, Apr 26th)
• Honey, my laptop is acting funny again, (Sun, Apr 25th)
• Manual Verification of SSL/TLS Certificate Trust Chains using Openssl, (Sun, Apr 25th)
• Shadowserver botnet rules , (Fri, Apr 23rd)
• Data Redaction: You're Doing it Wrong, (Thu, Apr 22nd)
• If you had a larger network affected by the McAfee signature: We are interested to hear about your lessons learned. How long to fix it? What worked/didn't?, (Thu, Apr 22nd)
• Don't Be Fooled by Twitter Spam in Your Inbox, (Thu, Apr 22nd)
• MS10-025 - Critical: Vulnerability in Microsoft Windows Media Services Could Allow Remote Code Execution (980858) - Version:2.0
• Microsoft Security Bulletin Summary for April 2010
• Microsoft Security Bulletin Summary for April 2010
• MS10-029 - Moderate: Vulnerability in Windows ISATAP Component Could Allow Spoofing (978338) - Version:1.1
• MS10-019 - Critical: Vulnerabilities in Windows Could Allow Remote Code Execution (981210) - Version:1.3
• Are You Ready for a Transportation Collapse...?, (Tue, Apr 20th)
• Linked into scams?, (Mon, Apr 19th)
• Some NetSol hosted sites breached, (Sun, Apr 18th)
• MS10-021: Encountering A Failed WinXP Update, (Fri, Apr 16th)
• SIP Attacks on internet connected port5060 targeting Asterix servers, (Thu, Apr 15th)
• MS10-024 - Important: Vulnerabilities in Microsoft Exchange and Windows SMTP Service Could Allow Denial of Service (981832)
• MS10-019 - Critical: Vulnerabilities in Windows Could Allow Remote Code Execution (981210)
• MS10-024 - Important: Vulnerabilities in Microsoft Exchange and Windows SMTP Service Could Allow Denial of Service (981832) - Version:1.2
• Microsoft Security Advisory (973811): Extended Protection for Authentication - 4/14/2010
• MS10-019 - Critical: Vulnerabilities in Windows Could Allow Remote Code Execution (981210)
• Microsoft Security Bulletin Summary for April 2010
• MS10-025 - Critical: Vulnerability in Microsoft Windows Media Services Could Allow Remote Code Execution (980858)
• MS10-024 - Important: Vulnerabilities in Microsoft Exchange and Windows SMTP Service Could Allow Denial of Service (981832)
• Microsoft April 2010 Patch Tuesday, (Tue, Apr 13th)
• ClamAV 0.94 EOL Reminder, (Wed, Apr 14th)
• Microsoft Security Advisory (973811): Extended Protection for Authentication
• Microsoft Security Advisory (973811): Extended Protection for Authentication
• MS10-019 - Critical: Vulnerabilities in Windows Could Allow Remote Code Execution (981210)
• MS10-022 - Important: Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (981169)
• MS10-021 - Important: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (979683)
• MS10-020 - Critical: Vulnerabilities in SMB Client Could Allow Remote Code Execution (980232)
• MS10-023 - Important: Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution (981160)
• MS10-026 - Critical: Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution (977816)
• MS10-029 - Moderate: Vulnerability in Windows ISATAP Component Could Allow Spoofing (978338)
• MS10-028 - Important: Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (980094)
• Microsoft Security Bulletin Summary for April 2010
• MS10-027 - Critical: Vulnerability in Windows Media Player Could Allow Remote Code Execution (979402)
• MS10-025 - Critical: Vulnerability in Microsoft Windows Media Services Could Allow Remote Code Execution (980858)
• MS10-024 - Important: Vulnerabilities in Microsoft Exchange and Windows SMTP Service Could Allow Denial of Service (981832)
• MS10-021 - Important: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (979683) - Version:1.0
• Microsoft Security Advisory (981169): Vulnerability in VBScript Could Allow Remote Code Execution
• MS10-028 - Important: Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (980094) - Version:1.0
• MS10-020 - Critical: Vulnerabilities in SMB Client Could Allow Remote Code Execution (980232) - Version:1.0
• MS10-020 - Critical: Vulnerabilities in SMB Client Could Allow Remote Code Execution (980232) - Version:1.0
• MS10-026 - Critical: Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution (977816) - Version:1.0
• MS10-026 - Critical: Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution (977816) - Version:1.0
• MS10-023 - Important: Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution (981160) - Version:1.0
• MS10-023 - Important: Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution (981160) - Version:1.0
• MS10-027 - Critical: Vulnerability in Windows Media Player Could Allow Remote Code Execution (979402) - Version:1.0

Information mostly from: http://isc.sans.org