Current Activity Calendar
| April 28, 2009 - Current ActivityThis is an archived copy of current activity, if you would like to see the most recent version, please click here.Swine Flu Phishing Attacks and Email Scamsadded April 27, 2009 at 03:04 pm | updated April 28, 2009 at 04:42 pm
US-CERT is aware of public reports of email scams circulating related to the Swine Flu. The attacks arrive via an unsolicited email message typically containing a subject line related to the Swine Flu. These email messages may contain a link or an attachment. If users click on this link or open the attachment, they may be directed to a phishing website or exposed to malicious code.
Adobe Reader JavaScript Function Vulnerabilityadded April 28, 2009 at 12:34 pm
US-CERT is aware of public reports of a vulnerability affecting Adobe Reader. Reports indicate that this vulnerability is due to an error in the 'getAnnots()' JavaScript function. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code. Adobe has indicated via a blog entry that they are aware of the reports and are investigating the issue. Mozilla Foundation Releases Firefox 3.0.10added April 28, 2009 at 08:03 am
Mozilla Foundation has released Firefox 3.0.10 to address a memory corruption vulnerability. Exploitation of this vulnerability may result in a denial-of-service condition. Mozilla Foundation Releases Firefox 3.0.9added April 22, 2009 at 08:07 am
Mozilla Foundation has released Firefox 3.0.9 to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code, leverage additional attacks, or obtain sensitive information. The Mozilla Foundation security advisories indicate that many of these vulnerabilities also affect SeaMonkey and Thunderbird. Research In Motion Releases Advisory for BlackBerry PDF Distiller Vulnerabilitiesadded April 20, 2009 at 08:45 am
Research In Motion has released a security advisory to address multiple vulnerabilities in the PDF distiller of some released versions of the BlackBerry Attachment Service. The advisory lists the affected versions as BlackBerry Enterprise Server 4.1.3 through 4.1.6 and BlackBerry Professional Software 4.1.4. By convincing a user to view a specially crafted PDF file, an attacker may be able to execute arbitrary code on the system that hosts the Blackberry Attachment Service. Oracle Releases Critical Patch Update for April 2009added April 15, 2009 at 09:03 am
Oracle has released their Critical Patch Update for April 2009 to address 43 vulnerabilities across several products. This update contains the following security fixes:
US Tax Season and Phishing Scamsadded April 14, 2009 at 03:13 pm
In the past, US-CERT has received reports of an increased number of phishing scams that take advantage of the United States tax season. Due to the upcoming tax deadline, US-CERT would like to remind users to remain cautious when receiving unsolicited email that could be a potential phishing scam.
Microsoft Releases April Security Bulletin Summaryadded April 14, 2009 at 01:36 pm
Microsoft has released updates to address vulnerabilities in Microsoft Windows, Office, Internet Explorer, and Forefront Edge Security as part of the Microsoft Security Bulletin Summary for April 2009. These vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, or operate with escalated privileges. Conficker Worm Targets Microsoft Windows Systemsadded March 29, 2009 at 08:18 pm | updated April 9, 2009 at 06:44 pm
UPDATE: Researchers have discovered a new variant of the Conficker Worm on April 9, 2009. This variant updates earlier infections via its peer to peer (P2P) network as well as resuming scan-and-infect activity against unpatched systems. Public reporting indicates that this variant attempts to download additional malicious code onto victim systems, possibly including copies of the Waledac Trojan, a spam-oriented malicious application which has previously propagated only via bogus email messages containing malicious links.
Microsoft Releases Advance Notification for April Security Bulletinadded April 9, 2009 at 01:36 pm
Microsoft has issued a Security Bulletin Advance Notification indicating that the April release cycle will contain eight bulletins, five of which will have a severity rating of Critical. The notification states that these Critical bulletins are for Microsoft Windows, Office, and Internet Explorer. There will also be two Important bulletins for Microsoft Windows and Forefront Edge Security and one Moderate bulletin for Microsoft Windows. Release of these bulletins is scheduled for Tuesday, April 14. |
Information For
Sign Up
Reporting
DHS Threat Advisory
![Current National Threat Level is elevated](https://webarchive.library.unt.edu/eot2008/20090509090524im_/http://www.us-cert.gov/images2/current_new.gif)
The threat level in the airline sector is High or Orange. Read more