Tageszusammenfassung - Mittwoch 15-04-2015

End-of-Shift report

Timeframe: Dienstag 14-04-2015 18:00 − Mittwoch 15-04-2015 18:00 Handler: Alexander Riepl Co-Handler: n/a

Adobe Security Bulletins Posted

The following Security Bulletins have been posted today: APSB15-06: Security updates available for Adobe Flash Player APSB15-07: Security update: hotfixes available for ColdFusion APSB15-08: Security bulletin available ..

https://blogs.adobe.com/psirt/?p=1190


MSRT April: Unskal, Saluchtra, Dexter and IeEnablerCby

This month we added four new malware families to the Malicious Software Removal Tool: Win32/Saluchtra, Win32/Dexter, Win32/Unskal and Win32/IeEnablerCby, further protecting customers against malicious activity. IeEnablerCby is ..

http://blogs.technet.com/b/mmpc/archive/2015/04/14/msrt-april-unskal-saluchtra-dexter-and-ieenablercby.aspx


Cisco TelePresence Collaboration Desk and Room Endpoints HTML Redirect Vulnerability

http://tools.cisco.com/security/center/viewAlert.x?alertId=38350


Cisco Web Security Appliance Cross-Site Scripting Vulnerability

http://tools.cisco.com/security/center/viewAlert.x?alertId=38351


Critical Patch Update - April 2015

This Critical Patch Update contains 98 new security fixes across the product families listed below. Please note that a blog entry summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is ..

http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html


Solaris Third Party Bulletin - April 2015

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html


Alte Xorg-Lücke bedroht haufenweise Drittsoftware

Die Lücke wurde bereits 2013 gestopft. Programme, die unter der Verwendung von Headern aus verwundbaren Versionen übersetzt wurden, sind allerdings nach wie vor angreifbar.

http://heise.de/-2606536


What the Ridiculous Fuck, D-Link?!

As mentioned in an update to my post on the HNAP bug in the DIR-890L, the same bug was reported earlier this year in the DIR-645, and a patch was released. D-Link ..

http://www.devttys0.com/2015/04/what-the-ridiculous-fuck-d-link/


Das Imperium schlägt zurück: Hacker-Gruppen ziehen gegeneinander zu Felde

Zwei Cyberspionage-Gruppen kamen sich in die Quere und attackierten sich wechselseitig. Sicherheitsforscher sehen hier einen neuen Trend, bei dem sich Hacker-Gruppen gezielt gegenseitig anfeinden.

http://heise.de/-2607493


Microsoft Security Bulletin Summary for April 2015

This bulletin summary lists security bulletins released for April 2015. For information about how to receive automatic notifications whenever Microsoft security bulletins are ..

https://technet.microsoft.com/library/security/ms15-apr