This week we learned of a critical Adobe Readerpatch which should be promptly applied, collapse of the Internet in Sweden,Google’s efforts to identify compromised web sites and that workplace computersecurity is not all that it should be.

The DHS Daily Open Source Infrastructure Report (DHS) coversthe publicly reported material for the preceding day(s) not previouslycovered.  This weekly summary provides a selection of those items ofgreatest significance to the InfoSec professional.

Should you not be aware of even one of the items discussedbelow it would be wise to familiarize yourself with it.  The headline above each entry will take youdirectly to the DHS report which presented the item for ten business days fromthe date of inclusion.  The Source linkwill take you to the original source cited by DHS.


No report.  A holiday in theU.S.


Haveyou applied the Adobe Reader patch?  Ifnot, perhaps you should.

37.October 8, The Register – (International) Critical Adobe Reader vulnunder ‘targeted’ attack. Attackers once again are targeting an unpatchedvulnerability in Adobe Reader that allows them to take complete control of auser’s computer, the software maker warned. Source: http://www.theregister.co.uk/2009/10..._under_attack/


Could this happen elsewhere?  Perhaps the U.S., U.K., etc.

44.October 13, Royal Pingdom – (International) Sweden’s internet brokenby DNS mistake. On October 12, a routine maintenance of Sweden’s top-leveldomain .se went seriously wrong, introducing an error that made DNS lookups forall .se domain names start failing.  Source:http://royal.pingdom.com/2009/10/13/...y-dns-mistake/


Are you and staff aware of the significance of Googlewarnings?

37. October 13, The Register –(International) Google shares malware samples with hacked site admins. Googlehas rolled out a feature that provides webmasters of compromised sites withsamples of malicious code and other detailed information to help them clean up.  Source: http://www.theregister.co.uk/2009/10..._notification/


Isyour workplace network secure?  Itappears that it might not be!

32.October 14, NewsFactor Network – (International) Cyberthieves findworkplace networks are easy pickings. Workplace networks have turned out tobe much more porous and difficult to defend than anyone ever anticipated.  Source: http://www.newsfactor.com/news/Workp...d=0320013Q7YBK

Note: The DHS only maintains the last ten days of their reports online.  Toobtain copies of earlier reports or complete summaries, go to:


 




More...