 |
Microsoft Security Bulletin - Microsoft regularly announces vulnerabilities and patches on its software, components and services. Please refer to the Microsoft Security Bulletin site for the latest information. |
| |
|
 |
Fraud email scams and phishing is a social engineering technique used to fool email user that pretends to be from a company or bank like eBay, CITIBANK, OCBC etc. and asks the victims to enter details of account data to a fake websites. Therefore, tricking the victims into thinking that they are logging to a real website. Fraudsters will steal identity and personal information to gain access to victim's accounts or commit crimes using victim's persona.
What are the tell-tale signs and the tricks used in a scam? What are the tips to protect oneself? Read more on an advisory to spot a scam from SINGCERT. |
|
|
|
|
Software misconfiguration is one of the most common reasons for security breaches. You can use the MBSA to detect common configuration errors on Windows 2000, XP, Server 2003, VISTA or Server 2008 either on 32 bits or 64 bits machines to determine whether critical security updates are missing.
The tool will perform verification of the password strength and the host-base firewalling on the Windows OS. Download MBSA 2.1 tool to assess your 32 bits computer's security health if the following software is installed.
- MIcrosoft Windows 2000,XP, 2003, VISTA & 2008
- Microsoft Office XP, 2002, 2003 and 2007
- Microsoft Exchange 2000, 2003 and 2007
- Microsoft SQL Server 2000 SP4 & SQL Server 2005
For security assessment on 64 bits machine, use MBSA 2.1[64bit] tool.
Read detail information on supported product and components and FAQ for information on its usage.
For the following legacy product support. Microsoft has endorsed vulnerability assessment tool from Shavlik. Download NetChksetup5.9.0.145.exe to assess vulnerability on the following installed software.
- Microsoft ISA Server 2000, ISA Server 2004
- Microsoft FrontPage Server Extensions 2000/2002
- Microsoft Visual Studio .Net 2002/2003
- Microsoft Office 2000
- Microsoft Exchange 5.0 and 5.5
- Microsoft SQL Server 7.0 and SQL Server 2000 with Service Pack 3a (SP3a)
- Microsoft Content Management Server 2001 and Content Management Server 2002
- Outlook 2003 with Business Contact Manager
- SharePoint Team Services 2002 (STS)
- Windows SharePoint Services (WSS)
|
| |
|
 |
Have you turn on the Windows Firewall or ICF that come with Windows XP and Vista to protect against illegal intrusion from the virus infected computers or hackers? Read more for an understanding of the Windows host base Firewall and the need for Anti-Virus software and Spyware. |
| |
|
 |
No Anti-Virus software to identify, thwart and eliminate computer viruses, spyware and other malicious software on your Windows XP/Vista or Windows 7? Download the Microsoft Security Essentials Anti-Virus or AVG Anti-Virus to protect your system.
How do you recognize and avoid Spyware? Read the security tips to remain vigilant. |
| |
|
|
|
Click web-based Trend Micro on-line scan to verify your system is free from viruses, worms,Trojans and spyware.
Alternatively, use Microsoft Windows Live safety scanner to perform security scan and on-demand PC health. |
| |
|
 |
Microsoft Malicious Software Remover (version 3.0 covers all known variants as of 13th Oct 2009)
Suspect that your PC has been infected? This Microsoft tool checks your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove the infection if it is found. For Windows XP/Me users please disable your System Restore before use. |
| |
|
 |
Alternatively, you may also download and run the McAfee Stinger  to check your PC for viruses (version 10.0.1.624 covers all known variants as of 7th Aug 2009). |
|
|
|
Subscribe Now Get first-hand updates on Virus Alerts from CITS by e-mail. If you're running Windows OS, you may wish to sign up for Microsoft Security Update newsletter as well |
| [Back to Top] |
|
Windows Security Updates
|
 |
Windows Security Update (12 Aug 2009) - Microsoft announce vulnerabilities on Remote Desktop connection, Microsoft Office Web components, WINS, Windows Media File Processing, Microsoft Active Templete Library, Workstation service, Message Queuing, ASP.NET & Telnet service. The vulnerabilities allow remote code execution and deniel of service on the computers. Refer to the Microsoft Security Web site for detail information. |
|
|
|
Windows Security Update (31 Mar 2009) - Security watchdog has issued a warning to take precautions against a fast-mutating malicious computer program that will strike on Wednesday 1st April 2009. The Conficker or Downadup worm infect Microsoft Windows system from a thumb drive, a network share or via the network if a computer is not install with the Microsoft MS08-067 patch. Read detail from Microsoft.
Block access to the security sites such as Microsoft, Symantec, Mcafee, f-secure.
Disable service such as Microsoft Windows update and Windows Defender, Background Intelligent Transfer Service
Accounts may be locked out
May flood the network with connections
Access to security related sites are block. Windows update service and Windows Defender disabled.
Traffic on port 445 on non-Directory Service
No access to Admin Shares
Presence of unusual file permission on the System32 folder or directory after executing the Dir /ah on the command prompt.
Who are at risk?
-
Have not installed the latest security updates from Microsoft and no antivirus software
-
If you have file-sharing turned on, the Conficker worm could allow remote code execution and take control of your computer for malicious purposes
How to remove Conficker worm?
|
|
|
|
Windows Security Update (16 June 2008) - Microsoft announce vulnerabilities on Bluetooth stack, IE, DirectX, WINS, ActiveDirectory, PGM and ActiveX kill bits that affect Windows 2K, XP, 2003, VISTA and 2008. The vulnerabilities allow remote code execution and deniel of service on the computers. Refer to the Microsoft Security Web site for detail information. |
|
|
|
Windows Security Update (11 Mar 2008) - Microsoft release updates for vulnerabilities on Windows Office, Office Web component, Excel and Outlook that will allow remote code execution. Refer to the Microsoft Security Web site for detail information. |
|
|
|
Windows Security Update (14 Feb 2008) - Microsoft announce vulnerabilities whose exploitation could allow the propagation of an Internet worm without user action or allow an attacker complete control of the affected system such as install programs, view, change or delete data or create new accounts with full user rights. Read more.
- Exploitation through vulnerabilities in the WebDAV Mini-Redirector, Object Linking and Embedding (OLE) Automation, Microsoft Word, Internet Explorer and Publisher file on a vulnerable Microsoft Office Publisher
- Opening a specially crafted Microsoft Office file with a malformed object
- Vulnerability on Active Directory and Application mode on Windows server and on Windows Transmission Control Protocol/Internet Protocol or TCP/IP on VISTA
- Reported vulnerability with IIS 5.1-6.0 with ASP web pages on Windows XP and 2003
Microsoft Works File Converter allow remote code execution on an affected version of Microsoft Office, Microsoft Works, or Microsoft Works Suite. |
|
|
|
Windows Security Update (8 Jan 2008) -Vulnerabilities on Microsoft OS and the release of updates on
- Windows Transmission Control Protocol/Internet Protocol or TCP/IP which could allow remote code execution. An attacker could then install programs, view, change, or delete data or create new accounts with full user rights.
- Windows Local Security Authority Subsystem Service (LSASS). Similarly, the vulnerability could also allow an attacker to run arbitrary code with elevated privileges thus taking control of the affected system such as installing programs, view, change, or delete data; or create new accounts with full user rights.
The above issues affect Windows XP, 2000, 2003 & VISTA. Refer to the Microsoft Security Web site for detail information. |
|
|
|
Windows Security Update (12 Dec 2007) - Microsoft release updates for vulnerabilities on Windows DirectX, DirectShow, Media Format Runtime & IE. Besides, vulnerabilities were also identified on the Windows Operating System Server Message Block Version2(SMBv2), Windows Message Queuing Service, Windows kernel and with MacroVision driver affecting Windows XP, 2000, 2003 & VISTA. Refer to the Microsoft Security Web site for detail information. |
|
|
|
Windows Security Update (13 Nov 2007) - Vulnerabilities in Windows URI Handling could allow remote code execution on Windows XP & 2003 server. Spoofing vulnerability was also reported on Windows DNS server affecting Windows 2000 & 2003. Please refer to the Microsoft Security Web site for detail information. |
|
|
|
Windows Security Update (16 Oct 2007) - Vulnerabilities on Microsoft Kodak Image viewer, Outlook Express & Windows Mail, Internet Explorer, Microsoft Word, Remote Procedure Call(RPC), Windows Share Point Services 3.0 and Office SharePoint Server 2007 on the Windows XP, Windows 2000, Windows 2003 & VISTA. Please refer to the Microsoft Security Web site for detail information. |
|
|
|
Windows Security Update (6th Sep 2007) - Vulnerabilities reported for Microsoft Agent, Crystal Reports for Visual Studio, Windows Services for UNIX 3.0 & 3.5, Subsystem for UNIX-based Applications & MSN Messenger on Windows XP, Windows 2000, Windows 2003 & VISTA. Please refer to the Microsoft Security Web site for detail information. |
| |
|
|
Windows Security Update (14 Aug 2007) - Vulnerabilities reported for Microsoft XML Core Services, OLE Automation, Microsoft Excel, Internet Explorer, GDI, Vector Markup Language, Windows Media Player, Windows Gadgets & Virtual PC and Server on Windows XP, Windows 2000, Windows 2003 & VISTA. Please refer to the Microsoft Security Web site for detail information. |
| |
|
|
Windows Security Update (11 July 2007) - Released security updates for Microsoft Excel, Windows Active Directory, .NET Framework, Office Publisher, IIS and Windows VISTA Firewall. Please refer to the Microsoft Security Web site for detail information. |
| |
|
|
Windows Security Update (7 June 2007) - Microsoft has released security updates for IE, Windows API, Outlook Express, Visio 2002 SP2/2003 SP2 and for Microsoft VISTA for the month of June 2007. Information about these updates and which software is affected is also available on the Microsoft.com Security Web site. |
| |
|
|
Windows Security Update (9 May 2007) - Microsoft has released several security updates that addresses newly discovered issues in Microsoft Office, Word, Excel and IE etc. in May 2007. Information about these updates and which software is affected is also available on the Microsoft.com Security Web site. |
| |
|
|
Windows Security Update (11 Apr 2007) - Microsoft has released several security updates that address newly discovered issues in Microsoft Windows in April 2007. Information about these updates and which software is affected is also available on the Microsoft.com Security Web site. |
| |
|
|
Windows Security Update (12 Feb 2007) - Microsoft has released several security updates that address newly discovered issues in Microsoft Windows in February 2007. Information about these updates and which software is affected is also available on the Microsoft.com Security Web site. |
| [Back to Top] |