Falcon Worx » Network Management http://www.falconworx.com Wed, 30 Jun 2010 18:14:29 +0000 en hourly 1 http://wordpress.org/?v=3.0.1 Update: Microsoft Zero-Day ActiveX Vulnerability http://www.falconworx.com/update-microsoft-zero-day-activex-vulnerability/ http://www.falconworx.com/update-microsoft-zero-day-activex-vulnerability/#comments Fri, 10 Jul 2009 12:00:10 +0000 Alan http://www.falconworx.com/?p=442 Great News! We touched on the the high profile ActiveX vulnerability floating around in the wild in one of our previous posts and we have an update to share with everyone. Microsoft has officially stated that a patch WILL be released on Tuesday, July 14th! Make sure you have your automatic updates enabled, and more importantly allow the updates to install once they’re downloaded! To our managed services customers, the patches will be deployed across your networks as soon as the patches are available on Tuesday!

]]> http://www.falconworx.com/update-microsoft-zero-day-activex-vulnerability/feed/ 0 Microsoft Zero-Day ActiveX Vulnerability http://www.falconworx.com/zero-day-activex-vulnerability/ http://www.falconworx.com/zero-day-activex-vulnerability/#comments Wed, 08 Jul 2009 15:07:07 +0000 Alan http://www.falconworx.com/?p=405 There’s been a new type of attack in the wild that Microsoft’s Security Research & Defense blog describes as a “browse-and-get-owned attack vector”.  This only effects Windows XP machines and Server 2003 machines, but Microsoft recommends that users patch Windows Vista and Server 2008 to be safe.

So how does this attack occur and why should you be concerned? For this attack to be successful, the user simply has to open an email or browse to a website that opens a Video ActiveX Control. A malicious payload of the attacker’s choice is then downloaded onto the user’s system. This could be anything from annoying adware to password stealing programs that could allow an attacker to steal your online banking or Paypal credentials.

Currently, there’s no official patch for this exploit but there is a workaround that was just released. The workaround disables this particular ActiveX control in Internet Explorer. This will not degrade the end users experience because there is no legitimate need for this particular ActiveX control in Internet Explorer to begin with. The next round of patches are due from Microsoft on July 14th, which may or may not include a patch for this very serious security risk.

In the mean time, Falcon Worx recommends that all of our customers and friends visit the Microsoft’s Security and Defense blog to download the work around for this exploit. Go to the bottom of the page and click the “Fix It” image. Download the .MSI file, and just click “Next”. Yes, it’s really that simple!

Once again, this is an example of how Falcon Worx uses a proactive approach rather than a reactive approach. Why wait UNTIL you have a problem? Take care of the problem BEFORE it can occur, protecting your company from downtime! If you need assistance implementing this workaround, contact us to setup an appointment!


DOWNLOAD:

Microsoft Security Research & Defense Blog

]]> http://www.falconworx.com/zero-day-activex-vulnerability/feed/ 1