According to Sophos, Yahoo! recently released a browser search plugin called Yahoo! Axis for Chrome, Firefox, Safari, and IE 9.
During this release, Yahoo! accidentally included the private key used to sign the packages inside the Chrome extension package. This means anyone who downloaded the package now has Yahoo!'s private signing key and could make their own copy of the plugin and insert malicious code.
As a safeguard, if you decide to use Yahoo! Axis, make sure you download the plugin only from Yahoo's official download site.
Warning: CaffeineSecurity dotcom is not mine!
Just a warning to everyone, there was a recent registration of CaffeineSecurity.com
This site is NOT me.
The domain was registered by proxy, so it's hard to tell who might actually own it.
This site is NOT me.
The domain was registered by proxy, so it's hard to tell who might actually own it.
Do you test your Antivirus updates before deployment?
If your system uses Avira Antivirus, you probably won't be reading this post today.
According to ZDnet, an Avira Antivirus update today crippled millions of computer systems.
This isn't the first time an Antivirus update has crippled Windows systems. Back in 2010 McAfee pushed out a DAT update which sent computers into endless reboot cycles.
What can you do to help protect your organization against these disasters? It's simple...test your software updates. Even antivirus definition updates can cause catastrophic failures across your enterprise...
And just in case something slips through the cracks...have a backup plan. Are you prepared for a worst case scenario where every active computer system in your organization is unusable? How do you keep your organization running? How do you recover from something that widespread in a timely manner, and restore normal business functionality? Keep these questions in mind, and as we always said in Boy Scouts..."Be Prepared."
According to ZDnet, an Avira Antivirus update today crippled millions of computer systems.
This isn't the first time an Antivirus update has crippled Windows systems. Back in 2010 McAfee pushed out a DAT update which sent computers into endless reboot cycles.
What can you do to help protect your organization against these disasters? It's simple...test your software updates. Even antivirus definition updates can cause catastrophic failures across your enterprise...
And just in case something slips through the cracks...have a backup plan. Are you prepared for a worst case scenario where every active computer system in your organization is unusable? How do you keep your organization running? How do you recover from something that widespread in a timely manner, and restore normal business functionality? Keep these questions in mind, and as we always said in Boy Scouts..."Be Prepared."
Subscribe to:
Posts (Atom)