Aviation Phishing Scams

Mar. 23rd, 2017 20:27
[syndicated profile] us_cert_current_feed

Posted by US-CERT

Original release date: March 23, 2017

US-CERT has received reports of email-based phishing campaigns targeting airline consumers. Systems infected through phishing campaigns act as an entry point for attackers to gain access to sensitive business or personal information.

US-CERT encourages users and administrators to review an airline Security Advisory and US-CERT's Security Tip ST04-014 for more information on phishing attacks.


This product is provided subject to this Notification and this Privacy & Use policy.


[syndicated profile] us_cert_current_feed

Posted by US-CERT

Original release date: March 22, 2017

The Network Time Foundation's NTP Project has has released version ntp-4.2.8p10 to address multiple vulnerabilities in ntpd. Exploitation of some of these vulnerabilities may allow a remote attacker to cause a denial-of-service condition.

US-CERT encourages users and administrators to review the NTP Security Notice Page for vulnerability and mitigation details.


This product is provided subject to this Notification and this Privacy & Use policy.


Cisco Releases Security Updates

Mar. 21st, 2017 15:57
[syndicated profile] us_cert_current_feed

Posted by US-CERT

Original release date: March 21, 2017

Cisco has released security updates to address vulnerabilities in its IOS and IOS XE Software. Exploitation of one of these vulnerabilities could allow a remote attacker to cause a denial of service condition.

Users and administrators are encouraged to review the following Cisco Security Advisories and apply the necessary updates:


This product is provided subject to this Notification and this Privacy & Use policy.


[syndicated profile] mobileread_feed

Posted by WT Sharpe

Help us select the book that the MobileRead Book Club will read for April, 2017.

The nominations will run through midnight EST March 26 or until 10 books have made the list. The poll will then be posted and will remain open for five days.

The book selection category for April is: Award Winners.

In order for a book to be included in the poll it needs THREE NOMINATIONS (original nomination, a second and a third).

How Does This Work?

The Mobile Read Book Club (MRBC) is an informal club that requires nothing of you. Each month a book is selected by polling. On the last week of that month a discussion thread is started for the book. If you want to participate feel free. There is no need to "join" or sign up. All are welcome.

How Does a Book Get Selected?

Each book that is nominated will be listed in a poll at the end of the nomination period. The book that polls the most votes will be the official selection.

How Many Nominations Can I Make?

Each participant has 3 nominations. You can nominate a new book for consideration or nominate (second, third) one that has already been nominated by another person.

How Do I Nominate a Book?

Please just post a message with your nomination. If you are the FIRST to nominate a book, please try to provide an abstract to the book so others may consider their level of interest.

How Do I Know What Has Been Nominated?

Just follow the thread. This message will be updated with the status of the nominations as often as I can. If one is missed, please just post a message with a multi-quote of the 3 nominations and it will be added to the list ASAP.

When is the Poll?

The poll thread will open at the end of the nomination period, or once there have been 10 books with 3 nominations each. At that time a link to the initial poll thread will be posted here and this thread will be closed.

The floor is open to nominations. Please comment if you discover a nomination is not available as an ebook in your area.

Official choices with three nominations each:

(1) A Cold Day for Murder by Dana Stabenow
Goodreads | Amazon US / Author's Website / Audible / Kobo US
Print Length: 173 pages
Spoiler: <input ... >
A 1993 Edgar Award winner.

From Goodreads:

Somewhere in the hinterlands of Alaska, among the millions of sprawling acres that comprise “The Park,” a young National Park Ranger has gone missing. When the detective sent after him also vanishes, the Anchorage DA’s department must turn to their reluctant former investigator, Kate Shugak. Shugak knows The Park because she’s of The Park, an Aleut who left her home village of Niniltna to pursue education, a career, and the righting of wrongs. Kate’s search for the missing men will take her from self-imposed exile back to a life she’d left behind, and face-to-face with people and problems she'd hoped never to confront again.


(2) Three Cheers for Me by Donald Jack
Goodreads | Amazon US / Kobo US
Print Length: 256 pages
Spoiler: <input ... >
Stephen Leacock Award winner.

From Goodreads:

With his disturbingly horse-like face and a pious distaste for strong drink and bad language, young Bartholomew Bandy doesn’t seem cut out for life in the armed services, as we meet him at the start of the First World War.

Yet he not only survives the dangers and squalor of the infantry trenches, he positively thrives in the Royal Flying Corps, revealing a surprising aptitude for splitarsing Sopwith Camels and shooting down the Hun. He even manages to get the girl.

Through it all he never loses his greatest ability – to open his mouth and put his foot in it.

Donald Jack’s blackly humorous Bandy memoirs are classics of their kind. Against an unshrinkingly depicted backdrop of war and its horrors, his anti-hero’s adventures are both gripping and shockingly funny.


(3) My Real Children by Jo Walton
Goodreads
Print Length: 320 pages
Spoiler: <input ... >
My Real Children is a 2014 Tiptree Winner.

It's 2015, and Patricia Cowan is very old. "Confused today," read the notes clipped to the end of her bed. She forgets things she should know--what year it is, major events in the lives of her children. But she remembers things that don't seem possible. She remembers marrying Mark and having four children. And she remembers not marrying Mark and raising three children with Bee instead. She remembers the bomb that killed President Kennedy in 1963, and she remembers Kennedy in 1964, declining to run again after the nuclear exchange that took out Miami and Kiev.

Her childhood, her years at Oxford during the Second World War--those were solid things. But after that, did she marry Mark or not? Did her friends all call her Trish, or Pat? Had she been a housewife who escaped a terrible marriage after her children were grown, or a successful travel writer with homes in Britain and Italy? And the moon outside her window: does it host a benign research station, or a command post bristling with nuclear missiles?

Two lives, two worlds, two versions of modern history; each with their loves and losses, their sorrows and triumphs. Jo Walton's My Real Children is the tale of both of Patricia Cowan's lives... and of how every life means the entire world.


(4) The Light of Day by Eric Amble
Goodreads
Print Length: 224 pages
Spoiler: <input ... >
1964 Edgar Award winner for Best Novel

From Goodreads:


The Light of Day was the basis for Jules Dassin’s classic film, Topkapi.

When Arthur Abdel Simpson first spots Harper in the Athens airport, he recognizes him as a tourist unfamiliar with city and in need of a private driver. In other words, the perfect mark for Simpson’s brand of entrepreneurship. But Harper proves to be more the spider than the fly when he catches Simpson riffling his wallet for traveler’s checks. Soon Simpson finds himself blackmailed into driving a suspicious car across the Turkish border. Then, when he is caught again, this time by the police, he faces a choice: cooperate with the Turks and spy on his erstwhile colleagues or end up in one of Turkey’s notorious prisons. The authorities suspect an attempted coup, but Harper and his gang of international jewel thieves have planned something both less sinister and much, much more audacious.


(5) Still Life by Louise Penny
Goodreads
Print Length: 377 pages
Spoiler: <input ... >
Awards:
1. Anthony Awards Best First Novel
2. Barry Awards Best First Novel
3. Dilys Awards Best Book
4. New Blood" Dagger award
5. Arthur Ellis award

As the early morning mist clears on Thanksgiving Sunday, the homes of Three Pines come to life - all except one…

From Goodreads:

To locals, the village is a safe haven. So they are bewildered when a well-loved member of the community is found lying dead in the maple woods. Surely it was an accident - a hunter's arrow gone astray. Who could want Jane Neal dead?

In a long and distinguished career with the Sûreté du Quebec, Chief Inspector Armand Gamache has learned to look for snakes in Eden. Gamache knows something dark is lurking behind the white picket fences, and if he watches closely enough, Three Pines will begin to give up its secrets…

Winner of the New Blood Dagger in Britain and the Arthur Ellis Award in Canada for best first crime novel. As well as the Dilys award, for the book the Independent Mystery Booksellers Association most enjoyed selling in 2006. STILL LIFE was also named one of the Kirkus Reviews Top Ten mysteries of 2006.

Runner-up for the CWA Debut Dagger Award, 2004
'The Canadian Louise Penny was Very Highly Commended for her entry STILL LIFE, which missed taking the Debut Dagger by only a whisker.'

What if condos weren't a scam?

Mar. 19th, 2017 17:56
[syndicated profile] dubious_prospects_feed

Posted by Graydon

Condos as a form of land tenure got invented in New York State to get around a new, strict, builder liability law.  If the builder of record is the condo corporation, all the liability falls on whoever bought in, rather than the actual builder, and so the actual builder -- on this scale, developer -- is safe from the legal consequences of their shoddy practices.

Note that the people "buying a

My fellow Canadians...

Mar. 18th, 2017 15:35
[syndicated profile] dubious_prospects_feed

Posted by Graydon

The next Canadian federal election is in 2019.

Just exactly when solar got less expensive than coal as a means of generating electricity I'll leave to future historians; it might have been 2016.  It might be this year, or 2018.  It really isn't going to be later than that.  The Chinese are investing very large sums -- equivalent to hundreds of billions in USD -- and good for them.  They need to
[syndicated profile] us_cert_current_feed

Posted by US-CERT

Original release date: March 17, 2017

The Internal Revenue Service (IRS) has released an alert warning of phishing email scams targeting last-minute tax filers. The alert describes common features of these cyber crimes and includes recommendations to protect against them: strengthen passwords, recognize phishing attempts, and forward suspicious emails to phishing@irs.gov.

Tax payers and tax professionals are encouraged to review the IRS alert and US-CERT's advice on Avoiding Social Engineering and Phishing Attacks.


This product is provided subject to this Notification and this Privacy & Use policy.


Mozilla Releases Security Updates

Mar. 18th, 2017 00:54
[syndicated profile] us_cert_current_feed

Posted by US-CERT

Original release date: March 17, 2017

Mozilla has released security updates to address a vulnerability in Firefox and Firefox ESR. Exploitation of this vulnerability may allow an attacker to take control of an affected system.

US-CERT encourages users and administrators to review the Mozilla Security Advisory for Firefox and Firefox ESR and apply the necessary updates.


This product is provided subject to this Notification and this Privacy & Use policy.


[syndicated profile] us_cert_current_feed

Posted by US-CERT

Original release date: March 17, 2017

All software products have a lifecycle. After April 11, 2017, Microsoft is ending support for the Windows Vista operating system. After this date, this product will no longer receive:

  • Security updates,
  • Non-security hotfixes,
  • Free or paid assisted support options, or
  • Online technical content updates from Microsoft.

Computers running the Windows Vista operating system will continue to work even after support ends. However, using unsupported software may increase the risks of viruses and other security threats.

Users and administrators are encouraged to upgrade to a currently supported operating system. For more information, see Microsoft's Vista support and product lifecycle articles.

US-CERT does not endorse or support any particular product or vendor.


This product is provided subject to this Notification and this Privacy & Use policy.


Microsoft SMBv1 Vulnerability

Mar. 16th, 2017 22:12
[syndicated profile] us_cert_current_feed

Posted by US-CERT

Original release date: March 16, 2017

Microsoft has released a security update to address a vulnerability in implementations of Server Message Block 1.0 (SMBv1). Exploitation of this vulnerability could allow a remote attacker to take control of an affected system.

US-CERT encourages users and administrators to review Microsoft Security Bulletin MS17-010 and apply the update. For more information, see the Information Assurance Advisory and US-CERT's SMB Security Best Practices guidance.


This product is provided subject to this Notification and this Privacy & Use policy.


Cisco Releases Security Updates

Mar. 16th, 2017 00:26
[syndicated profile] us_cert_current_feed

Posted by US-CERT

Original release date: March 15, 2017

Cisco has released several updates to address vulnerabilities affecting multiple products. A remote attacker could exploit these vulnerabilities to take control of an affected system.

Users and administrators are encouraged to review the following Cisco Security Advisories and apply the necessary updates:


This product is provided subject to this Notification and this Privacy & Use policy.


Drupal Releases Security Update

Mar. 16th, 2017 00:21
[syndicated profile] us_cert_current_feed

Posted by US-CERT

Original release date: March 15, 2017

Drupal has released an advisory to address vulnerabilities in Drupal core 8.x versions prior to 8.2.7. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

US-CERT encourages users and administrators to review Drupal's Security Advisory and apply the necessary update.


This product is provided subject to this Notification and this Privacy & Use policy.


VMware Releases Security Updates

Mar. 14th, 2017 19:52
[syndicated profile] us_cert_current_feed

Posted by US-CERT

Original release date: March 14, 2017

VMware has released security updates to address a vulnerability in Workstation and Fusion. A remote attacker could exploit this vulnerability and take control of an affected system.

Users and administrators are encouraged to review VMware Security Advisory VMSA-2017-0005 and apply the necessary updates.


This product is provided subject to this Notification and this Privacy & Use policy.


Adobe Releases Security Updates

Mar. 14th, 2017 19:35
[syndicated profile] us_cert_current_feed

Posted by US-CERT

Original release date: March 14, 2017

Adobe has released security updates to address vulnerabilities in Adobe Flash Player and Shockwave Player. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.

US-CERT encourages users and administrators to review Adobe Security Bulletins APSB17-07 and APSB17-08 and apply the necessary updates.


This product is provided subject to this Notification and this Privacy & Use policy.


[syndicated profile] us_cert_current_feed

Posted by US-CERT

Original release date: March 14, 2017 | Last revised: March 15, 2017

Microsoft has released 18 updates to address vulnerabilities in Microsoft software. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of an affected system.

Users and administrators are encouraged to review Microsoft Security Bulletins MS17-006 through MS17-023 and apply the necessary updates.

 


This product is provided subject to this Notification and this Privacy & Use policy.


Profile

piranha: red origami crane (Default)
renaissance poisson

July 2015

S M T W T F S
   123 4
567891011
12131415161718
19202122232425
262728293031 

Most Popular Tags

Expand Cut Tags

No cut tags