Contact Us | Updates

Tracking GhostNet: Investigating a Cyber Espionage Network

This report documents the GhostNet – a suspected cyber espionage network of over 1,295 infected computers in 103 countries, 30% of which are high-value targets, including ministries of foreign affairs, embassies, international organizations, news media, and NGOs. The capabilities of GhostNet are far-reaching. The report reveals that Tibetan computer systems were compromised giving attackers access [...]

Conficker Worm Targets Microsoft Windows Systems

US-CERT is aware of public reports indicating a widespread infection of the Conficker worm, which can infect a Microsoft Windows system from a thumb drive, a network share, or directly across the network if the host is not patched with MS08-067. The presence of a Conficker infection may be detected if a user is unable [...]

Microsoft Updates for Multiple Vulnerabilities

Source: US-CERT As part of the Microsoft Security Bulletin Summary for March 2009, Microsoft released updates to address vulnerabilities that affect Microsoft Windows and Windows Server. A remote, unauthenticated attacker could gain elevated privileges, poison the DNS cache, execute arbitrary code, or cause a vulnerable application to crash. Solution Microsoft has provided updates for these [...]

Active Exploitation of Microsoft Internet Explorer 7 Vulnerability

US-CERT is aware of a public report indicating active exploitation of a previously patched vulnerability in Microsoft Internet Explorer 7. This vulnerability was addressed in Microsoft Security Advisory MS09-002. Additional information is available in US-CERT Technical Cyber Security Alert TA09-041A. US-CERT encourages users to apply the update or workarounds as specified in Microsoft Security Advisory [...]

Microsoft Updates for Multiple Vulnerabilities

Systems Affected: * Microsoft Internet Explorer * Microsoft Office Visio * Microsoft Exchange and SQL Server Overview Microsoft has released updates that address vulnerabilities in Microsoft Windows and Windows Server. I. Description As part of the Microsoft Security Bulletin Summary for February 2009, Microsoft released updates to address vulnerabilities that affect Microsoft Windows, Internet Explorer, [...]

White House (.gov) Email Down Due to Microsoft

The new White House team found out there email systems were down for most of the day on Monday. Press Secretary Robert Gibbs mad the announcement of the technical difficulties at his 1:30 p.m. briefing. He apologized for the e-mail silence and blamed it on a Mircrosoft Outlook server. Both incoming and outgoing email were [...]

Microsoft Windows Does Not Disable AutoRun Properly

National Cyber Alert System Technical Cyber Security Alert TA09-020A Microsoft Windows Does Not Disable AutoRun Properly Source: US-CERT Systems Affected Microsoft Windows Overview Disabling AutoRun on Microsoft Windows systems can help prevent the spread of malicious code. However, Microsoft’s guidelines for disabling AutoRun are not fully effective, which could be considered a vulnerability. I. Description [...]

Microsoft Technical Cyber Security Alerts Multiple SMB Protocol Vulnerabilities

Original release date: January 13, 2009 Source: US-CERT Systems Affected Microsoft Windows 2000, XP, and Vista Microsoft Windows Server 2000, 2003, and 2008 Overview Microsoft has released updates that address vulnerabilities in Microsoft Windows and Windows Server. I. Description In their bulletin for January 2009, Microsoft released updates to address vulnerabilities in the Server Message [...]

Protect Your Computer From Microsoft

Microsoft Microsoft Security 4 steps to protect your computer Step 1. Keep your firewall turned on What is a firewall? A firewall helps protect your computer from hackers who might try to delete information, crash your computer, or even steal your passwords or credit card numbers. Make sure your firewall is always turned on. • [...]