This vulnerability (CVE-2010-0440) could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. Cisco has released patches to address the vulnerability as well as workaround to mitigate this risk. The Cisco alert is available here.
The following versions are vulnerable:
- Cisco Secure Desktop versions prior to 3.5

- Cisco ASA appliances are vulnerable only if the Cisco Secure Desktop feature has been enabled

- Cisco ASA appliance versions prior to 8.2(1), 8.1(2.7), and 8.0(5) are vulnerable

———–
Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot org

View full post on SANS Internet Storm Center, InfoCON: green

Most consumers reuse banking passwords


>> Advertisement <<

Can you answer the ERP quiz?

These 10 questions determine if your
Enterprise RP rollout gets an A+.

http://www.findtechinfo.com/as/acs?pl=781&ca=909

View full post on SecurityFocus News

Product Description
NAV MAC 10.0/NPF MAC 3.0 CD RETAIL BUNDLE… More >>

Norton Antivirus 10.0 / Norton Personal Firewall 3.0 Bundle

• Premium protection against viruses spyware Trojans worms rootkits bots and more
• Detects vulnerabilities in applications
• Built for fast and optimal PC performance
• Scans all web sites for malicious software
• Phishing and identity theft protection

Product Description
Kaspersky Anti-Virus 2010 offers the most trusted virus and spyware protection with the essential protection you need to protect against Internet threats. When you buy Kaspersky, you get more than just a box of software… More >>

Kaspersky Anti-Virus 2010 5-User

Who gets mail?  We all do.

Mail arrives from a variety of public sector sources such as the court system inviting you to jury duty or county assessor providing you with the annual assessment and tax bill.  You may also receive in your mail box your credit card statements, and personal correspondence.  Perhaps your medical service provider or insurer mails to you an explanation of benefits.  Merchants send you opportunities to appreciate their services.  Similarly, we all have e-mail addresses; some of us have more than one.  Our use of these addresses may be identical to that of our physical mail box.  Sadly, the mail, both physical and electronic, is also used by the criminal world to perpetrate fraud.

Ask yourself this question:  When mail is processed, arrives or is dispatched, where and how does this occur? Simple enough?  Let’s discuss.

View full post on Security