General Discussion

[Users resist updates and upgrades]

FYI...

Users resist updates and upgrades ...
- https://www.computerworld.com/s/article/9229477/Quarter_of_users_see_no_benefit_in_updating_software
July 23, 2012 - "... Users resist updates and upgrades, acknowledged the companies, which pointed to survey results Skype published today*. Those results showed that 25% of the respondents declined updates because they saw no benefit in doing so, while 26% noted that they didn't understand what the updates or upgrades were meant to accomplish. Four out of ten adults admitted that they do not upgrade software when they're first prompted, and of the 75% who said they received such prompts, half acknowledged that they needed to see an upgrade notification between three and five times before they downloaded and installed the new code..."
* http://blogs.skype.com/en/2012/07/intl_tech_upgrade_week.html
July 23, 2012

>> http://blogs.skype.com/en/assets_c/2012/07/skype_ugrade_poster2%20-%20FINAL-thumb-550x603-22851.jpg

  

[Blackhole malware attack spreading on Twitter]

FYI...

Blackhole malware attack spreading on Twitter ...
- http://atlas.arbor.net/briefs/
Severity: Elevated Severity
July 27, 2012
Another attack by the BlackHole exploit kit reminds us that patching is most important.
Analysis: If a user clicks on these links posted to various twitter feeds, they will be redirected to a Black Hole exploit kit website that will attempt to exploit vulnerabilities on their system that can be reached through the web browser. Unpatched Java is one of the most popular attack methods these days, however a batch of other issues in technologies such as Adobe Reader, Flash and various browsers are also part of the attack strategy. Robust patching for home and enterprise users will greatly reduce the pain of such exploit kits that are based on "drive-by" exploits. The enticement tactic is always going to change, but the intent is the same - to trick the user into clicking on something and getting infected.
Source: Outbreak: http://nakedsecurity.sophos.com/2012/07/27/outbreak-blackhole-malware-attack-spreading-on-twitter-using-its-you-on-photo-disguise/
___

Phishing for Payroll with unpatched Java
- http://boards.cexx.org/index.php?topic=17533.msg83798#msg83798
2012-08-05