New XPSP2 Firewall Patch in Windows Update

Several diary readers sent e-mail letting us know of a new (critical) patch to the XPSP2 firewall that was not mentioned in yesterday's patch release.

"After you set up Microsoft Windows Firewall in Microsoft Windows XP Service Pack 2 (SP2), you may discover that your computer can be accessed by anyone on the Internet when you use a dial-up connection to connect to the Internet."

Oops.

Details can be found at http://support.microsoft.com/kb/886185



Linux Exploits Released

We received a note today regarding public exploits released for the linux 2.4 and 2.6 kernel, igmp.c local DoS and scm_send DoS vulnerabilities discussed on Full Disclosure and Bugtraq yesterday.


F-Secure Yearly Summary (with thanks to ISC Handler Koon Yaw Tan)

F-Secure has posted a nice summary of the year as related to virus activity.

"F-Secure Corporation's Data Security Summary for 2004 - The year of phishing, professional virus-writing, and arrests" looks back on the year and offers virus statistics as well as a look back on the more memorable virus related events of 2004.

If you're so inclined, take a look at http://www.f-secure.com/2004/



ISC dot Chris /at/ gee mail dot com