Showing posts with label security. Show all posts
Showing posts with label security. Show all posts

Thursday, March 30, 2017

Security Patches OS X 10 10 1 iOS 8 1 1 Apple TV 7 0 2

Security Patches OS X 10 10 1 iOS 8 1 1 Apple TV 7 0 2

--
Intro: I get all conflicted about what to do when ordinary old security updates are released. I dont want to write a diatribe. But I should highlight their release. So I decided to just announce them as they show up, without munificent exposition or graphical profundity (unless I feel like it).

Today Apple released software updates with the following security patches


OS X 10.10.1 Yosemite: 

APPLE-SA-2014-11-17-2 OS X Yosemite 10.10.1

OS X 10.10.1 is now available and addresses the following:

CFNetwork
Available for:  OS X Yosemite v10.10
Impact:  Website cache may not be fully cleared after leaving private browsing
Description:  A privacy issue existed where browsing data could remain in the cache after leaving private browsing. This issue was addressed through a change in caching behavior. 
CVE-ID
CVE-2014-4460

Spotlight
Available for:  OS X Yosemite v10.10
Impact:  Unnecessary information is included as part of the initial connection between Spotlight or Safari and the Spotlight Suggestions servers
Description:  The initial connection made by Spotlight or Safari to the Spotlight Suggestions servers included a users approximate location before a user entered a query. This issue was addressed by removing this information from the initial connection and only sending the users approximate location as part of queries. 
CVE-ID
CVE-2014-4453 : Ashkan Soltani

System Profiler About This Mac
Available for:  OS X Yosemite v10.10
Impact:  Unnecessary information is included as part of a connection to Apple to determine the system model
Description:  The request made by About This Mac to determine the model of the system and direct users to the correct help resources included unnecessary cookies. This issue was addressed by removing cookies from the connection.
CVE-ID
CVE-2014-4458 : Landon Fuller of Plausible Labs

WebKit
Available for:  OS X Yosemite v10.10
Impact:  Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description:  A use after free issue existed in the handling of page objects. This issue was addressed through improved memory management. 
CVE-ID
CVE-2014-4459

iOS 8.1.1: 

APPLE-SA-2014-11-17-1 iOS 8.1.1
iOS 8.1.1 is now available and addresses the following:CFNetwork

Available for:  iPhone 4s and later,
iPod touch (5th generation) and later, iPad 2 and later Impact:  Website cache may not be fully cleared after leaving private browsing
Description:  A privacy issue existed where browsing data could remain in the cache after leaving private browsing. This issue was addressed through a change in caching behavior. 
CVE-ID
CVE-2014-4460

dyld
Available for:  iPhone 4s and later,
iPod touch (5th generation) and later, iPad 2 and later Impact:  A local user may be able to execute unsigned code Description:  A state management issue existed in the handling of Mach-O executable files with overlapping segments. This issue was addressed through improved validation of segment sizes. 
CVE-ID
CVE-2014-4455 : @PanguTeam

Kernel
Available for:  iPhone 4s and later,
iPod touch (5th generation) and later, iPad 2 and later Impact:  A malicious application may be able to execute arbitrary code with system privileges
Description:  A validation issue existed in the handling of certain metadata fields of IOSharedDataQueue objects. This issue was addressed through relocation of the metadata. 
CVE-ID
CVE-2014-4461 : @PanguTeam

Lock Screen
Available for:  iPhone 4s and later,
iPod touch (5th generation) and later, iPad 2 and later Impact:  An attacker in possession of a device may exceed the maximum number of failed passcode attempts
Description:  In some circumstances, the failed passcode attempt limit was not enforced. This issue was addressed through additional enforcement of this limit.
CVE-ID
CVE-2014-4451 : Stuart Ryan of University of Technology, Sydney

Lock Screen
Available for:  iPhone 4s and later,
iPod touch (5th generation) and later, iPad 2 and later Impact:  A person with physical access to the phone may be able to access photos in the Photo Library
Description:  The Leave a Message option in FaceTime may have allowed viewing and sending photos from the device. This issue was addressed through improved state management.
CVE-ID
CVE-2014-4463

Sandbox Profiles
Available for:  iPhone 4s and later,
iPod touch (5th generation) and later, iPad 2 and later Impact:  A malicious application may be able to launch arbitrary binaries on a trusted device
Description:  A permissions issue existed with the debugging functionality for iOS that allowed the spawning of applications on trusted devices that were not being debugged. This was addressed by changes to debugservers sandbox.
CVE-ID
CVE-2014-4457 : @PanguTeam

Spotlight
Available for:  iPhone 4s and later,
iPod touch (5th generation) and later, iPad 2 and later Impact:  Unnecessary information is included as part of the initial connection between Spotlight or Safari and the Spotlight Suggestions servers
Description:  The initial connection made by Spotlight or Safari to the Spotlight Suggestions servers included a users approximate location before a user entered a query. This issue was addressed by removing this information from the initial connection and only sending the users approximate location as part of queries. CVE-ID
CVE-2014-4453 : Ashkan Soltani 
WebKit
Available for:  iPhone 4s and later,
iPod touch (5th generation) and later, iPad 2 and later Impact:  Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description:  Multiple memory corruption issues existed in WebKit. These issues were addressed through improved memory handling.
CVE-ID
CVE-2014-4452
CVE-2014-4462

Apple TV 7.0.2: 
APPLE-SA-2014-11-17-3 Apple TV 7.0.2
Apple TV 7.0.2 is now available and addresses the following:

Apple TV
Available for:  Apple TV 3rd generation and later Impact:  An attacker with a privileged network position may cause an unexpected application termination or arbitrary code execution Description:  Multiple memory corruption issues existed in WebKit. These issues were addressed through improved memory handling.
CVE-ID
CVE-2014-4452
CVE-2014-4462

Apple TV
Available for:  Apple TV 3rd generation and later Impact:  A local user may be able to execute unsigned code Description:  A state management issue existed in the handling of Mach-O executable files with overlapping segments. This issue was addressed through improved validation of segment sizes.
CVE-ID
CVE-2014-4455 : @PanguTeam

Apple TV
Available for:  Apple TV 3rd generation and later Impact:  A malicious application may be able to execute arbitrary code with system privileges
Description:  A validation issue existed in the handling of certain metadata fields of IOSharedDataQueue objects. This issue was addressed through relocation of the metadata.
CVE-ID
CVE-2014-4461 : @PanguTeam

Security documents for all Apple security patches can be found (eventually) at:


https://support.apple.com/kb/HT1222


[Happy news! Apple has revamped the Apple Security Updates page. Hopefully, this means they will be taking it more seriously in the future. That would be a good thing.]




--

Go to link Download

Read more »

Sunday, February 19, 2017

Security Anti Virus

Security Anti Virus

Berikut ini berbagai software anti virus yang dapat menjaga PC or laptop anda dari berbagai virus jahat yang berkeliaran di internet atau flashdisk, silahkan download pada link dibawah ini:

  • AVG Free – antivirus
  • Avast Home Free – antivirus
  • AntiVir PersonalEdition – antivirus
  • BitDefender Free – antivirus
  • ClamWin – antivirus
  • CyberDifender – Internet Security Suite
  • Ad-aware – anti-spyware
  • Spybot: Search & Destroy – anti-spyware
  • Windows Defender – anti-spyware
  • SpywareBlaster – anti-spyware
  • Spyware Terminator – anti-spyware
  • Tootkit Reveaker – rootkit detection utility
  • Winpooch – system protection
  • HiJack Free – system protection
  • HighJackThis – hijackers detector and remover
  • Kerio Personal Firewall – firewall
  • Sygate Personal Firewall – firewall
  • ZoneAlarm – firewall
  • AxCrypt – file encryption
  • Simple File Shredder – securely delete files
  • PuTTy – SSH client
  • KeePass – password manager
  • LockNote – password manager
  • nPassword – password manager
  • Microsoft Baseline Security Analyzer – identify security misconfigurations

Oke kawan semoga bermanfaat ! 

Go to link Download

Read more »

Monday, January 23, 2017

Security Certificate Has Expired

Security Certificate Has Expired

Last week, I receive an error that says "Security Certificate Has Expired" whenever I browse a secure websites (https:). I search on internet and found so many answers until I found the right one. This problem occurs because of the time and date on your computer is not set correctly. The certificate becomes out of date so you cannot proceed unless you already know what to do.

To solve the problem, adjust the clock setting.
Go to your clock setting and set the date / time correctly. 

This steps will fix the problem and the Security Certificate Has Expired error will never be shown up again.

Go to link Download

Read more »

Sunday, December 4, 2016

Security Antivirus Premier APK Free Download For Android

Security Antivirus Premier APK Free Download For Android

Security & Antivirus Premier APK Free Download by mcAfee (Internet Security) is a super-class Android application that is filled with lots of features for perfect protection.

Security & Antivirus Premier APK Free Download

Mobile Security & Antivirus APK Cracked App For Android Free Download Full Version

It includes some dynamic functions as well.

Mobile Security & Antivirus APK Features:

  • Memory Cleanup for freeing unwanted RAM and makes device speedier.
  • On the other hand, it uses Wi-Fi Security for protecting ARP spoofing attacks and unsafe Wi-Fi networks as well.
  • With the help of function of Battery Optimizer, you can estimate battery life and can make device live longer.
Download Mobile Security & Antivirus Free
You May Also Like:
  • Download Lookout Premium APK Cracked Free
  • Free Download Norton Mobile Security App For Android
  • Antivirus Free Download For Mobile Security
  • Download Antivirus Booster And Cleaner App Free
 

Go to link Download

Read more »

Thursday, November 24, 2016

Removing security from any bb parmanently

Removing security from any bb parmanently

you need to remove IT policy , here is the working solution how to remove IT policy tested by me many times

Go to your Options : Security >> Security Options (the same page where you can enable/disable passwords) & scroll to the bottom. If theres an IT policy attached, it will be mentioned there. Remove the IT policy using these instructions

Procedure
Step 1 : Ensure the Blackberry Desktop Manager is installed using Blackberry Internet Service, and not Blackberry Enterprise Server. If you are unsure, it would probably be a good idea to uninstall the Desktop Manager and start again. If you dont have the CD that came with your Blackberry, the Software can be downloaded here.

Step 2 : Download the file policy.bin and save it in your Blackberry installation directory (C:Program FilesResearch In MotionBlackBerry).

Step 3 : Wipe your Blackberry, creating a backup if necessary. Select Options/Security/Wipe on the Device. If this option is unavailable, you may have to install the latest software on your Blackberry. You need to Download and install the latest OS for your device. Connect your device, open the Desktop Manager, select Application Loader, and follow the prompts.

Step 4 : Close the Desktop Manager if it is open.

Step 5 : From the Windows XP Start Menu select Run..., and at the prompt type regedit. In the tree on the left hand side, navigate to:

HKEY_Current_UsersSoftwareResearch In MotionBlackBerryPolicyManager

Right-Click the Policy Manager Folder and select New/String Value. Name the value Path. Now, Double-Click the Path Subkey and set Value Data to:

C:Program FilesResearch In MotionBlackBerrypolicy.bin

Step 6 : Open the Desktop Manager.

Step 7 : Connect the Device? Verification Once complete, the Options/Security screen on your Blackberry should not contain references to an IT Policy, you should now be able to change all settings (including password prompts), and install Third Party Applications?




Go to link Download

Read more »

Tuesday, November 1, 2016

Securitybyte Conference Information Security Conference Securitybyte 2011

Securitybyte Conference Information Security Conference Securitybyte 2011

And we have got one more security conference – Securitybyte 2011. Securitybyte Conference | Annual International Information Security Conference | Securitybyte 2011 This 4-day event features two days of conferences and two days of post-conference hands-on  Trainings & Certifications covering every aspect of Information Security. The Securitybyte conference features some of the most respected names in the Security space and is focused around new research and innovation. The Securitybyte Conference 2011 is planned for Sept 6th through 9th, 2011 at The Sheraton Hotel in Bangalore, India.
The two-day conference (Sept 6th & 7th) will have the following three
tracks:

  1. Basic
  2. Deep Technical
  3. Manager

Submission Deadline: The first round of submission of papers for conference talks and trainings should be done no later than June 15th, 2011. Please send all your submissions to cfp@securitybyte.org <mailto:mailto:cfp@securitybyte.org> , keeping subject line as "SB 2011 CFP Submission".

TOPICS

Got a new attack against any technology or device? We want to see it.Topics of interest include, but are not limited to, the following:

Technology-Focused

  • Application & Web Security
  • SOA & Cloud Security
  • Electronic Device Security (Cell Phones / PDAs)
  • Defeating Biometrics
  • 3G/4G Cellular Network Security
  • WLAN, RFID and Bluetooth Security
  • Data Recovery and Incident Response
  • Virtualization Security
  • Satellite Hacking
  • Hacking Electronic Voting systems
  • Next-gen BOTNets
  • Worms & Malware
  • Protocol exploits
  • Database Security
  • Forensic & Cyber security
  • Social Engineering
  • Hacker media/film presentations
  • Firmware & Hardware hacking
  • Physical Security
  • Embedded systems hacking
  • Smartcard technologies
  • Credit card and financial instrument technologies

Regulatory & Law

  • Copyright infringement and anti-copyright infringement enforcement technologies
  • Critical infrastructure issues
  • Data security and privacy issues
  • Identity theft, identity creation & identity fraud
  • Corporate Espionage

Management

  • Enterprise Risk management framework
  • SOA Governance
  • Understanding the true value of GRC
  • Information Security Governance
  • Cloud Computing
  • Unified Compliance Framework
  • Security Metrics

National Security

  • Cyber forensics
  • Cyber warfare
  • Cyber Espionage
  • Next hyphenGen Cyber threats
  • Critical Infrastructure protection
  • Surveillance & counter-surveillance

Speaker Submission:

Please use the following submission form template to respond:

  • Name, title, address, email, and phone/contact number
  • Short biography, qualifications, occupation, achievements, and affiliations (limit 250 words.)
  • Summary or abstract of your presentation (limit 1250 words.)
  • Technical requirements (video, internet, wireless, audio, etc.)
  • References (Contact name, title, and email address of two
  • conferences you have spoken at or comparable references.)

Training Submission: (Sept 8th & 9th, 2011)

Please include the following information for your training proposal:

  • Name, title, address, email, and phone/contact number
  • Short biography, qualifications, occupation, achievements, and affiliations (limit 250 words)
  • Training Overview
  • Who should attend
  • Course Syllabus
  • Length
  • Proposed Pricing
  • Technical Requirements (Videos, internet, wireless, audio, laptop,etc.)
  • Hands-on/ Demo-based/ labs
  • References (Contact name, title, and email address of two conferences you have taught at or comparable references)

Please note, product or vendor pitches are not accepted. If your talk involves an advertisement for a new product or service your company is offering, please do not submit a proposal.

Go to link Download

Read more »