Torian Group Times “Technology with Integrity”

Critical Microsoft patch issued Oct 23. Default firewall settings which block an infection directly from the internet. This vulnerability allows a system to be successfully attacked over the network with no user action at all. Exploitation has been limited – mostly XP users in Asia so far.  If you haven't patched for 08-067, do so now.
www.microsoft.com/technet/security/Bulletin/MS08-067.mspx
www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9118885
Regular Windows updates will be released on Tues Nov. 11^th. 2 updates are planned.
www.microsoft.com/technet/security/bulletin/ms08-nov.mspx

PC Magazine reviews 2009 PC Anti-malware Suites. They liked Norton Internet Security 2009 which was faster and smaller than last year, but still weak on anti-spam. Trend was their second choice as all around best performer. McAfee was not rated well due to slowness. Kaspersky did well on performance and Anti-malware, but not on Spam filtering.
www.pcmag.com/article2/0,2817,2333448,00.asp?kc=PCRSS05079TX1K0000992

Google G1 phone.  First to use the Android operating system, designed by Google, built by HTC of Taiwan. It will be sold by T-Mobile, for $179 with a two-year contract. You must have a Google account to use the phone, and can only synchronize the phone’s calendar and address book with Google online services. Unlike the iPhone, it doesn’t work with Microsoft Exchange or Outlook.
http://digitaldaily.allthingsd.com/20080923/google-android-phone-3g-179-amazon-mp3-app-store/

“Sinowal”trojan has infected at least 300,000 Windows machines and stolen 270,000 online banking account numbers and 240,000 credit and debit credentials over the last several years. It spreads through websites onto un-patched PCs without any user interaction. It estimated that one in ten of the 4.5 million web pages analyzed were suspect.
http://news.bbc.co.uk/2/hi/technology/7701227.stm
www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9118718&intsrc=hm_list

State of internet security report:
“All of these attacks have been very organized. It's not hobbyists, this is organized crime."
Things to watch out for:
Spam: Breaking News, Delivery Status Notifications.
Topical spam. First it was the Olympics and then the election. Expect Holiday related messages.
With upcoming holiday spam expect to see fake free coupons and gift cards.
Phishing attacks following the announcements of various bank failures – change your password etc.  
“Drive by” infections - web sites are now a primary vehicle for compromising computers. Simply visiting the site with an un-patched pc is enough.
www.connectitnews.com/usa/story.cfm?item=2642 www.securecomputing.com/pdf/SCC-InternetThrtRprt-Oct08.pdf

 “Windows Azure” will provide Windows Live, Office Live, Exchange (email), SharePoint (web based collaboration, file sharing), and CRM Online services directly online from Microsoft. This is part of a trend toward subscribing to software rather than purchasing it. www.microsoft-watch.com/content/web_services_browser/azure_windows_becomes_the_web.html

Microsoft will offer new versions of Word, Excel, and PowerPoint that can run from within a standard Web browser. The browser-based editing capabilities are being developed in conjunction with the next version of Office, known as Office 14. Office Web will be available as either a subscription service or volume licensing contracts. www.microsoft-watch.com/content/web_services_browser/office_goes_to_the_web.html www.microsoft.com/softwareplusservices/software-plus-services-full-story.aspx

Air Force Research Laboratory's "Integrated Cyber Defense" program. A research program, launched in May, shoots for "gain access" to "any and all" computers. A new division of information warriors is being set up under Air Force Space Command. "Our mission is to control cyberspace both for attacks and defense," An upcoming Air Force doctrine calls for the "freedom to attack" online.   http://blog.wired.com/defense/2008/11/air-force-aims.html

Professional Developers Conference sessions online https://sessions.microsoftpdc.com/public/timeline.aspx

Small Business Server 2008 and Windows Essentials server 2008 official release is Nov. 12. They are available for sale now. MPAN program members got a copy in the Oct. Action Pack shipment. www.multiplyyourpower.com

Free Kaspersky AV 2009 9 month subscription www.megaleecher.net/KAV_2009_Key

Free site for finding and downloading drivers for PC hardware. Be sure to create a restore point and backup critical data before updating drivers. www.drivermax.com

Refurbished HP computers and printers: http://ec.synnex.com/pcw/

Students save 91% on Office Ultimate2007 at $60. (Valid e-mail address at an educational institution required.) www.microsoft.com/student/discounts/theultimatesteal-us/default.aspx

Tim Torian
Torian, Group, Inc.
http://www.toriangroup.com