Gladiator Research and Security

GSA Reference Number: AD100201-01

Simply Put: A fraudulent email is currently circulating that appears to be from Google in response to a job application.  The email scam informs recipients that their application has been received and that it is attached in a zip file.  The zip file contains a malicious executable that is identified as a Trojan downloader.

GSA Reference Number: AD100121-01

Previous GSA Reference Number: AD100119-01

Simply Put: Microsoft has released an out-of-band patch for the Internet Explorer remote code execution exploit referenced above as well as for other security vulnerabilities.  There is evidence that this exploit is being used in limited, targeted attacks on the Internet.  For now, no widespread worms or exploit packs are currently using this vulnerability.  The Microsoft bulletin can be found here, and the update can be downloaded through Windows Update.

GSA Reference Number: AD100119-01

Simply Put: A new Internet Explorer remote code execution exploit has been released.  There is evidence that this exploit is being used in limited, targeted attacks on the Internet.  For now, no widespread worms or exploit packs are currently using this vulnerability.  Microsoft has not released a patch, but is currently researching the issue and hopefully will release one soon.  Reports have been published linking this exploit to the Google hacking incident.  According to this Microsoft article, an out-of-band patch will be released for this vulnerability.

GSA Reference Number: AD100114-01
Previous GSA Reference Number: AD091215-01

Simply Put: Adobe has released a patch for the previously announced critical remote code execution vulnerability in the Adobe Reader and Acrobat products.  Adobe Reader and Acrobat 9.2 and earlier versions are confirmed as vulnerable.  This vulnerability has become a target of malware authors, and should be patched as quickly as possible.

Microsoft has announced one new patch today regarding a flaw that could allow remote code execution.  The patch is rated Critical for Windows 2000 servers and Low for devices using other Windows Operating Systems.  Gladiator recommends that users immediately apply this update. Detailed information for the patch can be found in Microsoft’s January Security Bulletin.  Summary information is included below:

GSA Reference Number: AD091215-01

Simply Put: A new Adobe Acrobat/Reader remote code execution vulnerability has been observed in targeted attacks on the Internet.  This vulnerability has been confirmed by Adobe; however, no patch is available at this time.  Adobe Reader and Acrobat 9.2 and earlier versions are confirmed as vulnerable.  Although this vulnerability is not in widespread use as of yet, Gladiator believes it will become so in the near future.

GSA Reference Number: AD091209-01

Simply Put: Adobe has released a critical patch to address seven security vulnerabilities regarding its Flash Player and Adobe Air products. Flash is used on most websites for active content, such as animated or interactive menus and images, and movies.  Adobe Air allows users to run active web content outside of a browser.  These vulnerabilities have been rated Critical and could lead to remote code execution or information disclosure.  Flash versions older than 10.0.42.34 and Air versions older than 1.5.3 are affected by these issues.  Gladiator recommends that these patches are applied to all workstations as soon as possible. Users running Flash Player 9 should upgrade to version 10 at this time.