Microsoft Warns of Internet Explorer Zero-Day Bug, Dangers of XP

Microsoft Warns of Internet Explorer Zero-Day Bug, Dangers of XP

from PCMag.com:

Microsoft has released a security advisory that warns about remote code executions in various versions of Internet Explorer.
"This issue allows remote code execution if users visit a malicious website with an affected browser," Microsoft said. "This would typically occur by an attacker convincing someone to click a link in an email or instant message."

http://www.pcmag.com/article2/0,2817,2457206,00.asp

Government urges all users to switch to another Browser, Firefox or Chrome until IE Bug fixed

http://www.zdnet.com/governments-urge-internet-explorer-users-to-switch-browsers-until-fix-found-7000028869/?s_cid=e539&ttag=e539&ftag=TRE17cfd61



How Ditching Windows XP will make the Whole Internet Safer 

from link above, www.mashable.com

" — more than 27% of all computers worldwide still run the software — holdouts are inevitable.
That poses a growing danger not just to those PCs, but to any system coming into contact with them. With significant market share and no more official support, Windows XP will become a prime target for malware creators."

Alternate Browser links:

Firefox               http://www.mozilla.org/en-US/

Chrome             https://www.google.com/intl/en/chrome/browser/?hl=en&brand=CHMI

Safari                 http://support.apple.com/kb/DL1531

Types of Major Websites affected by Heartbleed bug; Michaels Stores confirms data breach, 3 million cards affected

In the aftermath of the Heartbleed bug, LWG Consulting has provided a chart that serves as a guide to what websites and passwords you should be concerned about.

This list is only a guide and may not apply to each and every financial institution or web entity.  Some websites may not fit exactly in the categories.  However, there are certain large companies on the list that everyone uses  Click on the link below.
.

http://www.lwgconsulting.com/news/sites_affected_by_heartbleed_bug.aspx​

For what it's worth, high NET or wealthy individuals, it is recommended to have a banking only computer. This computer is to be used for nothing but banking, no Facebook, EMail, surfing whatsoever.

There is a very good TV series on CNBC, "American Greed."  Two segments in the series dealt with online Cyber Fraud.

1.  The Fake PC-Optimizers/Fake anti-virus scams.  The overall take with this one operation exceeded $160 million.  I cannot find the CNBC segment now but here is a link about the story,

http://arstechnica.com/tech-policy/2012/10/ftc-gets-a-163-million-judgment-against-scareware-operation/

2.  The Zeus Trojan horse, allow hackers to access online bank accounts and steal millions virtually undetected. But there are ways to avoid being victimized

.

http://video.cnbc.com/gallery/?video=3000213289

Michaels Stores confirms data breach, 3 million cards affected

http://www.zdnet.com/michaels-stores-confirms-data-breach-3-million-cards-affected-7000028563/?s_cid=e539&ttag=e539&ftag=TRE17cfd61Michael's Stores Data Breach, 3 million customers

Important News about HeartBleed - UPDATE: 5 rules for using the Internet after 'Heartbleed'

click here for  HeartBleed Test
Open your Chrome Browser go to http://dforceatl.blogspot.com then click here for ChromeBleed Extension

http://www.marketwatch.com/story/5-rules-for-using-the-internet-after-heartbleed-2014-04-09?link=MW_latest_news

UPDATE: 5 rules for using the Internet after 'Heartbleed'

7:16a ET April 10, 2014 (MarketWatch) Print

By Priya Anand

You know the lock icon that pops up next to URLs to tell you a website will keep your information safe? It turns out it has actually left your private data unsecured for more than two years.

Websites encrypt your information, like emails, passwords and credit card numbers, so if anyone tries to snoop, they get a gibberish code and your data stays between you and the people you want to send it to. At least that's the way it's supposed to work. This week, researchers found a hole in OpenSSL, the lock that an estimated two-thirds of websites use. They're calling the bug "Heartbleed."

What's more, any attacks let in due to the bug can't be traced, experts say. This is a gaping security hole with "epic repercussions," director of security firm AlienVault Labs Jaime Blasco says, even if you're starting to become numb to all the data breaches of late.

Here are 5 rules for using the Internet after Heartbleed.

1. Trust no one

Run the websites you have accounts with through tools like the Heartbleed test to see if they're vulnerable or if the security gap has been patched before logging on. The page is fielding about 4,000 searches a minute, Milan-based freelance developer Filippo Valsorda said. Download the Chrome browser extension, Chromebleed, to receive notifications when you land at a website that hasn't fixed the problem yet. "In computer security, you never know when there's going to be a vulnerability," says Joost Bijl, marketing manager at the security firm Fox-IT.

2. Change your passwords and use two-step verification

"Change your password" is a mantra consumers have heard for years. It sounds simple and experts say it's still the first step users should take to protect themselves in case their communications were intercepted due to Heartbleed over the last two years. The safest move would be to change all your passwords, given the dominance of OpenSSL, the technology associated with the bug. Many companies, including Google (GOOG) , Facebook (FB) , Twitter and PayPal offer two-step authentication, asking users a security question or sending a code via text message when someone tries to log in from a new machine. "If someone lifts your password, then they still can't log in," Bijl says.

3. Be wary of public Wi-Fi networks

Turn off the setting that autoconnects your smartphone to public Wi-Fi networks, which can be exploited by malicious hackers. Airport and hotel Wi-Fi connections are convenient, but experts say these unsecured connections leave you open to attacks. When you do use them, set up a virtual private network to secure your Internet traffic. There are some free VPN services, though many charge monthly rates.

4. Monitor recent account activity

Some companies, like Google, offer email activity reports that show where and when an account was accessed. On Gmail, click on the small "details" button at the bottom of your inbox for a report complete with timestamps, maps and IP addresses. If a timestamp doesn't match up with your usage, change your password (and remember rule No. 2, two-step verification).

5. Install all the annoying security updates and read the alerts

Everyone's guilty of snoozing the prompts to install a security update and reboot, or ignoring an alert message to get to a Web page. These updates guard your computer from malware and other threats, and also fix any security gaps that might have gone undetected when you first downloaded software. If a security alert pops up on a familiar website, users sometimes ignore the notice and hit accept to move on, but can get caught in what are known as "man in the middle" attacks where a hacker eavesdrops on communications. "Users really don't care and usually they don't read those messages," Blasco says. "Please read the messages and try to understand what you're doing before you really make a mistake and your data can be compromised."

Also see:

http://blogs.wsj.com/cio/2014/04/08/google-microsoft-race-to-assess-heartbleed-vulnerability/

'Heartbleed' bug warning: 'Time to change passwords everywhere'
-Priya Anand; 415-439-6400; AskNewswires@dowjones.com

Windows XP Support ends April 08, 2014

Beginning April 08, 2014 Microsoft will stop supporting all versions of Windows XP.  Your computer will still work but Microsoft will no longer provide technical support, software update and no more security patches.  In the short term all will be fine, but as time passes you face the following risks:

• Exposure of confidential information due to new security vulnerabilities
• Degradation of performance due to unresolved software issues
• Inability to support new hardware due to lack of driver support
• Destruction of critical business information by malware

You are left with two choices, either in-place migration to a new version of Windows on your existing hardware, or perform a forklift upgrade to a new version of windows on new hardware.

In either case you must know that you cannot upgrade from Windows XP to Windows 7 or 8 directly.  You must perform a new install and then re-install all programs, devices and import your data and settings.

The following links from Microsoft describes the upgrade process for XP to Windows 7.  However beware that if you follow this process you will in all likelihood end up with a 32 bit version of Windows 7 or 8.  You don't want this.  Literally 99 percent of Windows XP installations are 32 bit.  A 32 bit OS limits your computer to 3 to 4 GB of addressable RAM (memory).  For this reason alone users should want to upgrade  from XP since this limitation affects both performance and capabilities of your machine.

http://windows.microsoft.com/en-us/windows/end-support-help

http://windows.microsoft.com/en-us/windows7/help/upgrading-from-windows-xp-to-windows-7#T1=tab01

A better explanation on the steps that should be considered before upgrading is found at the link below.  This article addresses the first obstacle in performing an upgrade and that is whether your existing machine is capable of running Windows 7 or 8.  It also discusses hacks and options you can employ to enhance your computer's performance and user experience.

http://lifehacker.com/how-to-move-on-after-windows-xp-without-giving-up-your-1556573928