Exploits in the wild and other news
After perusing the Sans.org handlers diary, there are a few things brewing that should be known. Exploits are in the wild for some of the vulnerabilities addressed by this weeks Microsoft patchfest. There is a Veritas Backup Exec vulnerability and it appears that the Beta of Vista has a network service that might be nice to switch off before you hook up to the internet.
Update – 8/12/05 3PM EDT…. It looks as though more outlets are reporting on the active exploits in the wild to exploit vulnerabilities patched this week in Microsoft products. The reality of todays internet environment is that once a vulnerability is known there are literally hours until active exploits might be found. Some vulnerabilities, of course, are more severe than others. In this case between 2 and 4 of the detailed vulnerabilities already have code “in the wild” aimed at exploiting them. This is Friday, first reported Thursday and the vulnerabilities were announced fully Tuesday afternoon.
PATCH YOUR SYSTEMS.