All Mgrs Mtg-2006.04.05-ISO Update

ISO Updates by Corey Roach, ISO Current Security issues 3/22 Secunia released an ""extremely critical"" advisory for an Internet Explorer vulnerability. Secunia claims to have been working with Microsoft on a patch, but the info had been posted to a mailing list. A remote exploit is in the wild and has been seen on campus. Microsoft has decided not to release a patch until the next cycle 4/11. A total of 20 days unpatched. Windows question: Name the ActiveX function that is exploited? No one could answer . . . Answer: CreateTextRange(). The next question was, "What is Microsoft's recommended solution until a patch is released?" Answer: Disable ActiveX (The irony being Microsoft Update uses ActiveX...) Steve Adams got it right. Movie tix! According to most A/V vendors, not counting variants there are currently two Mac OS X viruses. According to macrumors.com and others, they are not true viruses, one is a script and the other is a trojan. According to me, don't buy the hype either way. Mac OS is vulnerable just like every other OS. I predict more viruses and exploits will come in the near future. Take proper precautions and keep an eye on this topic. Mac Question: Name one of the two ""viruses"" for Mac OS X. Answer: OSX.Inqtana or OSX.Leap Dan Hutten got it right. Movie tix! Tool of the Month: the Bastille Hardening program Bastille Linux - Hardens your operating system. Generate your own hardening policy templates, can be run auto-magically based on a policy file, or can be run manually to provide advice and information.