ICT Security-Sécurité PC et Internet

Just last week you were congratulating yourself for patching your computer against a Java security hole.

Now another zero-day unpatched vulnerability has been found in Oracle's widely used softw...

 

Here's the best piece of advice we can give you at the moment:

If you don't need Java enabled in your browser, here's how to turn it off now!

 

Many people who have Java enabled in their browser simply do not need it (By the way, don't mix up Java with JavaScript - they're different things), so the best solution for many folks is to rip Java out of their browser entirely.

 

If you don't need Java, why put yourself at risk?

Oracles Mitarbeiter dürften unter Dauerstress stehen. Auch die neueste Version soll eine Sicherheitslücke enthalten, gleichzeitig kursieren Exploits für die ältere Version 7u11. Nutzer sollten schleunigst updaten oder deinstallieren.

Security researchers from antivirus vendor Trend Micro have uncovered a piece of backdoor-type malware that infects Java-based HTTP servers and allows attackers to execute malicious commands on the underlying systems.

Aufgrund einer noch nicht durch Updates geschlossenen Sicherheitslücke in Java 7, die bereits für Angriffe genutzt wird, sollten Anwender Java im Browser abschalten. Wir zeigen Ihnen, wie das bei den aktuellen Versionen gängiger Browser funktioniert.

 

Mehr lesen:

http://www.pcwelt.de/ratgeber/So-deaktivieren-Sie-Java-im-Browser-6527738.html?r=861529328805646&lid=193884

 

Disable Java not Bob’s Java Jive (or JavaScript)

 

A vulnerability in the most recent version of Java means that attackers can fool you into visiting a malicious or compromised web site and, without any interaction use the vulnerability to install malicious code onto your computer. It has already been used to install a well known backdoor, giving criminals remote control over the infected machine and been incorporated into several attack tool-kits, both professional and criminal.

 

The fact that Java is a cross-platform environment means that it is relatively simple to create attack code for most major operating systems.

 

In the absence of a patch for this widespread and already abused vulnerability, the best advice is simply to disable Java in your web browser and this is where the distinction between Java and JavaScript becomes key, otherwise you may very well end up disabling the wrong thing and remaining at risk.

 

To disable Java in Internet Explorer:

 

In the Tools menu of Internet Explorer, select Manage Add-Ons and disable Java™ Plug-in SSV Helper and Java 2™ Plug-in 2 SSV Helper

 

To disable Java in Firefox (MacOS & Windows):

 

In the Tools menu select Add-ons and disable the Java Deployment Toolkit, Java™ Platform and/or Java Applet Plug-in

 

To disable Java in Google Chrome:

 

Select the Wrench icon in the top right of the Chrome browser window, choose Settings and right at the bottom choose Show advanced settings. Find the Privacy section and click the Content Settings button. Find the Plug-ins section and click the Disable individual plug-ins, look for Java and hit the Disable link. That one is well-buried!

 

To disable Java in Safari for MacOS:

 

In the Safari menu, open the Preferences dialogue box and select Security. untick the box Enable Java

 

To disable Java in Safari for Windows:

 

Click the Gear wheel in the top right of the browser window and choose Preferences, select Security and untick the box Enable Java.

JavaScript is a whole different security conversation, but for the purposes of this current vulnerability it is irrelevant.

 

Image credit: Homini:)’s Flickr Photostream under creative commons.

 

Read more:

http://countermeasures.trendmicro.eu/disable-java-not-bobs-java-jive-or-javascript/#.UD4CfQccznw.twitter

 

 

 

Details of the exploit being used in the attacks on the new Java vulnerability have been published by DeepEnd research and Michael Schierl.

 

Read more:

http://threatpost.com/en_us/blogs/details-new-java-exploit-emerge-082712?utm_source=dlvr.it&utm_medium=twitter

 

Security Explorations indique avoir mis au jour deux vulnérabilités 0-day dans Java. Un code preuve de concept a été envoyé à Oracle. Dans le même temps, Firefox passe le plugin Java en mode click-to-play.

One of the attack crews using the new Java CVE-2012-4681 vulnerability is the Nitro group that was traced to China and attacked chemical companies and defense contractors.

 

Researchers say that one of the attack groups using the two new Java zero-day vulnerabilities is the same group that was behind an earlier targeted attack campaign from 2011. That group was traced back to China and was essentially running a spear-phishing campaign, but now the crew, known as Nitro, is using the Java vulnerabilities in Web-based attacks that install the Poison Ivy remote-access tool.

 

The attacks have been going on for more than a week, researchers say, and the Nitro group apparently is reusing both their command-and-control servers and some of the file names for the malicious executables. There are two separate domains serving the Java exploit right now, and the two main executable files the attacks are using are named "Flash_update.exe" and "hi.exe".

 

Read more:

http://threatpost.com/en_us/blogs/use-java-zero-day-flaws-tied-nitro-attack-crew-083012

 

Une vulnérabilité, jugée très critique par les spécialistes en sécurité, vient d’être découverte dans la version 7 de Java. Windows, Linux et Mac OS X sont concernés.

 

En savoir plus :

http://www.01net.com/editorial/571657/une-faille-non-repertoriee-de-java-menace-tous-les-ordinateurs/