Make sure your computer is up to date!

This month there were some serious updates released.  First, we will start with the most recent JAVA update.  

 

Oracle released several updates including 36 fixes for Java SE.  These fixes are to prevent hackers from getting into your computer.  Oracle feels strongly that customers should update their computer as soon as possible.  The easiest way to know if you have a current version of JAVA is to go to their website www.java.com and click on the free download. 

The next update to talk about is for Adobe.

 

Adobe has released an update for Flash, Reader and Acrobat Players.  Without this update, you could unknowingly allow an attacker to cause crashes and gain control of your computer.  You can find the full bulletin for Adobe Reader and Acrobat by logging on to this site Adobe Security Bulletin.  Updates for Flash Player can be found at this site Adobe Flash Security Bulletin.

Last on the list are Microsoft Windows XP updates. 

  

Microsoft has released some updates for Windows XP, an operating system which will no longer be supported after April of this year. If you have the Windows XP operating system, you should probably replace the machine but if for some reason you can’t, you should make sure it is  up to date.  To view the 4 updates provided this month, go to Microsoft Security Bulletin Summary. Microsoft would also like to make sure you are on the latest version of Internet Explorer, however, keep in mind that some older versions of software will not work with the newest version.  If your computer is not set to update Windows automatically, go to the start button, then Control Panel and click on Windows updates.

Should you have any questions regarding these or any updates, please feel free to contact us at 516-762-0155.

December’s Patch Tuesday

 

It’s the last Patch Tuesday of the year!  Microsoft released patches for 24 vulnerabilities yesterday along with 11 security bulletins.  For the Patch Tuesday bulletin click here.

 

Critical Bulletins include:

 

Bulletin MS13-097 which is regarding Internet Explorer.  This fix prevents users being exploited by maliciously crafted web pages.

 

Bulletin MS13-098  is to assist with attackers being allowed to add their own malware to software being installed on a computer over a network.

 

Bulletin MS13-099 is about vulnerability in the Windows Script functionality that allows remote attackers access though a website that hosts special content.

 

Bulletin MS-105 is to take care of problems with Outlook Web Access that could allow an attacker to gain access to Microsoft Exchange.

 

Adobe Patches

 

Adobe also release a patch for Flash and Shockwave Player

 

An attacker could try to get you to run malicious Flash or Shockwave content from a website or from content embedded within some documents.  To install these updates go to for Shockwave click here and for Adobe Flash update click here.

 

Remember

 

Windows XP machines will no longer be supported by Microsoft as of April, 2014.  Microsoft will stop issuing security patches or fixes for known issues leaving your computer and/or network at risk.  Be proactive and replace your XP machines prior to April, 2014. 

 

Summary:

The latest patches from Microsoft illustrate the need for companies to initiate automated patching as well as move from older versions of Microsoft Software that pose security risks. 

Keeping your computer up to date is critical for your systems security.  Keep in mind that if have our GT Proactive Care all patches and updates would be done automatically for you.  If you have any questions regarding the latest round of updates or GT Proactive Care, please call us. (516) 762-0155.

November’s Patch Tuesday

 

 

 

Yesterday’s Patch Tuesday brought lots of updates.  One of the key updates was a fix for Adobe’s Flash Player Software for Windows, Mac, Linux and Android devices.  If you have Windows 8, you will want to update manually if your Flash is not set to update automatically.  This update of Flash is version 11.9.900.152.  You can download the latest version of Flash by clicking here.

 

Also there are 5 important Microsoft updates to fix vulnerabilities in Microsoft Active X Control, Graphics Device Interface overflow, Ancillary function driver and Digital Signature Handling.  There are also fixes for Multiple word Memory Corruption Vulnerabilities and the Outlook S/MIME information disclosure flaw.  To get to these updates you can go to this page or go to automatic updates and choose for your updates to run automatically.  If your computer is set to automatic your computer was probably already updated.

 

**Note to Windows XP users.  Tuesdays updates have cause some issues with the SVChost.exe taking up all of the CPU usage.  If you experience this problem, please call our office.  516-762-0155. 

 

Keeping your computer up to date is the best way for it to function optimally.  Keep in mind that if you have Glasser Tech’s Proactive Care all patches and updates would be done automatically for you.  If you have any questions regarding November’s updates or Proactive Care, please feel free to call us. 516-762-0155.

 

Be aware of attackers exploiting TIFF Image Files

 

On November 5, 2013, Microsoft release a critical advisory warning customers of a vulnerability regarding TIFF images. 

 

Basically it has to do with how versions of Windows, Office and Lync handle TIFF images.  If you are lured into viewing a malicious image, including ones that are already embedded into Office documents, code can be executed on your computer that would allow the attacker to gain control of your computer.

 

Mostly these images have been arriving as malicious Word documents that have an embedded TIFF in them.  They would probably be sent to you in an email. 

 

Microsoft is working on a patch for this.  However, in the meantime, they have released a FixIt which you can apply.  While a FixIt is not considered a full patch, it is helpful.  When bulletins arrive like this, we can easily block TIFF images for you if you had a Watchguard Firewall.  To find out more about Watchguard Firewalls, please give us a call at Glasser Tech at 516-762-0155.

D-Link Router Backdoor Security Alert

D-Link will address by the end of October a security issue in some of its routers that could allow attackers to change the device settings without requiring a username and password.  The issue consists of a backdoor-type function built into the firmware of some D-Link routers that can be used to bypass the normal authentication procedure on their Web-based user interfaces.  D-Link will release firmware updates to address the vulnerability in affected routers by the end of October, the networking equipment manufacturer said via email.  This backdoor poses a threat because any user who connects to the wireless or any piece of malware running on a computer inside the network can exploit it to make unauthorized changes to the router’s configuration. Such changes can have serious security consequences.  For example, changing the DNS (Domain Name System) servers used by the router—and inherently every device on the network—with DNS servers controlled by an attacker would enable the attacker to redirect users to rogue websites when trying to access legitimate ones.  If you receive unsolicited emails that relate to security vulnerabilities and prompt you to action, please ignore it.  When you click on links in such emails, it could allow unauthorized persons to access your router. 

It is our recommendation to utilize a Business Class Firewall instead of a Router meant for home use.  Low cost home routers have features that automatically open potential security holes (UPNP).  While the UPNP feature makes it easy to get an XBOX Game Console or home automation thermostat working on the internet, a malicious piece of software could open your whole network to the world.  Firewalls inherently have enhanced security features that protect the network.  Firewalls such as the one we utilize (WatchGuard) do not have UPNP and include subscription services that allow us to proactively protect the network including blocking known and emerging malicious websites and antivirus scanning of all downloaded files.  Here is a link that describes some of the services available for the WatchGuard Firewall.  

We strongly suggest you take a Proactive approach rather than a Reactive approach.    
Call us to find out more about solutions to protect your network and your data.


Michael Glasser, Glasser Tech LLC (516) 762-0155

Beware of new malware that holds your data hostage

 

You probably have had some exposure to spyware, malware and viruses.  There are the typical spyware/malware instances that have been around for years that display tons of pop ups or look like an antivirus program that is telling you that you have spyware and you should scan with their scan.  Then there is spyware/malware that locks up your desktop by displaying a message that the government is watching you.  But this new malware causes so much damage it can be put into a category all by itself.

 

What is does is this:  It looks at your local and network drives and share folders and will ENCRYPT files matching a set of extensions from common applications that you probably use.  These include Word, Word Perfect, Excel, etc. 

 

What this means:   You can’t get into ANY of your files. 

 

How it gets in:  Malware/spyware comes in through e-mail attachments, drive-by downloads from websites that are infected, a trojan-downloaded or backdoor scenario or manual infiltration though remote desktop protocol.

 

What can you do? 

 

1)  First, be sure that you are checking your back up every day.  A good backup is the best chance for restoration of your data. 

 

2) You should also have a firewall to proactively block known websites that tend to be infected. 

 

3) All of your computers should be up to date with the latest windows updates installed. 

 

4) Restrict all Users from being able to install Applications to their computers.  While some users may find this annoying, we have found that this reduces the risk of a network breach/compromise.

 

5) Patch Management.  Patch management would automatically apply updates such as Windows, Flash, Java, Acrobat Reader, etc.  Quite often we find clients that do not have Patch Management have security holes because not all users are applying all the patches.

 

Let us help you pro-actively block spyware, malware and viruses.  Call Glasser Tech at 516-762-0155

Microsoft Releases Critical Temporary Fix for Internet Explorer

Microsoft “Fix it”

Vulnerability affects: All Internet Explorer Versions.

How an attacker exploits it:  Microsoft says:  "This would typically occur when an attacker compromises the security of trusted websites regularly frequented, or convinces someone to click on a link in an email or instant message" 

Impact:  In the worst case, an attacker can execute code on your user’s computer, potentially gaining complete control of it.

What to do: Click Here to Connect to the Website and Download the Fix it

The ‘Fix it' applies only to 32-bit versions of Internet Explorer.  If you are running 64-bit, the ‘Fix it' cannot be applied.

Three Other Microsoft Recommendations on the Advisory:  

1) "Enable the MHTML protocol lockdown"

2) "Set Internet and Local intranet security zone settings to "High" to block ActiveX Controls and Active Scripting in these zones"

3) "Configure Internet Explorer to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone."

In its advisory, Microsoft said that it was actively working to release a patch for the issue, either in its next monthly security update – due out Oct. 8 – or in an out-of-cycle release.

Clients with our Proactive Solution to Patch Management Automatically get the Updates.  

Contact us to find out how you can become "Proactive" instead of "Reactive".

Michael Glasser, Glasser Tech LLC (516) 762-0155

What’s important for you to know about this month’s Patch Tuesday

 

Patches are available this month for Microsoft, Adobe and Java.

 

First, let’s start with Adobe.

 

This month’s patches are for Reader (and Acrobat) Adobe Flash Player and Shockwave Player.

 

To reach the appropriate patches for Adobe, click on these links.

 

· APSB13-23: Two Shockwave Player Memory Corruption Vulnerabilities

· APSB13-22: Multiple Reader and Acrobat  Vulnerabilities

· APSB13-21: Four Flash Player Memory Corruption Flaws

 

There were also updates released for Microsoft’s Office and Internet Explorer

 

September’s Microsoft Patch includes fixes for 47 issues and 13 bulletins.  A list of these updates can be found at Microsoft Security Bulletin Summary for September 2013.

 

Some of the more important vulnerabilities include:

· MS13-070: OLE Code Execution Vulnerability

· MS13-071:  Windows Theme Code Execution Vulnerability

· MS13-076: Multiple Kernel-Mode Driver Elevation of Privilege Vulnerabilities

· MS13-077:  Service Control Manager Elevation of Privilege Vulnerabilities

· MS13-079:  Active Directory DoS Flaw

 

Also have you updated your Java recently?

 

The website theregister.co.uk states that 81 percent of businesses run outdated Java.  What is Java?  Java is a programming language.  Many websites need Java to run properly. 

 

You should download the latest version of Java by going to their website java.com

 

Updates are important because they protect you from vulnerabilities.  When your computer is updated, you are less apt to be hacked. 

Internet Explorer Gets Another Patch

 

 

The latest IE Patch fix is to protect all versions of Internet Explorer.  Currently attackers are trying to exploit users by luring them to web pages containing malicious content.  If your users go to these sites an attacker can execute code that allows them to control the computer. 

What can you do?   Install any of Microsoft’s Internet Explorer updates immediately. 

If you want to see Microsoft’s complete security bulletin describing the 11 holes fixed by the recent update, Click Here.

If you feel uncomfortable doing updates yourself and would like us to assist you.  Please call Glasser Tech at 516-762-0155. 

Get your Java fix here

 

 

Java has released a fix for 40 vulnerabilities (including Apple)

These vulnerabilities affect the Oracle Java Runtime Environment (JRE) and Java Development Kit (JDK) 7 Update 21 and earlier on all platforms.

An attacker can exploit users by luring them to a malicious web page containing specially crafted Java. 

The best thing to do is Install JRE and JDK 7 Update 25 (or Apple’s OS X update)

Oracle released JRE and JEK Update 25 to correct 40 vulnerabilities which they consider to be high risk.  Most of the flaws are remote code execution issues in the worst case scenario, this malicious code could allow someone to take control of your computer.   If you own an Apple Computer, Apple has released a Java update for OS X.  Mac users should update their Java as well.

If you use Java, download and install the Java update to protect your computer.  You may often see pop-ups on your screen asking you to update Java.  If you do, please do the update.  Otherwise you can get to the update by clicking this link  Oracle's June Java Security Advisory.

If you don’t use Java, uninstall it.

If you need help with this update, please contact our office, Glasser Tech 516-762-0155. 

Critical IE update is released as part of June’s Patch Tuesday.

June 11, 2013

As part of Today’s Patch Tuesday, Microsoft has released five security bulletins, one for Internet Explorer (IE), three for Windows and it’s components and one for Microsoft Office. 

The Internet Explorer patch is rated critical.  We suggest that if your computer hasn’t already updated automatically that you run windows updates to fix these Internet Explorer issues. 

This patch fixes 19 vulnerabilities, most of them could allow attackers to gain control of your computer. 

To find out more about this particular Microsoft patch Click Here

Microsoft releases patches for Word

 

If you use Word in your office for Word Processing, you should know that this week  Microsoft released a patch for a vulnerability within Word having to do with RCE which stands for remote code execution. 

An attacker may entice one of your users to download and open a document that includes malicious code.  This might grant an attacker full access to the end user computer.  This flaw affects Word and Word Viewer 2003.  You can update Word using the following patch:

MS13-043

IE Vulnerability

 

As part of Microsoft’s Patch day, two security bulletins were released regarding security issues with Internet Explorer.  Both updated are rated critical.  

The new flaws are that  attackers can lure of of your users to a web page containing malicious HTML.  Because of this, an attacker can exploit these vulnerabilities and execute code on the end user’s computer. 

As always, it is important to download and install Windows updates or set your computer to do it automatically to install the latest patches and prevent problems.  The two security bulletins are as follows:

MS13-037

MS13-038

Adobe releases patch for 4 Flash Security Holes

If you have Adobe Flash Player 11.6.602.171 and earlier, running on any platform you need to install the latest patch to avoid possibly being enticed to visit a website containing malicious Flash content.  The the worst case scenario, an attacker can execute code on your computer potentially gaining control of it.  

The fix is easy.  Download the latest version of Adobe Flash Player Click Here. 

Adobe has rated this update a Priority 1 for windows users and recommends you apply the update as soon as possible.   If you’ve enabled Flash Player’s recent “silent update” option, you will receive this update automatically.

Microsoft Patch Tuesday-March 2013

 

Most of the patches this month are for Microsoft Office.   Click here to see the official Microsoft release

The most important vulnerabilities are listed below:

There is a Cumulative Security Update for Internet Explorer 6-10. 

There is an Update for Silverlight for vulnerability that could allow Remote Code Execution.

An update for a vulnerability in Microsoft Visio Viewer 2010 that could allow Remote Code Execution

There are vulnerabilities in SharePoint that could allow Elevation of Privilege

An update for a Vulnerability in Microsoft OneNote that could allow information disclosure

Vulnerabilities in Office Outlook for MAC that could allow information disclosure

Vulnerabilities i Kernel-Mode Drivers that could allow elevation of Privilege

You can watch a webcast of this Security Bulletin release by clicking here .

Keeping your machine current by running Windows updates makes your machine more secure.  This can also be done automatically through GlasserTech’s ProActive Care.  With ProActive Care, we update your computer for you.  For more information on ProActive Care give us a call at 516-762-0155 or email us at solutions@glassertech.com.

Updates and more updates. Another reason to get managed services from Glasser Tech

Do you notice while you are sitting there trying to concentrate that you are getting pops ups for updates for Windows, Java, Adobe and other programs?  We know it’s annoying and distracting.  Ultimately, it’s just one more thing to worry about.  Do I need this update? does it matter?.  How does it affect me? 

Again this week Java released an update to fix two NEW flaws. Java is a programming language that enhances web pages. They consider these flaws to be putting you at risk for exposure.  

With Glasser Tech ProActive Care you won’t ever have to worry about updates again.  We take care of all the updates automatically.  So while we do our work, you can do your work with no distractions. 

In addition to updates, Glasser Tech takes care of all of your network monitoring.  We can schedule preventative IT maintenance designed to keep your network operating efficiently. Overall, this reduces the number of emergency incidents you encounter.

Managed services costs so little compared to expensive downtime. 

Glasser Tech Proactive Care offers 24/7, 365 day network monitoring coupled with preventative IT maintenance that ensures optimum network uptime.

Call Glasser Tech today and ask for a complimentary network evaluation.   516-762-0155 or email us at Solutions@glassertech.com

Free Law Firm CLE Seminar

Glasser Tech LLC and Thomson Reuters

Free Lunch & Learn Legal Productivity Seminar

_______________________________________________________________________
CLE Seminar Date:
• Thursday March 7, 2013 - 12pm -1:30 pm
_______________________________________________________________________

The program features top productivity solutions offered by Thomson Reuters.

Michael Glasser and Ken Hale from Glasser Tech LLC will be bring insight to being able to work from anywhere at any time.

To Register Click Here

This class gives you 1 NYMCLE Credits.

Location:  Nassau County Bar Association, 15th & West Streets, Mineola, NY 11501

February 2012 Java Update

Java Emergency Update
This vulnerability affects: All Java Windows and Mac Versions.
How an attacker exploits it:  Multiple vectors of attack, including luring your users to a malicious web page containing specially crafted Java
Impact: This type of attack could result in: the installation of malware; lead to identity theft; the computer could become a botnet - which can then be used in denial-of-service attacks against other sites.
What to do Part 1: Click Here to Download the Patch 7u13 
What to do Part 2: We suggest disabling Java in your Browser unless you absolutely need it. Click Here to Learn How to Disable Java in your Browser
What to do Part 3: If you absolutely need Java enabled in your Web Browser we suggest the following:  Install a Firewall at your office.  Set the Firewall to Block All Java Applets.  Allow Exceptions only for those that are required for your business.  

If you don't have Java, don't install it.   Click Here to see if you have Java enabled

Clients with our Proactive Solution to Patch Management Automatically get the Updates.  

Contact us to find out how you can become "Proactive" instead of "Reactive".

Michael Glasser, Glasser Tech LLC (516) 762-0155

Java Emergency Patch Released...However, we Recommend Disabling Java in your Web Browser

Java Emergency Patch
This vulnerability affects: Java Windows and Mac Versions.
How an attacker exploits it:  The issue could be exploited if someone visits a Web site that's been set up with malicious code to take advantage of the hole.
Impact: This type of attack could result in: the installation of malware; lead to identity theft; the computer could become a botnet - which can then be used in denial-of-service attacks against other sites.
What to do Part 1: Click Here to Download the Patch
What to do Part 2: We suggest disabling Java in your Browser unless you absolutely need it. Click Here to Learn How to Disable Java in your Browser
What to do Part 3: If you absolutely need Java enabled in your Web Browser we suggest the following:  Install a Firewall at your office.  Set the Firewall to Block All Java Applets.  Allow Exceptions only for those that are required for your business.  

If you don't have Java, don't install it.   Click Here to see if you have Java enabled

Clients with our Proactive Solution to Patch Management Automatically get the Updates.  

Contact us to find out how you can become "Proactive" instead of "Reactive".

Michael Glasser, Glasser Tech LLC (516) 762-0155

Microsoft Issues Critical Internet Explorer Fix for Versions 6, 7 & 8

Internet Explorer Fix it Patch· 
This vulnerability affects: Internet Explorer Versions 6, 7, & 8.
How an attacker exploits it:  All the user needs to do is visit the Website and their system gets infected without clicking or doing anything on the site.
Impact: This type of attack installs Malware on your system.
What to do: Click Here to Download the Fix

Clients with our Proactive Solution to Patch Management Automatically get the Updates.  

Contact us to find out how you can become "Proactive" instead of "Reactive".

Michael Glasser, Glasser Tech LLC (516) 762-0155

Critical Microsoft Word, Internet Explorer & Windows Updates

Microsoft Word Patch
· This vulnerability affects: All Currently Support Versions of Microsoft Word - 2003 - 2007 - 2010.
· How an attacker exploits it:  An attacker tricks a user into opening a malicious RTF document.
· Impact: per Microsoft: An attacker who successfully exploited this vulnerability could take complete control of an affected system.  An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
· What to do: Click Here to Download the Update 

Internet Explorer Patch
· This vulnerability affects: Internet Explorer Versions 6, 7, 8, 9 and 10
· How an attacker exploits it:  An attacker tricks a user into opening a malicious website.
· Impact: An attacker who successfully exploited these vulnerabilities could gain the same user rights as the current user. 
· What to do: Click Here to Download the Update 

Multiple Microsoft Windows Patches
· This vulnerability affects: Supported Versions of the Microsoft Windows Operating System as well as Windows Server
· How an attacker exploits it:  Multiple points of attack, including enticing users to view maliciously crafted fonts or to view directories with specially crafted files or folder names.
· Impact: An attacker could gain control of the computer.
· What to do: Click Here to Download the Updates

Clients with our Proactive Solution to Patch Management Automatically get the Updates.  

Contact us to find out how you can become "Proactive" instead of "Reactive".

Michael Glasser, Glasser Tech LLC (516) 762-0155

Adobe Flash Critical Update

Summary:

· This vulnerability affects: Adobe Flash Player 11.5.502.110  and earlier, running on all platforms
· How an attacker exploits it: Multiple methods of attack, including enticing your users to open malicious files or visit specially crafted web sites
· Impact: In the worst case, an attacker can execute code on the user's computer, potentially gaining control of it
· What to do: Download and install the latest version of Adobe Flash Player

Exposure:

Adobe Flash Player displays interactive, animated web content called Flash. Although Flash is optional, 99% of PC users download and install it to view multimedia web content. It runs on many operating systems, including mobile operating systems like Android.


Solution Path:

Adobe has released new versions of Flash Player to fix these issues. If you have Adobe Flash Player installed you should download and install the new version immediately. If you've enabled Flash Player's recent "silent update" option, you will receive this update automatically.

· Download Flash Player Update for your Computer

Worldox Special Promotion

 

Worldox is offering discounts for competitive upgrades!

If you are a firm that currently uses another document management system (DMS), you can convert to Worldox GX3 Professional for the upgrade price of only $375.00, a $50.00 per license discount.

Maintenance contracts are required to qualify, at the standard $88.00 per license.

Contact Glasser Tech for details.  This special offer is effective immediately and good through December 31, 2012.

Worldox is powerful-low cost-easy to use document management system.

Don’t miss out on this special offer!

Call us today at 516-762-0155. 

 

 

Internet Explorer is under attack again!

 

Microsoft announced this week in a security update that Internet Explorer 9 and earlier versions are vulnerable to attack if a user views a website hosting malicious code.  They have received reports of a small number of targeted attacks and are working to develop a security update to address this issue. 

Glasser Tech recommends downloading and using a different browser.  We suggest either Google Chrome or Mozilla Firefox.  

If you just have to have Internet Explorer as your browser, Microsoft recommends that you do the following:

Deploy the Enhanced Mitigation Experience Toolkit (EMET)
This will help prevent exploitation by providing mitigations to help protect against this issue and should not affect usability of websites.

Set Internet and local intranet security zone settings to "High" to block ActiveX Controls and Active Scripting in these zones.
This will help prevent exploitation but may affect usability; therefore, trusted sites should be added to the Internet Explorer Trusted Sites zone to minimize disruption.

CAVEAT:  Putting the local zone into a high-security mode generally comes with some unexpected consequences. Some business applications may not function correctly with that setting because they generally use things like ActiveX scripting.

Configure Internet Explorer to prompt before running Active Scripting or to disable Active Scripting in the Internet and local intranet security zones
This will help prevent exploitation but can affect usability, so trusted sites should be added to the Internet Explorer Trusted Sites zone to minimize disruption.

MIcrosoft also encourages you to make sure your computer is protected by applying all software updates and using anti-virus and anti-spyware software as well as avoid clicking on suspicious links or opening email messages from unfamiliar senders. 

 

 

Glasser Tech Gives Back Referral Program

We have been thinking about a way to give something back.  Not just with regard to our business but with regard to society.   We have come up with a great idea and hope to get you involved. 

It's our new Client Referral Program!

Here's how it works:

• If you know someone that would benefit from our services, we would ask that you give them our name and number and have them give us a call. 

• If they sign on with us as a client, we will give you 10% off your next consulting bill and make a $100 dollar donation to your favorite charity, in your name. 

It's a win-win situation overall.  We get something, you get something and then we pay it forward to someone else.

There's no limit to the number of referrals you may submit. 

Michael Glasser, Glasser Tech LLC (516) 762-0155

Oracle Patches Critical Java Bugs used to Commandeer Computers

 

What is Java?

Java is a programming language and computing platform first released by Sun Microsystems in 1995. It is the underlying technology that powers state-of-the-art programs including utilities, games, and business applications. Java runs on more than 850 million personal computers worldwide, and on billions of devices worldwide, including mobile and TV devices.

Why do I need Java?

There are lots of applications and websites that won't work unless you have Java installed, and more are created every day. Java is fast, secure, and reliable. From laptops to cell phones to the Internet, Java is everywhere!

Why should I update my Java?

Last week, Oracle, the creator of the Java programming framework released a critical security patch that should be installed immediately. A vulnerability was found that allows malicious hackers to take control of a user's computer through the web browser. The malware has been found on more than 100 websites as of this writing.  Unfortunately it took Oracle four months since the discovery of the vulnerability, so it has been propagating on the Internet for some time and has not been contained.  If you have any concerns of whether this vulnerability could affect your firm please contact Glasser Tech at 516-762-0155.

For more information here is a link to the Java Security Alert from Oracle:  http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html

iPad for Lawyers CLE Seminar

A Glasser Tech Seminar at the Queens County Bar Association

_______________________________________________________________________
CLE Seminar Date:
• Thursday September 13, 2012 - 12pm -1:30 pm

_______________________________________________________________________


Unleash the Power of your iPad

Untether yourself from the office and increase productivity and billable hours. Learn how to use the iPad for document creation, collaboration, legal research, connecting to your office, as well as applications that are legal specific and so much more... Current and prospective iPad owners will walk away empowered to increase their productivity immediately.

Some of the topics include:
• best apps for attorneys
• courtroom applications
• legal research
• hardware and web browsing tips
• managing mail, calendar and contacts
• multitasking and iTunes
• adding files and synching
• document creation
• connecting to your office

This class gives you 1 1/2 CLE credits.

Location:  Queens County Bar Association, 90-35 148 Street, Jamaica, NY 11435

Click here to send us your contact information.  We will email you the registration form.

Patch Tuesday takes care of key XML and IE 9 issues

   

July 11, 2012

 

Yesterday was Patch Tuesday and this time Microsoft released 9 bulletins addressing 16 vulnerabilities. 

The most critical patch is a fix for an XML vulnerability that has been used for the past month and is now being integrated.  There are four version of XML and only one is being attacked at this point.  However, this is an important patch to install.

The second most critical bulletin is for Internet Explorer 9, addressing two critical problems that could enable code to be executed on your computer when accessing a malicious webpage, allowing  the device to be remote controlled.

The third critical bulletin is for the Windows MDAC component.  It is used for database access.

 

Additional bulletins are important but not deemed critical like the above.  It is important to make sure your computer is up to date.   Make sure your Windows updates get installed regularly if not automatically.    To see the latest Microsoft Security Bulletins Click Here .

More Patches for Internet Explorer

 

Severity: High

Summary:

· This vulnerability affects: All current versions of Internet Explorer, running on all current versions of Windows

· How an attacker exploits it: Typically, by enticing one of your users to visit a malicious web page

· Impact: Various, in the worst case an attacker can execute code on your user's computer, gaining complete control of it

· What to do: Deploy the appropriate Internet Explorer patches immediately, or let Windows Automatic Update do it for you

 

Exposure:

In a security bulletin released June 12, 2012, as part of Patch Day, Microsoft describes 13 new vulnerabilities in Internet Explorer (IE) 9.0 and earlier, running on all current versions of Windows. Microsoft rates the aggregate severity of these new flaws as Critical.

The 13 vulnerabilities differ technically, but many of them share the same general scope and impact. More than half the flaws are remote code execution vulnerabilities having to do with how IE handles various HTML objects, elements, and properties. If an attacker can lure one of your users to a web page containing malicious code, he could exploit any one of these vulnerabilities to execute code on that user’s computer, inheriting that user’s privileges. Typically, Windows users have local administrative privileges, in which case the attacker can exploit these flaws to gain complete control of the victim’s computer.

The remaining issues include less severe cross-site scripting (XSS) flaws and information disclosure vulnerabilities.

If you’d like to know more about the technical differences between these flaws, see the “Vulnerability Information” section of Microsoft’s bulletin. Technical differences aside, the remote code execution flaws pose significant risk to IE users, and allow attackers to launch drive-by download attacks. Furthermore, attackers often hijack legitimate web sites and force them to serve this kind of malicious web code. So these types of flaws can affect you no matter what types of web sites you frequent on the Internet. If you use IE, you should download and install the cumulative update immediately.

 

Solution Path:

These updates fix serious issues. You should download, test, and deploy the appropriate IE patches immediately, or let Windows Automatic Update do it for you. You can find links to the various IE updates in the “Affected and Non-Affected Software” section of Microsoft's IE security bulletin.

 

References:

· MS Security Bulletin MS12-037

Adobe Flash Update

 

Summary:

· This vulnerability affects: Adobe Flash Player  11.2.202.233 and earlier, running on all platforms (including Android)

· How an attacker exploits it: By enticing users to visit a website containing malicious Flash content

· Impact: In the worst case, an attacker can execute code on the user's computer, potentially gaining control of it

· What to do: Download and install the latest version of Adobe Flash Player (version 11.2.202.235 for computers)

Exposure:

Adobe Flash Player displays interactive, animated web content called Flash. Although Flash is optional, 99% of PC users download and install it to view multimedia web content. It runs on many operating systems, including mobile operating systems like Android.

In a security bulletin released today, Adobe announced a patch that fixes a critical vulnerability in Adobe Flash Player 11.2.202.233 and earlier, running on all platforms (including Android platforms).

Adobe's bulletin describes the serious flaw as an "object confusion" vulnerability (CVE-2012-0779), and warns that attackers are currently exploiting it in the wild. They don't describe the object confusion issue in detail, but they do describe its impact. If an attacker can entice one of your users to visit a malicious website, or into handling specially crafted Flash content, he could exploit this flaw to execute code on that user's computer, with that user's privileges. If your users have administrator privileges, the attacker could gain full control of their computers.

So far, Adobe has only seen attackers exploiting this vulnerability against Windows computers, which is why they rate this a "Priority 1" issue for Windows, and recommend you apply the updates as soon as possible (within 72 hours).   However, the vulnerability technically affects other platforms as well, so I recommend you update any Flash capable device as soon as you can.

Solution Path

Adobe has released new versions of Flash Player (11.2.202.235 for computers and the latest 11.1.11x.x for Android) to fix these issues. If you allow Adobe Flash in your network, you should download and install the new versions immediately. If you've enabled Flash Player's recent "silent update" option, you will receive this update automatically.

· Download Flash Player for your computer:

· Download the latest Android Flash Player from Google Play [Visit from your Android device]

NOTE: Chrome ships with its own version of Flash, built-in. If you use Chrome as you web browser, you will also have to update it separately, though Chrome often receive its updates automatically.

Beware of this Facebook phishing scam

You may get an email that looks similar to this.  It looks legitimate because it has the Facebook font, the blue color that Facebook uses.  But if you click on the link you are taken somewhere else entirely. 

 

 

 

If you get something that looks suspicious to you in your email it probably is.  It is always best just to delete the email and not click on any of the links.  If you want to be sure, contact our office and we can assist you.

Glasser Tech 516-762-0155.

Fraudulent American Express Email

 

If you get an email claiming to be from American Express asking you to change or update your email address, DO NOT click on the links.  While this email looks legitimate, it is a fraudulent phishing email and the links do not point to American Express.

 

Please alert your staff to not respond or click on the links in this email.  AS always, if you have any question or doubt regarding an email is is always better to contact our office before opening.  Glasser Tech 516-762-0155.

LinkedIn for Lawyers CLE Seminar

Event Location:            Nassau County Bar Association

CLE Seminar Date:        Tuesday, May 22^nd - 8:30am-10am

LinkedIn for Lawyers - Unleash the Power of LinkedIn – “The Professional Network”.  Learn what LinkedIn is. Understand the Ethical Implications of Social Media.  This course will demonstrate how to setup LinkedIn, maximize your profile and use connections to foster business relationships.  Whether you already have a LinkedIn account or not, you will walk away with the knowledge to grow your practice.

Some of the topics include:
• What LinkedIn can do for you
• Setting up an account
• Maximizing your profile
• Connecting with people
• Ethical Implications
• Group participation
• Utilizing Status Updates to increase exposure


This class gives you 1.5 CLE credits.
- Ethics and Professionalism    .50
- Law Practice Management   1.00


Serminar Co-Presented by: 
Allison Shields, Legal Ease Consulting, Inc.
Michael Glasser, Glasser Tech LLC

To sign up Contact Maureen at the Nassau County Bar Association Tech Center: (516) 747-4464 ext. 228