The Latest in IT Security

UBISOFT Patch Uplay vulnerability

Games developer Ubisoft announced a security patch this week for their Uplay software after admitting that a technical vulnerability has been discovered with the browser plug-in feature.

The vulnerability could allow a third party to exploit Uplay service to run arbitrary and potentially malicious applications.

Uplay comes bundled with a number of Ubisoft titles, which allows gamers to earn points and rewards for in game achievements and performance.

Ubisoft urge their users to update their client offer the following instructions:

Patching:
To update your Uplay client and apply the patch:
1. Close any open web browsers (Internet Explorer, Firefox, Chrome, Opera, etc.). If the web browser is open during the patch it will need to be restarted once the Uplay client ah.
2. Launch the Uplay PC client. The Uplay PC client update will start automatically.

Bogus Olympic Streaming Sites

A number of bogus sites have sprung up offering live streaming of Olympic events alongside actual tickets to Olympic events.

Users are then prompted to provide an email address when signing up for the live streaming service or the attempting to buy tickets. This email address can then be sold on for a profit or, when collected with other data, identity theft.

It’s important to remember that The International Olympic Committee (IOC) grants rights to broadcasters for game coverage. For London 2012, the IOC has granted rights to 33 organizations worldwide, which will broadcast in 200 countries.  So outside of major broadcasting organizations, chances are websites offering streaming coverage probably are not legitimate.

Gameover ZeuS Botnet infects 678,000 PC’s

The peer-to-peer bank-theft botnet Gameover ZeuS  is said to have reached nearly 700,000 systems in size.

Designed to steal banking and other finance details, Zeus malware are notoriously difficult to detect and remove due to their stealthy attributes.

Thought to be the largest banking botnet in the world, Gameover ZeuS’ growth has been attributed to its peer-to-peer design. Unlike the standard “command-and-control” server design the Gameover ZeuS is much more difficult for authorities to shut down as there is no central control point.