Here is a re-cap of things on my mind; 

from my other web site (ksguy.com):

New internet exploits and bad guys are cropping up all the time.

Now we have the The Telnet Apocalypse:
. Imagine the consequences of 420 million devices which are accepting trivial logins on their Telnet ports. Yes! Researchers found Telnet ports open, on that many IP's.

Originator: internetcensus2012.bitbucket.org Found over a million unique unprotected devices, using botnets, on Port 23 (Telnet).

www.h-online.com/security/news/ US-CERT warns of HP LaserJet printer backdoor.

hp-printers-in-1980s-style-firmware-misconfiguration-boo-boo The US Computer Emergency Response Team (CERT) has issued an intriguing Vulnerability Note to do with a data and password leakage flaw in a number of HP printers.

kb.cert.org/vuls/id/782451 The CERT article from above.

hp.com/us/en/support-drivers HP support/drivers page.


Then there is the SSL problem (with an easy web-test).

SSL/TLS server security as revealed by SSLLabs.com: on their SSLLabs.com/ssltest SSL Server Test site, where even the Department of Homeland Security (DHS) and the United States Computer Emergency Readiness Team (US-CERT) get poor marks. (F's when I checked.)


So, with gaping holes like Telnet and SSL, it looks as though we are in for a lot of bad news this year and beyond. Can you say: "DOS attacks"?



Old Stuff:

Java is still a large security hole that everyone should know about. Please remove it if you can live without it. More info at : java.com - and at krebsonsecurity.com. Consider disabling Shockwave as well.

Here is another GREAT tool for browser security: ( from: https://www.mozilla.org/en-US/plugincheck/ )
Why should I update my plugins? Old plugins can interrupt browsing and waste your time. They increase your risk for attack by malware, viruses, and other security threats. Updated plugins have improvements that make the web better and safer for you.