Important Update for all Mac Users: Apple Releases 2 Java Update Fixes

[Cute Prince101]

Hi to all my dear :heart: friends & Everyone :heart:

I'm not to sure where i can post this important post thread so I'm going to post it here if it's alright with the Mods and Admins

I'm not to sure if anyone has heard this news which has made headlines around the world recently that over thousands of Mac computers have been affective all around the world from a Flashback Trojan Mal-Ware?

Here is some information i have taken from a news article regarding about this new Mac OSX threat

Apple has released Java for OS X 2012-001 and Java for Mac OS X 10.6 Update 7, featuring a dozen security fixes, including one that has been used a recent variant of the Flashback malware
,CVE-2012-0507. As the information about this update that Apple provides says,

Visiting a web page containing a maliciously crafted untrusted Java applet may lead to arbitrary code execution with the privileges of the current user.

This is exactly what happens with the recent variant of the Flashback malware that we discussed yesterday.

It’s worth noting that Java is no longer provided with Mac OS X 10.7 Lion, but the first time a user needs to run it – when a Java applet loads, or when a user launches a Java applet on their Mac – the system will ask if the user wants to download it. If so, Apple provides the download directly. Apple also maintains their own version of Java. The new version of Java is 1.6.0_31.

Java is quickly becoming a new vector of attack for malware, and the Flashback malware has notably used Java in several different ways, taking advantage of known or unpatched vulnerabilities to get through a Mac’s defenses. Java applets are not affected by Mac OS X’s quarantine system. This means that Mac users do not get a warning dialog when Java applets are downloaded as objects in a web page. This also gets around Apple’s Xprotect malware scanning system, which does not scan objects in web pages.

If you have Java on your Mac, this 66.6 MB update will be available via Software Update. If not, your Mac will offer to download it the first time it is needed.

News Source : Anonym zu www.intego.com/mac-security-blog/apple-releases-java-update-includes-fix-for-vulnerability-exploited-by-flashback-malware/

Added Note : I recommend that all Mac OSX users to update their Macbooks like i have by downloading the Java update that apple has recently released to protect your Macs from this New Malware called Flashback Trojan since it has affected Hundreds & thousand of Mac computers all around the world & a reminder that there is two updates for this Java and both are recommend to be downloaded, but if you don't want to update your Macs you can disable Java on your Macs but i strongly recommended that you choose option 1 and update your Macs C:C

& Here is news article regarding about the second Java update : Anonym zu www.eweek.com/c/a/Security/Apple-Issues-Second-Patch-for-Flashback-Trojan-235688/

I hope all the information above helps my dear :heart: friends & Everyone :heart:

& I wish you all a safe & Happy Easter & I hope you all have a nice Day/Evening and a wonderful weekend, & Take extra care of yourselves

Yours Sincerely :heart:

Cute Prince101 :cheers:

:heart::heart:

 

[topdog]

I better get all my Windows computers ready! Oh, wait! They were already patched weeks ago. But, don't worry Mac Administrators, we'll let everyone know that because of your dedication you will be working over this holiday weeked. Well even save you oen of Bill Gates' famous chocolate billionaire bunnies.

:cheers:

 

[josh_the_hot_boy]

Nothing against Bill Gates but Windows can rot in virus infected hell.

 

[VinceSF]

Mac FTW bitches! lol

 

[gb2000ie]

If you are running a Mac, you're probably not used to security threats being anything more than hypothetical or theoretical, so you are likely in unfamiliar water now!

The salient facts are this:
1) the exploit run silently in the background, so you could be infected without knowing it
2) we now know reliably that about 1% of Macs are affected, that's about the same rate of infection as Confickr on Windows.

What should you do?
1) If you are on an unsupported version of OS X (anything older than 10.6 Snowleopard) you need to update NOW - you are running legacy software and it is impossible to protect yourself from this and from all future Mac security threats
2) If you are on 10.6 or 10.7, run software update now to be sure you have the Java patch
3) consider disabling Java in your web browser. You almost never need it, and it has a poor security record, especially on the Mac
4) consider running AV - times have changed, time to re-evaluate. There are good free choices like ClamXav and the free version of Sophos
5) Check to see whether or not you are infected by either:
- installing an AV and running a full scan
- following the instructions for testing over on the F-Secure website:http://anonym.to/?http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml
- running one of the automated versions of the F-Secure tests that members of the Mac community have written like this one: http://anonym.to/?http://www.bartb.ie/flashback

There is no need to panic, but it is time to start taking security seriously. The honeymoon is over!

B.