<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="snappages.com/1.0" -->
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	>
	<channel>
		<title>IT Support Perth</title>
		<link>http://itsupportperth.com.au</link>
		<atom:link href="http://itsupportperth.com.au/blog/rss" rel="self" type="application/rss+xml" />
		<description>IT Support Perth is a leading IT &amp; Computer Support Consultancy in Perth, WA. Call 08-6102-5700 for all your support requirements. We can provide fixed-cost IT Support &amp; Maintenance packages to suit any size of budget.</description>
		<pubDate>Wed, 24 Nov 2010 08:58:00 +0000</pubDate>
		<generator>http://snappages.com</generator>
		<language>en</language>
		<item>
			<title>Great Pros &amp;amp; Cons comparison of Google Apps</title>
			<link>http://itsupportperth.com.au/blog/2010/11/24/great-pros-cons-comparison-of-google-apps</link>
			<comments>http://itsupportperth.com.au/blog/2010/11/24/great-pros-cons-comparison-of-google-apps</comments>
			<pubDate>Wed, 24 Nov 2010 08:58:00 +0000</pubDate>
			<dc:creator></dc:creator>
			<guid isPermaLink="false">http://itsupportperth.com.au/blog/2010/11/24/great-pros-cons-comparison-of-google-apps</guid>
			<description><![CDATA[If you're looking at a hosted email solution for a small business, Google Apps can be a great alternative to hosted Exchange.<BR/><BR/><A HREF="http://www.smallbusinesstechtips.com/small-business-software/google-apps-ready-for-primetime/" TARGET="_blank">Check out this article</A> for a great quick pros &amp; cons comparison between Google Apps [...]]]></description>
			<content:encoded><![CDATA[If you're looking at a hosted email solution for a small business, Google Apps can be a great alternative to hosted Exchange.<BR/><BR/><A HREF="http://www.smallbusinesstechtips.com/small-business-software/google-apps-ready-for-primetime/" TARGET="_blank">Check out this article</A> for a great quick pros &amp; cons comparison between Google Apps &amp; Exchange<br><br>]]></content:encoded>
		</item>
		<item>
			<title>Email Hosting for Perth Businesses...</title>
			<link>http://itsupportperth.com.au/blog/2010/09/24/email-hosting-for-perth-businesses</link>
			<comments>http://itsupportperth.com.au/blog/2010/09/24/email-hosting-for-perth-businesses</comments>
			<pubDate>Fri, 24 Sep 2010 08:30:00 +0000</pubDate>
			<dc:creator>BT</dc:creator>
			<guid isPermaLink="false">http://itsupportperth.com.au/blog/2010/09/24/email-hosting-for-perth-businesses</guid>
			<description><![CDATA[   We're now offering our Email Hosting solution to new clients as well as existing clients. Our Exchange hosted platform is a fantastic way to move to Exchange Server 2010 without a massive upfront cost.<BR/><BR/>We've had a lot of success migrating clients from old Exchange or Small Business Server 2003 systems who've hit the 75gb limitation of [...]]]></description>
			<content:encoded><![CDATA[   We're now offering our Email Hosting solution to new clients as well as existing clients. Our Exchange hosted platform is a fantastic way to move to Exchange Server 2010 without a massive upfront cost.<BR/><BR/>We've had a lot of success migrating clients from old Exchange or Small Business Server 2003 systems who've hit the 75gb limitation of mailbox storage across to the new platform and they're loving it.<br><br><BR/><BR/>The main benefits of moving to a hosted email platform like ours are:<BR/><BR/><UL><LI>no big upfront Microsoft licensing costs or hardware costs: typically Exchange 2010 licenses with appropriate backup software could set you back $5,000 or $10,000, for a small business particularly in a post GFC world, thats a lot of money</LI><LI>reduced ongoing support costs: for many businesses, hosting Exchange means they no longer have to look after it themselves and in some cases, means once less server to manage</LI><LI>access to powerful features of Exchange 2010: new Exchange server features like the new more powerful webmail client and full support for iPad, iPhone &amp; Android phone and access to email remotely without needing unreliable VPN connections means more mobility and flexibility for you and your team</LI></UL><br><br>If you are interested in learning more about the solution or looking at an upgrade to Exchange 2010 I'd encourage you to get in touch. Call us on <B><I>(08) 6102 1400</I></B> or fill out the form on our <A HREF="/contact-us.htm" TARGET="_self">Contact Us</A> page to find out more info.<br><br>]]></content:encoded>
		</item>
		<item>
			<title>Huge OS X Update Fixes Almost 100 Security Flaws </title>
			<link>http://itsupportperth.com.au/blog/2010/04/04/huge-os-x-update-fixes-almost-100-security-flaws</link>
			<comments>http://itsupportperth.com.au/blog/2010/04/04/huge-os-x-update-fixes-almost-100-security-flaws</comments>
			<pubDate>Sun, 04 Apr 2010 14:05:00 +0000</pubDate>
			<dc:creator></dc:creator>
			<guid isPermaLink="false">http://itsupportperth.com.au/blog/2010/04/04/huge-os-x-update-fixes-almost-100-security-flaws</guid>
			<description><![CDATA[<B>Severity: High</B><BR/>30 March, 2010<BR/><BR/><B>Summary:</B><BR/><UL><LI><B>These vulnerabilities affect</B>: All current versions of OS X 10.5.x (Leopard) and OS X 10.6.x (Snow Leopard) </LI><LI><B>How an attacker exploits them</B>: Multiple vectors of attack, including visiting malicious websites or enticing one of your users into [...]]]></description>
			<content:encoded><![CDATA[<B>Severity: High</B><BR/>30 March, 2010<BR/><BR/><B>Summary:</B><BR/><UL><LI><B>These vulnerabilities affect</B>: All current versions of OS X 10.5.x (Leopard) and OS X 10.6.x (Snow Leopard) </LI><LI><B>How an attacker exploits them</B>: Multiple vectors of attack, including visiting malicious websites or enticing one of your users into downloading and viewing various malicious media files </LI><LI><B>Impact:</B> Various results; in the worst case, an attacker executes code on your user's computer, potentially gaining full control of it </LI><LI><B>What to do</B>: OS X administrators should download, test and install Security Update 2010-002 or the 10.6.3 update.</LI></UL><br><br><B>Exposure:</B><BR/><BR/>Today, Apple released a <A HREF="http://support.apple.com/kb/HT4077" TARGET="_self">security update</A> to fix vulnerabilities in all current versions of OS X. The update fixes well over 90 (number based on <A HREF="http://cve.mitre.org/" TARGET="_self">CVE-IDs</A>) security issues in around 43 components that ship as part of OS X, including Quicktime, CoreMedia, and Mail. Some of these vulnerabilities allow attackers to gain full control of your OS X machines, so we rate this update Critical. Apply it as soon as you can. Some of the fixed vulnerabilities include:<BR/><BR/><B><I>* Various QuickTime Code Execution Vulnerabilities. </I></B><BR/>Quicktime is the multimedia (video and audio) player that ships with OS X. According to Apple, QuickTime suffers from nine code execution vulnerabilities involving its inability to properly handle maliciously crafted movie files. Though the flaws differ technically, they share the exact same scope and impact.  If an attacker can lure one of your users into playing a malicious movie (perhaps hosted on a malicious website), he could exploit this flaw to either crash QuickTime or to execute attack code on that user's computer. By default, the attacker would only execute code with that user's privileges. However, the attacker could also leverage other <A HREF="http://www.watchguard.com/glossary/e.asp#elevation" TARGET="_self">privilege elevation flaws</A> described in Apple's alert to gain complete control of your user's Mac.<BR/><BR/><B><I>* Multiple Image-related Memory Corruption Vulnerabilities</I></B>. <BR/>ImageIO and Image RAW are both OS X components that help the operating system handle various types of image files. Both components suffer from memory-related vulnerabilities involving the way they handle certain types of image files. Though the vulnerabilities differ technically, they share a very similar scope and impact. If an attacker can get a victim to view a specially crafted picture (perhaps hosted on a malicious website), he could exploit any of these flaws to either crash the viewing application or to execute attack code on the victim's computer. By default, the attacker would only execute code with that user's privileges. However, the attacker could also leverage other flaws in Apple's alert to gain complete control of your user's Mac.<BR/><BR/><B><I>* Disk Images Code Execution Vulnerabilities. </I></B><BR/>Disk Images is the OS X component that mounts the <A HREF="http://en.wikipedia.org/wiki/Apple_Disk_Image" TARGET="_self">DMG disk image</A> files commonly used to install software on Mac computers. Apple's OS X update fixes two code execution vulnerabilities in Disk Images. Though they differ technically, an attacker could leverage both in the same way. By enticing you to mount a malicious DMG file, an attacker could exploit either of these flaws to execute code on your computer, with your privileges. Like the previous flaws, the attacker could then leverage other vulnerabilities to gain complete control of your Mac. <BR/><BR/>Apple's alert also describes many other vulnerabilities, including some <A HREF="http://www.watchguard.com/glossary/d.asp#DoS" TARGET="_self">Denial of Service (DoS)</A>  <BR/>flaws, information disclosure issues, and <A HREF="http://www.watchguard.com/glossary/c.asp#XSS" TARGET="_self">Cross Site Scripting (XSS)</A> vulnerabilities. Components patched by this security update include: <BR/><UL><LI>AppKit</LI><LI>Application Firewall</LI><LI>AFP Server</LI><LI>Apache</LI><LI>ClamAV</LI><LI>CoreAudio</LI><LI>CoreMedia</LI><LI>CoreTypes</LI><LI>CUPS</LI><LI>curl</LI><LI>Cyrus IMAP</LI><LI>Cyrus SASL</LI><LI>Desktop Services</LI><LI>Disk Images</LI><LI>Directory Services</LI><LI>Dovecot</LI><LI>Event Monitor</LI><LI>FreeRADIUS</LI><LI>FTP Server</LI><LI>iChat Server</LI><LI>ImageIO</LI><LI>Image RAW</LI><LI>Libsystem</LI><LI>Mail</LI><LI>Mailman</LI><LI>MySQL</LI><LI>OS Services</LI><LI>Password Server </LI><LI>perl</LI><LI>PHP </LI><LI>Podcast Producer</LI><LI>Preferences</LI><LI>PS Normalizer</LI><LI>Quicktime</LI><LI>Ruby</LI><LI>Server Admin</LI><LI>SMB</LI><LI>Tomcat</LI><LI>unzip</LI><LI>vim</LI><LI>Wiki Server</LI><LI>X11</LI><LI>xar</LI></UL> <BR/>Please refer to <A HREF="http://support.apple.com/kb/HT4077" TARGET="_self">Apple's OS X 10.5.x and 10.6.x </A>alert for more details<BR/><BR/>As an aside, if you haven't installed the <A HREF="http://support.apple.com/kb/HT4070" TARGET="_self">Safari update</A> Apple released earlier this month, we recommend you install it as well. <br><br><B>Solution Path</B>:<BR/>Apple has released OS X Security Update 2010-002 and 10.6.3 to fix these security issues. OS X administrators should download, test, and deploy the corresponding update as soon as they can.<BR/><UL><LI><A HREF="http://support.apple.com/kb/DL1021" TARGET="_self">Security Update 2010-001 (Leopard) </A> </LI><LI><A HREF="http://support.apple.com/kb/DL1022" TARGET="_self">Security Update 2010-001 (Leopard Server) </A></LI><LI><A HREF="http://support.apple.com/kb/DL1018" TARGET="_self">Mac OS X v10.6.3 Update (Snow Leopard)</A></LI><LI><A HREF="http://support.apple.com/kb/DL1018" TARGET="_self">Mac OS X v10.6.3 Update (Snow Leopard Combo)</A></LI><LI><A HREF="http://support.apple.com/kb/DL1020" TARGET="_self">Mac OS X Server v10.6.3 Update (Snow Leopard Server)</A>  </LI><LI><A HREF="http://support.apple.com/kb/DL1019" TARGET="_self">Mac OS X Server v10.6.3 Update (Snow Leopard Server Combo)</A></LI></UL><BR/><I>Note:</I> If you have trouble figuring out which of these patches corresponds to your version of OS X, we recommend that you let OS X's Software Update utility pick the correct updates for you automatically.<br><br><B>For All Users</B>:<BR/>These flaws enable many diverse exploitation methods. Some of the exploits are local, meaning that your perimeter firewall never encounters the attack (unless you use firewalls internally between departments). Installing these updates, therefore, is the most secure course of action.<BR/><BR/><B>Status:</B><BR/>Apple has released updates to fix these issues.<BR/><BR/><B>References:</B><BR/><UL><LI><A HREF="http://support.apple.com/kb/HT4077" TARGET="_self">OS X 10.5x and 10.6.x March 2010 Security Update </A></LI></UL><BR/>This alert was researched and written by Corey Nachreiner, CISSP.<br><br>]]></content:encoded>
		</item>
		<item>
			<title>Microsoft Mends Zero Day IE Flaw with Out-of-Cycle Update</title>
			<link>http://itsupportperth.com.au/blog/2010/04/04/microsoft-mends-zero-day-ie-flaw-with-out-of-cycle-update</link>
			<comments>http://itsupportperth.com.au/blog/2010/04/04/microsoft-mends-zero-day-ie-flaw-with-out-of-cycle-update</comments>
			<pubDate>Sun, 04 Apr 2010 13:47:00 +0000</pubDate>
			<dc:creator></dc:creator>
			<guid isPermaLink="false">http://itsupportperth.com.au/blog/2010/04/04/microsoft-mends-zero-day-ie-flaw-with-out-of-cycle-update</guid>
			<description><![CDATA[<B>Severity: High</B><BR/>30 March, 2010<BR/><BR/><B>Summary</B>:<BR/><UL><LI><B>This vulnerability affects</B>: Internet Explorer 8 and all earlier versions, running on all current versions of Windows </LI><LI><B>How an attacker exploits it</B>: By enticing one of your users to visit a malicious web page  </LI><LI><B>Impact:</B> In the worst [...]]]></description>
			<content:encoded><![CDATA[<B>Severity: High</B><BR/>30 March, 2010<BR/><BR/><B>Summary</B>:<BR/><UL><LI><B>This vulnerability affects</B>: Internet Explorer 8 and all earlier versions, running on all current versions of Windows </LI><LI><B>How an attacker exploits it</B>: By enticing one of your users to visit a malicious web page  </LI><LI><B>Impact:</B> In the worst case, an attacker can execute code on your user's computer, gaining complete control of it </LI><LI><B>What to do</B>: Deploy the appropriate Internet Explorer patches immediately </LI></UL><br><br><B>Exposure:</B><BR/><BR/>In an out-of-cycle <A HREF="http://www.microsoft.com/technet/security/bulletin/ms10-018.mspx" TARGET="_self">security bulletin</A> released today, Microsoft describes nine new vulnerabilities in Internet Explorer (IE) 8.0 and earlier versions, running on all current versions of Windows (including Windows 7 and Windows Server 2008). One of the corrected vulnerabilities includes a critical zero day flaw that attackers have exploited in the wild since at least early March. For more information about this previously reported zero day IE flaw, see our <A HREF="http://www.watchguard.com/RSS/showarticle.aspx?pack=RSS.IE.0day.0310" TARGET="_self">Wire post</A> on the subject.<BR/><BR/>The nine vulnerabilities differ technically, but seven of them share the same general scope and impact. These seven flaws involve various memory corruption issues having to do with how IE handles certain HTML objects and memory constructs. If an attacker can lure one of your users to a web page containing malicious web code, he could exploit any one of these vulnerabilities to execute code on that user's computer, inheriting that user's privileges. Typically, Windows users have local administrative privileges. In that case, the attacker could exploit these flaws to gain complete control of the victim's computer. The remaining two vulnerabilities are less risky information disclosure flaws.<BR/><BR/>If you'd like to know more about the technical differences between these flaws, see the "Vulnerability Information" section of <A HREF="http://www.microsoft.com/technet/security/bulletin/ms10-018.mspx" TARGET="_self">Microsoft's bulletin</A>. Technical differences aside, all of these IE flaws pose significant risk - especially, the zero day vulnerability that attackers have been exploiting in the wild. You should download and install this emergency IE patch immediately.<BR/><BR/>Keep in mind, today's attackers commonly hijack legitimate web pages and booby-trap them with malicious code. They do this via hosted web ads or through <A HREF="http://en.wikipedia.org/wiki/Sql_injection" TARGET="_self">SQL injection</A> attacks. Even recognizable and authentic websites could pose a risk to your users if hijacked in this way. <br><br><B>Solution Path</B>:<BR/><B>These patches fix serious issues</B>. You should download, test, and deploy the appropriate IE patches immediately, or let Windows Automatic Update do it for you.<BR/><BR/><I>Internet Explorer 5.01 </I><BR/><UL><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?FamilyID=389da7a9-e0a3-4b5d-801e-0a38fc55dcec&amp;displaylang=en" TARGET="_self">For Windows 2000 </A> </LI></UL><BR/><I>Internet Explorer 6.0 </I><BR/><UL><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?FamilyID=daf199c4-da56-4a7f-80e6-3936ce5c267b&amp;displaylang=en" TARGET="_self">For Windows 2000</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?FamilyID=2f2caa01-5cd1-45cb-9995-e34d933920d4&amp;displaylang=en" TARGET="_self">For Windows XP</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?FamilyID=6c711387-6853-477c-917e-820a97613cf9&amp;displaylang=en" TARGET="_self">For Windows XP x64</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?FamilyID=dc77f1c9-8240-42d9-aee9-30ac4f33bde7&amp;displaylang=en" TARGET="_self">For Windows Server 2003</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?FamilyID=2be85462-28ec-4184-a326-0459554b7213&amp;displaylang=en" TARGET="_self">For Windows Server 2003 x64</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?FamilyID=04abea55-ea2f-423f-b410-5536ea184ea3&amp;displaylang=en" TARGET="_self">For Windows Server 2003 Itanium</A> </LI></UL><BR/><I>Internet Explorer 7.0 </I><BR/><UL><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?FamilyID=167ed896-d383-4dc0-9183-cd4cb73e17e7&amp;displaylang=en" TARGET="_self">For Windows XP</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?FamilyID=aadb1d97-5cec-45ed-9967-aaf41a0bcdac&amp;displaylang=en" TARGET="_self">For Windows XP x64</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?FamilyID=e957a7cf-e5ca-454d-b199-ec8fe6a6a2bf&amp;displaylang=en" TARGET="_self">For Windows Server 2003</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?FamilyID=cb0e39f8-9730-4454-a0e3-479b610b1591&amp;displaylang=en" TARGET="_self">For Windows Server 2003 x64 </A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?FamilyID=7ebd99b4-da6b-4dff-9f89-6a86d275a3da&amp;displaylang=en" TARGET="_self">For Windows Server 2003 Itanium</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?FamilyID=511aba0e-6f15-42cf-9c5d-b2f3e215b5a8&amp;displaylang=en" TARGET="_self">For Windows Vista</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?FamilyID=c8933a45-62a7-4c19-be30-02e3a461f081&amp;displaylang=en" TARGET="_self">For Windows Vista x64</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?FamilyID=42f8c1f2-ee55-47af-b113-8d9f4bd40c8f&amp;displaylang=en" TARGET="_self">For Windows Server 2008 *</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?FamilyID=769043b5-df52-4446-9bd8-dc37d9fa00df&amp;displaylang=en" TARGET="_self">For Windows Server 2008 x64 *</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?FamilyID=c1c2309d-22db-4dbf-ad95-3219847cd42d&amp;displaylang=en" TARGET="_self">For Windows Server 2008 Itanium</A> </LI></UL><BR/><I>Internet Explorer 8.0 </I><BR/><UL><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?familyid=46172617-293a-44c7-95b6-18202ab06a41&amp;displaylang=en" TARGET="_self">For Windows XP </A></LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?familyid=284d70ea-24a3-4e67-a2a8-e9f272f728db&amp;displaylang=en" TARGET="_self">For Windows XP x64</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?familyid=53fc3285-63c4-487f-ad9a-7e1673aeffc7&amp;displaylang=en" TARGET="_self">For Windows Server 2003 </A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?familyid=5201a0c5-8162-4809-b9d1-0e972b0f0066&amp;displaylang=en" TARGET="_self">For Windows Server 2003 x64</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?familyid=c9584689-5196-4840-927c-23c8038f3382&amp;displaylang=en" TARGET="_self">For Windows Vista</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?familyid=50809cc3-6baa-41b4-ba0a-596a1dd846ed&amp;displaylang=en" TARGET="_self">For Windows Vista x64</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?familyid=c69a6dfe-66b1-4426-96a5-d64000296e76&amp;displaylang=en" TARGET="_self">For Windows Server 2008 *</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?familyid=e16c10d2-896d-48f3-bc76-5fa70881396a&amp;displaylang=en" TARGET="_self">For Windows Server 2008 x64 *</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?familyid=c0145563-428e-47b6-b245-b59dce88ac0e&amp;displaylang=en" TARGET="_self">For Windows 7</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?familyid=6172dbec-6bfc-40bd-a0d4-67c39fb41b87&amp;displaylang=en" TARGET="_self">For Windows 7 x64</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?familyid=8b7c664b-8612-458f-bd0a-cf28b67f8374&amp;displaylang=en" TARGET="_self">For Windows Server 2008</A> </LI><LI><A HREF="http://www.microsoft.com/downloads/details.aspx?familyid=82fa6f47-002f-4943-888c-2e852675e76e&amp;displaylang=en" TARGET="_self">For Windows Server 2008 x64</A> </LI></UL><BR/>* Note: These flaws do not affect Windows Server 2008 administrators who installed using the Server Core installation option.<br><br><B>For All WatchGuard Users</B>:<BR/><BR/>These attacks travel as normal-looking HTTP traffic, which you must allow if your network users need to access the World Wide Web. Therefore, the patches above are your best solution.<BR/><BR/><B>Status:</B><BR/>Microsoft has released patches to fix these vulnerabilities.<BR/><BR/><B>References:</B><BR/><UL><LI><A HREF="http://www.microsoft.com/technet/security/bulletin/Ms10-018.mspx" TARGET="_self">MS Security Bulletin MS10-018</A> </LI></UL><BR/>This alert was researched and written by Corey Nachreiner, CISSP.<br><br>]]></content:encoded>
		</item>
		<item>
			<title>Malicious Media Files Usurp QuickTime and iTunes</title>
			<link>http://itsupportperth.com.au/blog/2010/04/04/malicious-media-files-usurp-quicktime-and-itunes</link>
			<comments>http://itsupportperth.com.au/blog/2010/04/04/malicious-media-files-usurp-quicktime-and-itunes</comments>
			<pubDate>Sun, 04 Apr 2010 13:34:00 +0000</pubDate>
			<dc:creator></dc:creator>
			<guid isPermaLink="false">http://itsupportperth.com.au/blog/2010/04/04/malicious-media-files-usurp-quicktime-and-itunes</guid>
			<description><![CDATA[<B>Malicious Media Files Usurp QuickTime and iTunes</B><BR/>Severity: Medium<BR/>30 March, 2009 [...]]]></description>
			<content:encoded><![CDATA[<B>Malicious Media Files Usurp QuickTime and iTunes</B><BR/>Severity: Medium<BR/>30 March, 2009<br><br><B>Summary:</B><BR/><BR/><UL><LI><B>These vulnerabilities affect</B>: QuickTime 7.6.x and iTunes 9.x running on any platform </LI><LI><B>How an attacker exploits them</B>: Multiple vectors of attack, including enticing your user to view maliciously crafted images or videos, or to visit a malicious website </LI><LI><B>Impact:</B> In the worst case, an attacker could execute code on your user's computer, potentially gaining complete control of it </LI><LI><B>What to do</B>: Install QuickTime 7.6.6 and iTunes 9.1 for Windows or OS X </LI></UL><br><br><B>Exposure:</B><BR/><BR/>Today, Apple released two security updates [ <A HREF="http://support.apple.com/kb/HT4104" TARGET="_self">Quick Time</A> / <A HREF="http://support.apple.com/kb/HT4105" TARGET="_self">iTunes</A> ] to fix several vulnerabilities in QuickTime 7.6.x and iTunes 9.x running on Windows or OS X computers. <BR/><BR/>The <A HREF="http://support.apple.com/kb/HT4104" TARGET="_self">QuickTime update</A> fixes sixteen security issues (number based on <A HREF="http://cve.mitre.org/" TARGET="_self">CVE-ID</A>s) involving how QuickTime handles certain image and video files. While the vulnerabilities differ technically, they share the same basic scope and impact. If an attacker can trick one of your users into viewing a maliciously crafted image or video in QuickTime, he could exploit any of these flaws to execute code on that user's computer, with that user's privileges. In Windows environments, users typically have local administrator access on their computers, meaning the attacker could leverage these vulnerabilities to gain complete control of their machines. However, OS X separates user accounts from the root account. So attackers can only exploit these flaws to gain user-level privileges on OS X machines.<BR/><BR/>Apple's <A HREF="http://support.apple.com/kb/HT4105" TARGET="_self">iTunes update </A>corrects seven security issues (number based on <A HREF="http://cve.mitre.org/" TARGET="_self">CVE-ID</A>s), the worst of which have to do with how iTunes handles certain image and media files. Like the QuickTime flaws above, if an attacker can trick one of your users into viewing a maliciously crafted image or media file in iTunes, the worst of these flaws could be exploited to execute code on that user's computer, with that user's privileges. In Windows, this often means the attacker gains control of your user's computer. On a Mac, the attacker only gains user-level privileges. However, another of the iTunes vulnerabilities can allow local users to gain system privileges, so an attacker could leverage a combination of these vulnerabilities to gain complete control of a Mac as well.<BR/><BR/>If you allow the use of QuickTime or iTunes in your network, we recommend you download and install the latest versions as soon as possible. Keep in mind, iTunes now ships with QuickTime. If you have iTunes, you'll likely need both updates. <br><br><B>Solution Path</B>:<BR/><BR/>Apple has released QuickTime 7.6.6 and iTunes 9.1 to fix these security issues. Windows and OS X administrators should download, test, and deploy the appropriate updates as soon as possible.<BR/><BR/><UL><LI><A HREF="http://support.apple.com/kb/DL837" TARGET="_self">QuickTime 7.6.6 for Windows </A> </LI><LI><A HREF="http://support.apple.com/kb/DL761" TARGET="_self">QuickTime 7.6.6 for OS X Leopard </A></LI><LI><A HREF="http://www.apple.com/itunes/download/" TARGET="_self">iTunes 9.1 for Windows or Mac  </A></LI></UL><br><br><B>For All Users</B>:<BR/><BR/>Because these QuickTime flaws involve so many different media types (many of which are essential for doing business), trying to block exploitable file types using your firewall may not be the best way to support your organization's mission. Instead, your best solution is to download and install Apple's fixes.<br><br><B>Status:</B><BR/><BR/>Apple has released updates to fix these issues.<br><br><B>References:</B><BR/><BR/><UL><LI><A HREF="http://support.apple.com/kb/HT4104" TARGET="_self">Apple's March 2010 QuickTime advisory </A> </LI><LI><A HREF="http://support.apple.com/kb/HT4105" TARGET="_self">Apple's March 2010 iTunes advisory</A> </LI></UL><BR/>This alert was researched and written by Corey Nachreiner, CISSP.<br><br>]]></content:encoded>
		</item>
		<item>
			<title>Network Cabling: How not to do it!</title>
			<link>http://itsupportperth.com.au/blog/2010/03/31/network-cabling-how-not-to-do-it</link>
			<comments>http://itsupportperth.com.au/blog/2010/03/31/network-cabling-how-not-to-do-it</comments>
			<pubDate>Wed, 31 Mar 2010 15:45:00 +0000</pubDate>
			<dc:creator>Network Team</dc:creator>
			<guid isPermaLink="false">http://itsupportperth.com.au/blog/2010/03/31/network-cabling-how-not-to-do-it</guid>
			<description><![CDATA[We're almost at the end of a network and email server migration. We're moving the client from a Novell Netware system with Groupwise email to a Windows domain with Exchange 2010 email. While it's been quite a complex migration it has run smoothly for the most part and we're just tying up some loose ends.<BR/><BR/>Once of those loose ends is the [...]]]></description>
			<content:encoded><![CDATA[We're almost at the end of a network and email server migration. We're moving the client from a Novell Netware system with Groupwise email to a Windows domain with Exchange 2010 email. While it's been quite a complex migration it has run smoothly for the most part and we're just tying up some loose ends.<BR/><BR/>Once of those loose ends is the network patch panel where the telephone and network cabling connects to various equipment in the server room. This one is going to be a massive job to tidy up, we've inherited a disasterous looking network patch panel from the client's previous IT provider. Have a look at the state of this:<br><br><br><br>We'll post some new photos once the tidy up is complete - unfortunately for the client, its going to take a considerable amount of downtime on a weekend and cost to rectify this poorly management patch panel.<BR/><BR/>Your server room should look neat and tidy to the naked eye - if your network cabling looks something like the photo above then its time to start asking your current IT provider some questions!<br><br>]]></content:encoded>
		</item>
		<item>
			<title>ITSupportPerth now on twitter</title>
			<link>http://itsupportperth.com.au/blog/2010/03/19/itsupportperth-now-on-twitter</link>
			<comments>http://itsupportperth.com.au/blog/2010/03/19/itsupportperth-now-on-twitter</comments>
			<pubDate>Fri, 19 Mar 2010 13:58:00 +0000</pubDate>
			<dc:creator>Marketing Team</dc:creator>
			<guid isPermaLink="false">http://itsupportperth.com.au/blog/2010/03/19/itsupportperth-now-on-twitter</guid>
			<description><![CDATA[<A HREF="http://twitter.com/itsupportperth" TARGET="_self">@ITSupportPerth</A> is now on Twitter<BR/><BR/>Follow us for up to date ITSupportPerth news, tips &amp; tricks<BR/><BR/><A HREF="http://twitter.com/itsupportperth" TARGET="_blank">@ITSUPPORTPERTH </A> [...]]]></description>
			<content:encoded><![CDATA[<A HREF="http://twitter.com/itsupportperth" TARGET="_self">@ITSupportPerth</A> is now on Twitter<BR/><BR/>Follow us for up to date ITSupportPerth news, tips &amp; tricks<BR/><BR/><A HREF="http://twitter.com/itsupportperth" TARGET="_blank">@ITSUPPORTPERTH </A><br><br>]]></content:encoded>
		</item>
		<item>
			<title>Need Apple Mac &amp; iPhone Support?</title>
			<link>http://itsupportperth.com.au/blog/2010/01/15/need-apple-mac-iphone-support</link>
			<comments>http://itsupportperth.com.au/blog/2010/01/15/need-apple-mac-iphone-support</comments>
			<pubDate>Fri, 15 Jan 2010 08:55:00 +0000</pubDate>
			<dc:creator></dc:creator>
			<guid isPermaLink="false">http://itsupportperth.com.au/blog/2010/01/15/need-apple-mac-iphone-support</guid>
			<description><![CDATA[You Mac not doing what it should be or need your new Mac notebook or iPhone integrated with your Microsoft Exchange email server? We can help!<BR/><BR/>IT Support Perth has been providing Mac support for quite sometime. Our technicians are fully versed in all things Mac and can get you up and running in no time.<BR/><BR/><B>Quick Troubleshooting [...]]]></description>
			<content:encoded><![CDATA[<br><br>You Mac not doing what it should be or need your new Mac notebook or iPhone integrated with your Microsoft Exchange email server? We can help!<BR/><BR/>IT Support Perth has been providing Mac support for quite sometime. Our technicians are fully versed in all things Mac and can get you up and running in no time.<BR/><BR/><B>Quick Troubleshooting tips for your Mac</B><BR/>If you are experiencing a problem with your Mac, here's a couple of quick things you can try before calling...<BR/><BR/><B>Reboot your Mac</B><BR/>Yes, contrary to popular belief, Apple PCs sometimes need a reboot too. To do this, click the Apple menu icon in the top left hand corner and select reboot. The reboot process will take approximately 5 minutes<BR/><BR/><B>Run software update on your Mac</B><BR/>Again, just like Windows PCs, Mac OS needs patches sometimes too. Quite often quirky behaviour in specific programs can be fixed by running software update, particularly when it comes to Microsoft Entourage or other Office Mac product.<BR/><BR/>To run Software Update, click the Apple menu icon in the top left hand corner and choose Software Update. This will run Software Update which will check for updates for your installed software. If it finds missing updates it will give you the option to download and install. Note that some patches may take 10 - 15 minutes or more to install. If you're short on time, click Show Details, it will give you a list of the specific patches and you can select patches for the application which is playing up.<BR/><BR/>To avoid problems in the future, you should setup your Mac to run software update automatically on a weekly basis. To do this open System Preferences from the Apple menu, click Software Update about two thirds of the way down the page and set the Scheduled Check to run Weekly.<BR/><BR/><B>Call Now for Apple Mac Support</B><BR/>If you do need help with your Mac or integrating your Mac, iPhone or other Apple hardware with your Windows Server environment <B><I>call us on 08-6102-5700</I></B> and one of the consultants from our Apple Support Team will be able to assist.<br><br>]]></content:encoded>
		</item>
		<item>
			<title>Adobe Reader Vulnerability Affects 9.2 and Earlier</title>
			<link>http://itsupportperth.com.au/blog/2010/01/14/adobe-reader-vulnerability-affects-92-and-earlier</link>
			<comments>http://itsupportperth.com.au/blog/2010/01/14/adobe-reader-vulnerability-affects-92-and-earlier</comments>
			<pubDate>Thu, 14 Jan 2010 19:59:00 +0000</pubDate>
			<dc:creator></dc:creator>
			<guid isPermaLink="false">http://itsupportperth.com.au/blog/2010/01/14/adobe-reader-vulnerability-affects-92-and-earlier</guid>
			<description><![CDATA[<B>Severity: High</B><BR/>16 December, 2009 <BR/><BR/><B>Summary:</B><BR/><BR/><UL><LI><B>This vulnerability affects</B>: Adobe Reader and Acrobat 9.2 and earlier, on Windows, Mac, and Unix computers </LI><LI><B>How an attacker exploits it:</B> By enticing your users into viewing a maliciously crafted PDF document using javascript [...]]]></description>
			<content:encoded><![CDATA[<B>Severity: High</B><BR/>16 December, 2009 <BR/><BR/><B>Summary:</B><BR/><BR/><UL><LI><B>This vulnerability affects</B>: Adobe Reader and Acrobat 9.2 and earlier, on Windows, Mac, and Unix computers </LI><LI><B>How an attacker exploits it:</B> By enticing your users into viewing a maliciously crafted PDF document using javascript </LI><LI><B>Impact:</B> An attacker can potentially gain control of  your system   </LI><LI><B>What to do</B>: Implement the workarounds described in the Solution Path section of this alert </LI></UL><br><br><B>Exposure:</B><BR/><BR/>Adobe has confirmed a critical zero day vulnerability in Adobe Reader and Acrobat 9.2 and earlier versions that could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being actively exploited in the wild. This was first referenced by Adobe in a blog posting &lt;<A HREF="http://www.tailorednews.com/r/L2pdJIDvGLLqkAj8d5.html" TARGET="_self">http://www.tailorednews.com/r/L2pdJIDvGLLqkAj8d5.html</A>&gt; on Monday and they have since  issued a security bulletin. Adobe plans to make available an update to Adobe Reader and Acrobat by January 12, 2010 to resolve the issue. Users running Microsoft DEP ("Data Execution Prevention") functionality available in more recent versions of Microsoft Windows are at reduced risk:<BR/><BR/><UL><LI>All versions of Adobe Reader 9 running on Windows Vista SP1 or Windows 7 </LI><LI>Acrobat 9.2 running on Windows Vista SP1 or Windows 7 </LI><LI>Acrobat and Adobe Reader 9.2 running on Windows XP SP3 </LI><LI>Acrobat and Adobe Reader 8.1.7 running on Windows XP SP3, Windows Vista SP1, or Windows 7 </LI></UL><BR/>With the DEP mitigation in place, the impact of this exploit has been reduced to a Denial of Service during Adobe's testing.<BR/>Since attackers are actively exploiting this vulnerability in the wild and Adobe hasn't had time to patch it yet, this flaw poses a serious risk to Adobe Reader users. Until a patch is available, we recommend you implement the workarounds described below to mitigate the risk of this attack. <br><br><B>Solution Path:</B><BR/>Adobe has not had time to release a patch for this zero day vulnerability. However, the workarounds described below should mitigate the risk of attacks currently circulating in the wild. <BR/><BR/><UL><LI><B>Inform your users of this vulnerability</B>. Advise them to remain wary of unsolicited PDF documents arriving via email. If they don't absolutely need the document, and don't trust the entity it came from, they should avoid opening it until you patch Adobe Reader. </LI><LI><B>Disable JavaScript in Adobe Reader.</B> According to Adobe, users can mitigate the issue by disabling JavaScript in Adobe Reader. To disable JavaScript in Adobe Reader, click <B>Edit =&gt; Preferences =&gt; JavaScript</B> and then uncheck <B>Enable Acrobat JavaScript</B>. Keep in mind, this prevents JavaScript from running in legitimate PDF documents as well. </LI><LI><B>Use a gateway device, like your Firebox, to block PDF file</B>s. If your users can't download PDF files, these exploits won't affect them. Unfortunately, doing this blocks legitimate PDF files as well. Nonetheless, depending on your business needs, you may still want to block PDF files until a patch is available. </LI></UL><br><br><B>For All WatchGuard Users:</B><BR/><BR/>Many of WatchGuard's Firebox models can block incoming PDF files. However, most administrators prefer to allow these file types for business purposes. Nonetheless, if PDF files are not absolutely necessary to your business, you may consider blocking them using the Firebox's HTTP and SMTP proxy until a patch is made available. If you decide you want to block PDF documents, follow the links below for video instructions on using your Firebox proxy's content blocking features to block .pdf files by their file extension: <BR/><BR/><I>Firebox X Edge running 10.x </I><BR/><BR/><UL><LI>How do I block files with the FTP proxy? &lt;<A HREF="http://www.tailorednews.com/r/fgd5NHv1jff3AbKx59.asp" TARGET="_self">http://www.tailorednews.com/r/fgd5NHv1jff3AbKx59.asp</A>&gt; </LI><LI>How do I block files with the HTTP proxy? &lt;<A HREF="http://www.tailorednews.com/r/0Z59wU1sK00Fb47G92.asp" TARGET="_self">http://www.tailorednews.com/r/0Z59wU1sK00Fb47G92.asp</A>&gt; </LI><LI>How do I block files with the POP3 proxy? &lt;<A HREF="http://www.tailorednews.com/r/zT92DmsY7zzk4rej2g.asp" TARGET="_self">http://www.tailorednews.com/r/zT92DmsY7zzk4rej2g.asp</A>&gt; </LI><LI>How do I block files with the SMTP proxy &lt;<A HREF="http://www.tailorednews.com/r/nC2gvBYVennArWMKgZ.asp" TARGET="_self">http://www.tailorednews.com/r/nC2gvBYVennArWMKgZ.asp</A>&gt; </LI><LI><I>Firebox X Core and X Peak running Fireware 10.x </I></LI><LI>How do I block files with the FTP proxy? &lt;<A HREF="http://www.tailorednews.com/r/lPgZ1tVqMllbW8p7ZT.asp" TARGET="_self">http://www.tailorednews.com/r/lPgZ1tVqMllbW8p7ZT.asp</A>&gt; </LI><LI>How do I block files with the HTTP proxy? &lt;<A HREF="http://www.tailorednews.com/r/aOZTsLq3paa48xdeTC.asp" TARGET="_self">http://www.tailorednews.com/r/aOZTsLq3paa48xdeTC.asp</A>&gt; </LI><LI>How do I block files with the POP3 proxy? &lt;<A HREF="http://www.tailorednews.com/r/aOZTsLq3paa48xdeTC.asp" TARGET="_self">http://www.tailorednews.com/r/oRTCYf3FdoorxG5MCP.asp</A>&gt; </LI><LI>How do I block files with the SMTP proxy? &lt;<A HREF="http://www.tailorednews.com/r/hQPOqzkA9hh8jK2dOR.html" TARGET="_self">http://www.tailorednews.com/r/uXCPV0Fk5uuWGj9pPO.asp</A>&gt; </LI></UL><br><br><B>Status:</B> <BR/>Adobe plans to make available an update to Adobe Reader and Acrobat by January 12, 2010 to resolve the issue.<BR/>  <BR/><B>References:</B> <BR/><BR/><UL><LI>Adobe Security Bulletin &lt;<A HREF="http://www.tailorednews.com/r/hQPOqzkA9hh8jK2dOR.html" TARGET="_self">http://www.tailorednews.com/r/hQPOqzkA9hh8jK2dOR.html</A>&gt; </LI><LI>Security Focus &lt;<A HREF="http://www.tailorednews.com/r/hQPOqzkA9hh8jK2dOR.html" TARGET="_self">http://www.tailorednews.com/r/iIOR3nAb2iixK7g5RX.htm</A>&gt; </LI></UL><br><br>]]></content:encoded>
		</item>
		<item>
			<title>Update: Adobe Reader Vulnerability Affects 9.2 and Earlier</title>
			<link>http://itsupportperth.com.au/blog/2010/01/14/update-adobe-reader-vulnerability-affects-92-and-earlier</link>
			<comments>http://itsupportperth.com.au/blog/2010/01/14/update-adobe-reader-vulnerability-affects-92-and-earlier</comments>
			<pubDate>Thu, 14 Jan 2010 19:31:00 +0000</pubDate>
			<dc:creator></dc:creator>
			<guid isPermaLink="false">http://itsupportperth.com.au/blog/2010/01/14/update-adobe-reader-vulnerability-affects-92-and-earlier</guid>
			<description><![CDATA[<B>Adobe Patch Fixes Both Zero Day and New Vulnerabilities</B><BR/><B>Severity: </B><B><U>High</U></B><BR/><B>12  January 2010</B> [...]]]></description>
			<content:encoded><![CDATA[<B>Adobe Patch Fixes Both Zero Day and New Vulnerabilities</B><BR/><B>Severity: </B><B><U>High</U></B><BR/><B>12  January 2010</B><br><br><B>Update:</B><BR/>On 16 December, 2009, we alerted LiveSecurity subscribers about a zero day vulnerability in Adobe Reader which attackers could exploit to execute code on your machine, potentially gaining complete control of it. When we first reported this issue, reports warned that attackers were already exploiting this flaw in the wild. We promised to update our alert when Adobe released a patch for this issue. Today they did. Adobe's security bulletin <A HREF="http://www.tailorednews.com/r/RGrWa2hi3OOSwDFVW8.html" TARGET="_self"><B>http://www.tailorednews.com/r/RGrWa2hi3OOSwDFVW8.html</B></A> announces the release of Reader 9.3, which fixes this zero day vulnerability, as well as at least seven other security vulnerabilities. They also announced updates for Acrobat, which suffers from these vulnerabilities as well. As usual, Adobe's bulletin does not describe the flaws in much technical detail. However, they do describe their impact. In general, if an attacker can entice one of your users into downloading and opening a maliciously crafted PDF document (.pdf), he can exploit these vulnerabilities to execute code on that user's computer, with that user's privileges. If your user has local administrative privileges, the attacker gains full control of the user's machine. If you use Adobe Reader or Acrobat on any platform, we recommend you download and install Adobe's updates as soon as you can. See below for details. <br><br><B>Solution Path</B>:<BR/>Adobe has released Reader 9.3 and Acrobat, 8.2 to fix these vulnerabilities. You should download, test, and deploy the appropriate updates throughout your network as soon as you can:<BR/><BR/><B>Adobe Reader 9.3 </B><BR/><UL><LI><I>For Windows</I> &lt;<A HREF="http://www.tailorednews.com/r/XjW8ogiyFRRJDvkq8x.jsp" TARGET="_self">http://www.tailorednews.com/r/XjW8ogiyFRRJDvkq8x.jsp</A>&gt; </LI><LI><I>For Mac</I> &lt;<A HREF="http://www.tailorednews.com/r/IeGjiC6cbIIDsY4kjK.jsp" TARGET="_self">http://www.tailorednews.com/r/IeGjiC6cbIIDsY4kjK.jsp</A>&gt; </LI><LI><I>For UNIX</I> &lt;<A HREF="http://www.tailorednews.com/r/HMjKyPcS4HHvYVrAK7.jsp" TARGET="_self">http://www.tailorednews.com/r/HMjKyPcS4HHvYVrAK7.jsp</A>&gt; </LI></UL><BR/><B>Adobe Acrobat </B><BR/><UL><LI><I>Pro and Pro Extended for Windows </I>&lt;<A HREF="http://www.tailorednews.com/r/UpK7EOSJrUU1VqWb7e.jsp" TARGET="_self">http://www.tailorednews.com/r/UpK7EOSJrUU1VqWb7e.jsp</A>&gt; </LI><LI><I>3D for Windows</I> &lt;<A HREF="http://www.tailorednews.com/r/md7e6RJNWmmsq384eM.jsp" TARGET="_self">http://www.tailorednews.com/r/md7e6RJNWmmsq384eM.jsp</A>&gt; </LI><LI><I>Pro for Mac</I> &lt;<A HREF="http://www.tailorednews.com/r/B5eMcXNw8BBY3FxrMp.jsp" TARGET="_self">http://www.tailorednews.com/r/B5eMcXNw8BBY3FxrMp.jsp</A>&gt; </LI></UL><BR/><I>Note: If you use Adobe Updater, it may automatically install the corresponding updates for you.</I><br><br><B>For All WatchGuard Users:</B><BR/>If you previously customized your Firebox's proxy policies to temporarily block PDF documents (.pdf), you may want to remove those customizations after applying Adobe's patch. This will allow your users to download legitimate PDF documents again. For additional details about the vulnerability, and as a convenient reference, we reproduce our original 16 December alert below.<BR/><BR/><B>You can also find it in the LiveSecurity</B> <B>Latest Broadcasts</B> &lt;<A HREF="http://www.tailorednews.com/r/t9MpSQwDxttVFkGWpd.asp" TARGET="_self">http://www.tailorednews.com/r/t9MpSQwDxttVFkGWpd.asp</A>&gt; archive. <br><br>]]></content:encoded>
		</item>
		<item>
			<title>Great Program about IT &amp; Network Security all business owners should see...</title>
			<link>http://itsupportperth.com.au/blog/2009/11/16/great-program-about-it-network-security-all-business-owners-should-see</link>
			<comments>http://itsupportperth.com.au/blog/2009/11/16/great-program-about-it-network-security-all-business-owners-should-see</comments>
			<pubDate>Mon, 16 Nov 2009 16:37:00 +0000</pubDate>
			<dc:creator></dc:creator>
			<guid isPermaLink="false">http://itsupportperth.com.au/blog/2009/11/16/great-program-about-it-network-security-all-business-owners-should-see</guid>
			<description><![CDATA[A few weeks ago I found myself watching a 4Corners show on computer &amp; network security which highlighted how vulnerable computers and computer networks are from a security standpoint.<BR/><BR/>It's often difficult to convince business owners that computer security is a real problem and a real threat to their business and livelihood. Too often, [...]]]></description>
			<content:encoded><![CDATA[A few weeks ago I found myself watching a 4Corners show on computer &amp; network security which highlighted how vulnerable computers and computer networks are from a security standpoint.<BR/><BR/>It's often difficult to convince business owners that computer security is a real problem and a real threat to their business and livelihood. Too often, business owners are only convinced that they need to actively address computer security only when their network has been hacked and they've lost time, money, their data or all three.<BR/><BR/>Anyway, I highly recommend <A HREF="http://www.abc.net.au/4corners/special_eds/20090817/cyber/" TARGET="_blank">you check out the documentary</A> when you get a moment. You can <A HREF="http://www.abc.net.au/4corners/special_eds/20090817/cyber/" TARGET="_blank">watch it online</A>.<BR/><BR/>Here's a quick network security checklist too that will help you quickly assess how secure or well protected your network is:<BR/><BR/><UL><LI>Do all staff have unique passwords that expire or are changed regularly?</LI><LI>Are all your business PCs running antivirus software that has a current subscription and can be managed from a central location?</LI><LI>Do you have email spam filtering that also protects you against viruses that also sits outside your network?</LI><LI>Does your server have antivirus software installed?</LI><LI>Do you run nightly backups of your company data?</LI><LI>Is your backup media regularly taken offsite to protect against fire and theft?</LI><LI>Do you have multiple backup methods to provide protection in cases where the primary method fails?</LI><LI>Is your wireless network at home &amp; work encrypted?</LI><LI>Do you use unique passwords for various online services you access regularly?</LI><LI>Are you staff storing data on the server or is it sitting on their laptops or desktops where it's not regularly backed up?</LI><LI>Is your network protected behind a business grade firewall with UTM (unified threat management) to protect you against trojans, spyware &amp; phishing?</LI><LI>Does your IT provider perform regular server, network &amp; IT maintenance to ensure systems are running in peak condition and are not vulnerable to attack?</LI><LI>Do you regularly apply security updates on your PCs &amp; Servers?</LI></UL><BR/><B>Looking for help with computer security or are maybe looking at a network audit? Why not give us a call on 08-6102-5700 to talk about how we can help you today.</B><BR/><BR/><A HREF="http://www.abc.net.au/4corners/special_eds/20090817/cyber/" TARGET="_blank">Four Corners IT Security Documentary</A><BR/><BR/><BR/><BR/><BR/><BR/><br><br>]]></content:encoded>
		</item>
		<item>
			<title>Do you use Internet Banking? Have you patched these security holes?</title>
			<link>http://itsupportperth.com.au/blog/2009/10/15/do-you-use-internet-banking-have-you-patched-these-security-holes</link>
			<comments>http://itsupportperth.com.au/blog/2009/10/15/do-you-use-internet-banking-have-you-patched-these-security-holes</comments>
			<pubDate>Thu, 15 Oct 2009 09:55:00 +0000</pubDate>
			<dc:creator></dc:creator>
			<guid isPermaLink="false">http://itsupportperth.com.au/blog/2009/10/15/do-you-use-internet-banking-have-you-patched-these-security-holes</guid>
			<description><![CDATA[Microsoft released a whole bunch of security patched yesterday (14-October-09) and one of these relates to critical flaws in Internet Explorer. Details are below; if you need help with your PC patching &amp; maintenance, call us now.<BR/><BR/><BR/><B>October's Critical IE Cumulative Update Corrects Four Code Execution Flaws </B><BR/><B>SEVERITY: [...]]]></description>
			<content:encoded><![CDATA[Microsoft released a whole bunch of security patched yesterday (14-October-09) and one of these relates to critical flaws in Internet Explorer. Details are below; if you need help with your PC patching &amp; maintenance, call us now.<BR/><BR/><BR/><B>October's Critical IE Cumulative Update Corrects Four Code Execution Flaws </B><BR/><B>SEVERITY: HIGH</B><BR/>13 October, 2009<BR/><BR/>SUMMARY:<BR/><UL><LI>This vulnerability affects: Internet Explorer 8 and earlier versions, running on all current version of Windows </LI><LI>How an attacker exploits it: By enticing one of your users to visit a web page or link containing malicious code </LI><LI>Impact: In the worst case, the attacker can execute code on your user's computer, gaining complete control of it </LI><LI>What to do: Deploy the appropriate Internet Explorer patches immediately </LI></UL><BR/>EXPOSURE:<BR/>In a security bulletin released today as part of its monthly patch update, Microsoft describes four new vulnerabilities in Internet Explorer (IE) 8.0 and earlier versions, running on all current versions of Windows (including Windows 7 and Windows Server 2008).<BR/><BR/>Although the four vulnerabilities differ technically, they share the same general scope and impact. Most of them involve memory corruption flaws having to do with how IE handles various HTML objects or data streams. If an attacker can lure one of your users to a web page containing malicious web code, he can exploit these vulnerabilities to execute code on that user's computer, inheriting that user's privileges. Typically, Windows users have local administrative privileges. In that case, the attacker could exploit these flaws to gain complete control of the victim's computer. <BR/><BR/>Keep in mind, today's attackers commonly hijack legitimate web pages and booby-trap them with malicious code. They do this via hosted web ads or through SQL injection attacks. Even recognizable and authentic websites could pose a risk to your users if hijacked in this way. <BR/>If you'd like to know more about the technical differences between these flaws, see the "Vulnerability Information" section of Microsoft's bulletin. Technical differences aside, all of these IE flaws pose significant risk, you should download and install the IE cumulative patch as soon as possible. <BR/><BR/>SOLUTION PATH:<BR/>These patches fix serious issues. You should download, test, and deploy the appropriate IE patches as soon as possible.<BR/><BR/>* Note: These flaws do not affect Windows Server 2008 administrators who installed using the Server Core installation option.<BR/><BR/>STATUS:<BR/>Microsoft has released patches to fix these vulnerabilities.<BR/><BR/>REFERENCES:<BR/>	<A HREF="http://www.microsoft.com/technet/security/bulletin/Ms09-054.mspx" TARGET="_blank">MS Security Bulletin MS09-054 </A><br><br>]]></content:encoded>
		</item>
		<item>
			<title>How's your server maintenance going?</title>
			<link>http://itsupportperth.com.au/blog/2009/10/09/hows-your-server-maintenance-going</link>
			<comments>http://itsupportperth.com.au/blog/2009/10/09/hows-your-server-maintenance-going</comments>
			<pubDate>Fri, 09 Oct 2009 10:23:00 +0000</pubDate>
			<dc:creator>ITSupportPerth</dc:creator>
			<guid isPermaLink="false">http://itsupportperth.com.au/blog/2009/10/09/hows-your-server-maintenance-going</guid>
			<description><![CDATA[Microsoft announced yesterday that it will deliver it's largest ever patch release this coming Tuesday. The patches address flaws in every vewrsion of Windows as well as Internet Explorer, Office and SQL Server.<BR/><BR/>How are you planning to deploy these patches?<BR/><BR/>ITSupportPerth can take care of all your server and PC patching and [...]]]></description>
			<content:encoded><![CDATA[Microsoft announced yesterday that it will deliver it's largest ever patch release this coming Tuesday. The patches address flaws in every vewrsion of Windows as well as Internet Explorer, Office and SQL Server.<BR/><BR/>How are you planning to deploy these patches?<BR/><BR/>ITSupportPerth can take care of all your server and PC patching and maintenance needs - from $5 per week per desktop and $59 per week per server.<BR/><BR/>Call us now on 08-6102-5700 for more information.<BR/><BR/><A HREF="http://www.arnnet.com.au/article/321546/microsoft_plans_monster_patch_tuesday_next_week?rid=-100" TARGET="_blank">Click here</A> for more information on the upcoming patches.<br><br>]]></content:encoded>
		</item>
		<item>
			<title>Spam problems? Get a free 14-day trial of our Spam Filtering Solution</title>
			<link>http://itsupportperth.com.au/blog/2009/10/07/spam-problems-get-a-free-14-day-trial-of-our-spam-filtering-solution</link>
			<comments>http://itsupportperth.com.au/blog/2009/10/07/spam-problems-get-a-free-14-day-trial-of-our-spam-filtering-solution</comments>
			<pubDate>Wed, 07 Oct 2009 21:59:00 +0000</pubDate>
			<dc:creator></dc:creator>
			<guid isPermaLink="false">http://itsupportperth.com.au/blog/2009/10/07/spam-problems-get-a-free-14-day-trial-of-our-spam-filtering-solution</guid>
			<description><![CDATA[Got some serious spam problems you need to take care of? Our SpamScreen Spam Filtering solution will fix it for good!<BR/><BR/>SpamScreen is a relatively new service ITSupportPerth offers and is a spam filter, antivirus product &amp; anti-phishing product all in one. SpamScreen also scans your outbound email for viruses and malicious content and [...]]]></description>
			<content:encoded><![CDATA[<br><br>Got some serious spam problems you need to take care of? Our SpamScreen Spam Filtering solution will fix it for good!<BR/><BR/>SpamScreen is a relatively new service ITSupportPerth offers and is a spam filter, antivirus product &amp; anti-phishing product all in one. SpamScreen also scans your outbound email for viruses and malicious content and learns what sort of email constitutes spam and what email is genuine so it gets even better over time!<br><br><br><br><BR/><BR/>We believe SpamScreen is the perfect solution to your spam problems because:<BR/><UL><LI>There's absolutely no software to manage</LI><LI>SpamScreen is charged on a per mailbox basis so you're not stuck paying for software you don't use, particularly handy for companies that engage a lot of short term contractors</LI><LI>SpamScreen sits OUTSIDE your network, so it blocks viruses before they get to your server offering an additional layer of protection</LI><LI>Because SpamScreen is outside your network, it will dramatically reduce the amount of internet traffic coming into your network both speeding up your internet connection AND reducing your internet bills!</LI><LI>You'll get detailed reports on how well SpamScreen is performing, who your biggest email users are and how much money your spend on SpamScreen is actually saving you!</LI><LI>Your staff can manage and release their own emails directly, so no more calls for IT help when a genuine message gets accidentally blocked!</LI><LI>SpamScreen comes with a <B>no obligation 14-day </B><B><U>FREE</U></B><B> trial</B> so you can test the service before committing any money to it!</LI><LI><B>No minimum contract period</B>, SpamScreen is billed on a monthly basis so at most all you need to provide is 30-days notice to disable the service!</LI><LI><B>SpamScreen is only $1.29 per week per mailbox!</B></LI></UL><BR/><DIV ALIGN="CENTER"><B><U>Call us now on 08-6102-5700 to arrange your FREE trial today!</U></B></DIV><br><br><br><br>]]></content:encoded>
		</item>
		<item>
			<title>Cisco Firewall/Router Security Update</title>
			<link>http://itsupportperth.com.au/blog/2009/09/28/cisco-firewallrouter-security-update</link>
			<comments>http://itsupportperth.com.au/blog/2009/09/28/cisco-firewallrouter-security-update</comments>
			<pubDate>Mon, 28 Sep 2009 11:55:00 +0000</pubDate>
			<dc:creator></dc:creator>
			<guid isPermaLink="false">http://itsupportperth.com.au/blog/2009/09/28/cisco-firewallrouter-security-update</guid>
			<description><![CDATA[Following their plan to implement a twice-yearly patch cycle falling on the fourth Wednesday of March and September, today marks Cisco's biannual patch day for September 2009, with eleven security advisories released. Most of these advisories cover security vulnerabilities that affect devices running Cisco's Internetwork Operating System (IOS) [...]]]></description>
			<content:encoded><![CDATA[Following their plan to implement a twice-yearly patch cycle falling on the fourth Wednesday of March and September, today marks Cisco's biannual patch day for September 2009, with eleven security advisories released. Most of these advisories cover security vulnerabilities that affect devices running Cisco's Internetwork Operating System (IOS) software. IOS is the operating system that runs on most Cisco routers and switches. However, two of the advisories also cover vulnerabilities in Unified Communications Manager (UCM), which is Cisco's enterprise-level, IP telephony call-processing system.<BR/><BR/><A HREF="http://it-support-perth.posterous.com/urgent-watchguard-livesecurity-update-23-09-0" TARGET="_blank">More information available here</A><br><br>]]></content:encoded>
		</item>
		<item>
			<title>Is your network ready for daylight savings?</title>
			<link>http://itsupportperth.com.au/blog/2009/09/20/is-your-network-ready-for-daylight-savings</link>
			<comments>http://itsupportperth.com.au/blog/2009/09/20/is-your-network-ready-for-daylight-savings</comments>
			<pubDate>Sun, 20 Sep 2009 23:56:00 +0000</pubDate>
			<dc:creator></dc:creator>
			<guid isPermaLink="false">http://itsupportperth.com.au/blog/2009/09/20/is-your-network-ready-for-daylight-savings</guid>
			<description><![CDATA[It's that time of year again when daylight savings kicks in. The three year trial of daylight savings in WA is finished now and the eastern states move their clocks forward on the 4th of October.<BR/><BR/>If your PCs and servers aren't up to date and haven't been patched with the latest Windows Patches then you're in for some trouble! Your PCs and [...]]]></description>
			<content:encoded><![CDATA[<br><br>It's that time of year again when daylight savings kicks in. The three year trial of daylight savings in WA is finished now and the eastern states move their clocks forward on the 4th of October.<BR/><BR/>If your PCs and servers aren't up to date and haven't been patched with the latest Windows Patches then you're in for some trouble! Your PCs and servers will automatically move their clocks forward on the 4th unless they've been patched with Microsoft Windows patch KB970653. If you don't patch your machines your Outlook appointments will not be correct, your Blackberry handheld device will also display incorrect appointment times and you may have trouble with accounting systems or line of business applications.<BR/><BR/>ITSupportPerth can help to deploy the latest daylight savings patch onto your network no matter how small or large your network is - for more information, call us on 08 6102-5700<br><br>]]></content:encoded>
		</item>
	</channel>
</rss>

