# MA-536.112015: MyCERT Advisory - MyCERT Vulnerability and Threat Summary - October 2015

**Date:** 23 Nov 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-536.112015  
**Advisory ID:** MA-536.112015

---

CMS MYCERT Advisories Administration Welcome, Author Advisories 1 ! Advisories Administration Home Advisories Administration Update Advisory Field marked \* are mandatory Advisory TitleMyCERT Vulnerability and Threat Summary - October 2015 Advisory TypeNew Advisory CategoryAdvisory Advisory Content \*1.0 Introduction**
The MyCERT Vulnerability and Threat Summary contains list of Alert and Advisory that had been produced in October. It provides a summary of new vulnerabilities and current threats that have been observed by MyCERT in each month, which had been produced as MyCERT Alert and Advisory.
The MyCERT Vulnerability and Threat Summary will be very beneficial for System Administrators and Incident Response Teams as a reference on security 
**2.0 List of Advisory and Alert**
MyCERT has released 7 advisories or alerts for the month of October 2015.  This advisories or alerts are to address multiple vulnerabilities that affecting a few products and software’s.  Users and administrators are encouraged to review and apply the necessary updates.
> 2.1 [MA-523.102015: MyCERT Alert – New “Ghost Push” Variants Sport Guard Code](https://www.mycert.org.my/portal/advisory?id=MA-523.102015)
> 'Ghost Push' malware is believes to be delivered and spread through commercial SDK or browser advertisement.
>
> 2.2  [MA-524.102015: MyCERT Vulnerability and Threat Summary - August 2015](https://www.mycert.org.my/portal/advisory?id=MA-524.102015)
> The MyCERT Vulnerability and Threat Summary contains list of Alert and Advisory that had been produced in August.
>
> 2.3 [MA-525.102015: MyCERT Vulnerability and Threat Summary - September 2015](https://www.mycert.org.my/portal/advisory?id=MA-525.102015)
> The MyCERT Vulnerability and Threat Summary contains list of Alert and Advisory that had been produced in September.
>
> 2.4 [MA-526.102015: MyCERT Advisory - Brute Force Amplification Attacks Against WordPress](https://www.mycert.org.my/portal/advisory?id=MA-526.102015)
> Researchers from security firm Sucuri have found a way to perform Brute Force amplification attacks against WordPress' built-in **XML-RPC feature** to crack down administrator credentials.
>
> 2.5 [MA-527.102015: MyCERT Advisory - Google Releases Security Update for Chrome OS](https://www.mycert.org.my/portal/advisory?id=MA-527.102015)
> Google has released Chrome version 46.0.2490.71 to address multiple vulnerabilities for Windows, Mac, and Linux.
>
> 2.6 [MA-528.102015: MyCERT Advisory - Mozilla Releases Security Update for Firefox](https://www.mycert.org.my/portal/advisory?id=MA-528.102015)
> Mozilla has released Firefox 41.0.2 to address security vulnerability.
>
> 2.7 [MA-529.102015: MyCERT Advisory - Microsoft Releases October 2015 Security Bulletin](https://www.mycert.org.my/portal/advisory?id=MA-529.102015)
> Microsoft has released six updates to address vulnerabilities in Microsoft Windows.
**3.0 Recommendations**
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#accfd5cec9de959595eccfd5cec9dedfc9cfd9dec5d8d582c1d5) or [[email protected]](/cdn-cgi/l/email-protection#630e1a00061117230e1a000611174d0c11044d0e1a) 
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**4.0 References**
- MyCERT Advisories, Alerts and Summaries for the year 2015
<https://www.mycert.org.my/portal/advisories?id=431fab9c-d24c-4a27-ba93-e92edafdefa5&year=2015&ctype=&keyword=>