According to Ars Technica, encrypted eBay passwords and other information have been stolen by cyberattackers. If you have an eBay account, change your password ASAP. If your eBay password is one you’ve used on other services, including your accounts with HIS, change those passwords too, and don’t use the same password on more than one… Read More: eBay passwords compromised »
You may have read about the bug in OpenSSL that allowed attackers to access random 64k byte chunks of memory. This bug was reported by CERT on Monday, April 7, 2014. Software vendors supplied patches on April 7 and 8. A few of our SSL servers were vulnerable, and we had all patches applied and were… Read More: Heartbleed OpenSSL bug – should you change your passwords? »
Windows XP has reached end-of-life, and there will be no updates or security patches for XP after April 8, 2014. The bad news is that CERT estimates that 30% of all internet-connected PCs are still running XP, so a lot of people are going to be exposed to the latest malware with no help from… Read More: Microsoft Ending Support for Windows XP and Office 2003 4/8/2014 »
his.com and hers.com mailboxes on mail.his.com have been increased in size to 5 gigabytes. You can add disk storage if you need it for $1/gb/month. You can check your storage status by logging on to https://webmail.his.com and hovering your mouse over the bar under your name at the top of the screen. Tip: if you… Read More: mail.his.com mailbox quotas increased »
There’s a significant attack by a botnet on WordPress sites, where the bots are trying to guess the passwords of common admin logins. More info: http://arstechnica.com/security/2013/04/huge-attack-on-wordpress-sites-could-spawn-never-before-seen-super-botnet/ If you are using WordPress and are using a common username or a common password, change it immediately to something less obvious. Update your WordPress admin password when in… Read More: ALERT: major brute-force password-guessing attack on WordPress sites underway »
In order to expand disk space to accommodate larger user disk allowances, Zimbra servers mail.his.com and dc.his.com will be taken offline briefly this weekend: mail.his.com – starting at 3 AM EDT, Saturday, April 6th – COMPLETED 5:20 AM April 6 dc.his.com – starting at 3 AM EDT, Sunday, April 7th – COMPLETED with no downtime.
This bogus email is making the rounds and seems to be slipping past spam filters at the moment. If you get one of these messages, delete it. The link in the message takes you to a form that asks you to enter your email address and password. If you do this, you can count on… Read More: Warning: ‘Webmail Account Warning’ message is bogus. »
We’re seeing a significant increase in the number of ‘phishing’ and malware email messages. Most of these are being stopped by Postini’s spam/virus filters, but some are getting through, and some are getting past our own spam/virus filters that we use to supplement Postini. These messages are well crafted and look like legitimate email from… Read More: Phishing/Malware email »
Over the past few months we’ve seen an enormous jump in the number of password-guessing attacks on our mail servers. The attackers are spammers who are trying to get access to legitimate accounts so they can send spam. We have software in place that identifies and blocks these attacks, but if a password is too… Read More: Using strong passwords »
Some HIS customers reported getting emails pretending to be from his.com and containing a bogus alert message. From: “his.com support” <admin@his.com> Subject: his.com account notification or Subject: Returned mail: see transcript for details From: domains@megginson.com We are blocking them on our SPAm filters. However, if you received one of those Do not click on any… Read More: Bogus emails from his.com »