Mitigating IE - zero day vulnerabiltiy - By Steve Gibson

If you are using an old version IE


Check out this link
http://steve.grc.com/2014/04/28/a-quick-mitigation-for-internet-explorers-new-0-day-vulnerability/

OpenSSL Bug - Fix already available

Check here:

https://blogs.akamai.com/2014/04/fix-released-for-heartbleed-openssl-flaw.html

Dangerous - Previewing the email alone is enough to infect your email.

Luckily , Microsoft has provided a temporary fix so, please apply ASAP. 

According to the article:- 

Although Microsoft states that the targeted attacks it has seen so far have been directed at users of its Word 2010 product, it’s clear that the remote code execution flaw also exists in Microsoft Word 2003, 2007, 2013, as well as Office for Mac 2011.

Microsoft Outlook 2007, 2010 and 2013 all use Word by default as the email reader.

The links below has more information:

http://grahamcluley.com/2014/03/rtf-wtf-microsoft-warns-word-zero-day-flaw-actively-exploited-targeted-attacks

My Yesterday's Blog

http://martin-news-bytes.blogspot.com/2014/03/interim-solution-temp-fix-available-for.html

Major Linux Security Flaw but, fix is available

The flaw  enables an attacker to spoof GnuTLS' system for verifying certificates, exposing supposedly secure connections to stealthy eavesdropping.

By creating a specific type of fake certificate, an attacker could trick GnuTLS into accepting it as genuine, granting access to an otherwise-secure connection. This done, the intruder could monitor traffic flowing through the connection in plain text, and even interject code of his own, potentially opening further avenues of attack.

Nikos Mavrogiannopolous, the developer of GnuTLS, announced Monday in a mailing list message that he had implemented a fix to the source code that closes the loophole

The links below has more details:

http://www.cio.com/article/749202/Major_Security_Flaw_Threatens_Linux_Users