3 ms·

In the fast-moving world of IT security it's refreshing to see that Symantec's web site makes no mention of these profoundly important vulnerabilities on their

by Jedd 10y ago

In the fast-moving world of IT security it's refreshing to see that Symantec's web site makes no mention of these profoundly important vulnerabilities on their landing page They don't seem to have any Status / Current Alerts style pages -- but on their somewhat hard to find blog page we find the most recent update from the guys is from two days ago: "Malicious app found on Google Play, steals Viber photos and videos" http://www.symantec.com/connect/symantec-blogs/symantec-security-response http://www.symantec.com/connect/symantec-blogs/symantec-secu... EDIT: Oh, they have a Vulnerabilities page - https://www.symantec.com/security_response/landing/vulnerabilities.jsp https://www.symantec.com/security_response/landing/vulnerabi... - with the most recent entries listed as 13 days ago (blimey that US mm/dd/yyyy date format is uncomfortable).

kevcampb 10y ago
It's in the top menu bar on their technical support page. This is visible on browsers, but closed my default on mobile. I spoke to their technical support this morning (sadly my company still runs Symantec, although we are moving from it). None of them appeared to be aware of the issue.
Jedd 10y ago
Symantec have described some vulnerabilities that sound like these ones, dated 2016-06-28 (no time) here: https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01 https://www.symantec.com/security_response/securityupdates/d... Detailed description and credits sections don't seem to be in complete alignment with details of OP, but I may be misreading.
- RachelF 10y ago
  I don't think that they have much to do with the OP. The OP's post is easy to understand, Symantec's seems to be corporate double-speak. The more important question is what should Symantec/Norton users do to prevent being exploited right now?
paradite 10y ago
They have a separate page for "Security Advisories Relating to Symantec Products" here: https://www.symantec.com/security_response/securityupdates/list.jsp?fid=security_advisory https://www.symantec.com/security_response/securityupdates/l... The link can be found in a small line of text here: https://www.symantec.com/security_response/landing/vulnerabilities.jsp https://www.symantec.com/security_response/landing/vulnerabi...

by Jedd 10y ago

kevcampb 10y ago

It's in the top menu bar on their technical support page. This is visible on browsers, but closed my default on mobile. I spoke to their technical support this morning (sadly my company still runs Symantec, although we are moving from it). None of them appeared to be aware of the issue.

Jedd 10y ago

Symantec have described some vulnerabilities that sound like these ones, dated 2016-06-28 (no time) here: https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01 https://www.symantec.com/security_response/securityupdates/d... Detailed description and credits sections don't seem to be in complete alignment with details of OP, but I may be misreading.

RachelF 10y ago
I don't think that they have much to do with the OP. The OP's post is easy to understand, Symantec's seems to be corporate double-speak. The more important question is what should Symantec/Norton users do to prevent being exploited right now?

paradite 10y ago

They have a separate page for "Security Advisories Relating to Symantec Products" here: https://www.symantec.com/security_response/securityupdates/list.jsp?fid=security_advisory https://www.symantec.com/security_response/securityupdates/l... The link can be found in a small line of text here: https://www.symantec.com/security_response/landing/vulnerabilities.jsp https://www.symantec.com/security_response/landing/vulnerabi...