PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight...
-
Upload
victor-caldwell -
Category
Documents
-
view
217 -
download
2
Transcript of PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight...
![Page 1: PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight Sarepoint,….. Other updates, MSRT, Defender Definitions, Junk.](https://reader034.fdocuments.in/reader034/viewer/2022051620/56649e8e5503460f94b91062/html5/thumbnails/1.jpg)
PREV
IOUS
GNEWS
PREV
IOUS
GNEWS
![Page 2: PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight Sarepoint,….. Other updates, MSRT, Defender Definitions, Junk.](https://reader034.fdocuments.in/reader034/viewer/2022051620/56649e8e5503460f94b91062/html5/thumbnails/2.jpg)
• 7 Patches – 3 Critical – 20 CVEs
• Affected – IE, Kernel, Visio, Silverlight Sarepoint,…..
Other updates, MSRT, Defender Definitions, Junk Mail Filter
– MS13-021 – Cumulative Security Update for Internet Explorer, Remote Code– MS13-022 – Silverlight, Remote Code– MS13-023 - Microsoft Visio Viewer 2010, Remote Code– MS13-024 - Sharepoint, Privilege Escalation– MS13-025 - Microsoft OneNote, Info Disclosure– MS13-026 – Office Outlook for Mac, Info Disclosure– MS13-027 – Kernel-Mode Drivers, Privilege Escalation
Patch Tuesday
![Page 3: PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight Sarepoint,….. Other updates, MSRT, Defender Definitions, Junk.](https://reader034.fdocuments.in/reader034/viewer/2022051620/56649e8e5503460f94b91062/html5/thumbnails/3.jpg)
• Oracle, Due April 16– Out of band Java Patch
• Adobe– APSA13-02 – Adobe Reader and Acrobat 2 CVEs– APSB13-07 – Adobe Reader and Acrobat 2 CVEs– APSB13-08 – Adobe Flash Player 3 CVEs– APSB13-09 – Adobe Flash Player 4 CVEs
• Apple,– Java for OSX 10.6.8 Update 13 and 14
• Cisco– Root shell access, multiple products– Video conferencing, ftp config– MARS, info disclosure– Wireless LAN Controllers, DoS– Unified Communications, multiple vulns
Holes / Patches
![Page 4: PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight Sarepoint,….. Other updates, MSRT, Defender Definitions, Junk.](https://reader034.fdocuments.in/reader034/viewer/2022051620/56649e8e5503460f94b91062/html5/thumbnails/4.jpg)
• VMWare – NFC memory corruption (network file copy)
• ArcSight Logger – Info disclosure, XSS, command inject
• Postgress – DoS
• Wireshark – multiple dissector bugs (crash, loop)
• Nvidia – root access
• SSHD - rootkit
Holes / Hacking
![Page 5: PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight Sarepoint,….. Other updates, MSRT, Defender Definitions, Junk.](https://reader034.fdocuments.in/reader034/viewer/2022051620/56649e8e5503460f94b91062/html5/thumbnails/5.jpg)
• FB Hacked
• Mac games
• mobile coldboot
• HDMI breakout
• pwnpad
• iphone passcode
• html5 full drive
• cpanel root passwords
• You are all commies – Pirate bay moves to N.Korea
Holes / Hacking
![Page 6: PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight Sarepoint,….. Other updates, MSRT, Defender Definitions, Junk.](https://reader034.fdocuments.in/reader034/viewer/2022051620/56649e8e5503460f94b91062/html5/thumbnails/6.jpg)
Corp• Firefox OS
• Tripwire to buy nCircle
• Raytheon data mining
• Bit9 not practicing what they preach ...ooops
• HP to use andriod
• Buffalo add Trend Micro to NAS
• Android 4.2.2. kills nexus lte
• BitCoins = pizza• BitCoin ATM• Bitcoin market up
• PCI for cloud
• Blackberry gives India PIN
• FB target adverts and opt out
![Page 7: PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight Sarepoint,….. Other updates, MSRT, Defender Definitions, Junk.](https://reader034.fdocuments.in/reader034/viewer/2022051620/56649e8e5503460f94b91062/html5/thumbnails/7.jpg)
• IT Executive Order finally here
• ITIF calls for govt. control of interwebs
• Seattle ordered to dismantled drones
• Ca to buy drones, EFF asks for good privacy policy
• CAS comes to an ISP near you
• Bill requires warrants for email
Legal
![Page 8: PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight Sarepoint,….. Other updates, MSRT, Defender Definitions, Junk.](https://reader034.fdocuments.in/reader034/viewer/2022051620/56649e8e5503460f94b91062/html5/thumbnails/8.jpg)
• Shortcuts
• http://resources.infosecinstitute.com/allow-me-to-save-you-some-time-some-useful-shortcuts/
• Wireshark 101
• http://www.wiresharkbook.com/
• Drone use summary
• https://www.eff.org/deeplinks/2013/02/just-how-many-drone-licenses-has-faa-really-issued
Papers
![Page 9: PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight Sarepoint,….. Other updates, MSRT, Defender Definitions, Junk.](https://reader034.fdocuments.in/reader034/viewer/2022051620/56649e8e5503460f94b91062/html5/thumbnails/9.jpg)
• Nunit 2.6 - .net testing
• Nessus 5.0.3 – vuln scanner
• Nessus now audits palo alto configs
• Wafec – eval criteria
• mobile ips
• IE 10 for win 7
• abine maskme – anti-tracker
• Belkasoft Facebook Profile Saver– (happy stalker)
tools
![Page 10: PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight Sarepoint,….. Other updates, MSRT, Defender Definitions, Junk.](https://reader034.fdocuments.in/reader034/viewer/2022051620/56649e8e5503460f94b91062/html5/thumbnails/10.jpg)
• Apple App Store turns on HTTPS
WTF
![Page 11: PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight Sarepoint,….. Other updates, MSRT, Defender Definitions, Junk.](https://reader034.fdocuments.in/reader034/viewer/2022051620/56649e8e5503460f94b91062/html5/thumbnails/11.jpg)
CON EventsShmoo
RSA
B-Sides San Francisco
CanSecWest
![Page 12: PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight Sarepoint,….. Other updates, MSRT, Defender Definitions, Junk.](https://reader034.fdocuments.in/reader034/viewer/2022051620/56649e8e5503460f94b91062/html5/thumbnails/12.jpg)
All images scavenged without permission
All images scavenged without permission