1 / 11

PREVIOUS GNEWS

PREVIOUS GNEWS. Patch Tuesday. May 7 Patches – 2 Critical - 70 CVEs MS14-030 - Remote Desktop, Allow Tampering MS14-031 - TCP Protocol, DoS MS14-032 - Microsoft Lync Server, Info Disclosure MS14-033 - Microsoft XML Core Services, Info Disclosure

ziya
Télécharger la présentation

PREVIOUS GNEWS

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. PREVIOUS GNEWS

  2. Patch Tuesday • May 7Patches – 2 Critical - 70 CVEs • MS14-030 - Remote Desktop, Allow Tampering • MS14-031 -TCP Protocol, DoS • MS14-032 -Microsoft Lync Server, Info Disclosure • MS14-033 -Microsoft XML Core Services, Info Disclosure • MS14-034 -Microsoft Word, Remote Code • MS14-035 -Cumulative Security Update for IE • MS14-036 -Microsoft Graphics Component, Remote Code • Other updates, MSRT, Defender Definitions, Junk Mail Filter

  3. Holes / Patches • OpenSSL • 1.0.1h • Oracle • Due in July • Adobe • None • Apple, • OS X 10.9.3 • iTunes 11.2 / 11.2.1 • OS X Server 3.1.2 • Safari 6.1.4 / 7.0.4 • Cisco • WebEx • TelePresence • NX OS • IOS XE

  4. Hacking • Multi Windows on Android • iOS 7.1.1 Jailbreak • Crackdown on BlackShades botnet • Johnny Deeper (for implants) • FB Passive Listening • FB denies feature reports • Dark Market (silkroad 2.1??) • HiJacking Cable Channels • Soraya botnet (mixes zeus and dexter)

  5. Papers Securely erase SSD http://www.makeuseof.com/tag/securely-erase-ssd-without-destroying Intrusion Analysis w/ Powershell https://www.sans.org/reading-room/whitepapers/detection/intrusion-analysis-windows-powershell-34585

  6. Govt • FCC FastLanes • Govt to get tough on Ad compnaies • EFF Who has your back • USA Freedom Act • no defcon for you • Life sentence proposed in Britian for cyber attacks

  7. Corp • Mozilla DRM • AT&T bids on Direct TV • Youtube buys Twitch • Cisco buys ThreatGRID • Ebay breach • Chadder (secure messaging) • Lavaboom (encrypted mail) • TrueCryptdies • Verizon threatens Netflix with lawsuit • PF Changs Breach

  8. Tools Apple Swift language

  9. Cons • IANS Dallas Information Security Forum - Jun • Hope X - Jul • Defcon – Aug • ToorCon - Oct • B-Sides DFW – Nov

  10. Local TX2600 ( 1st Fri / Wild Turkey 35&WalnutHill ) ( ? Plano) NAISG ( 4th Thursday / CrossPointe ) DHA ( 1st Wednesday / Allen Wicker Pub ) Crypto Party ( 3rd Thursday / Improvin Enterprises ) LockPick DFW ( 1st Monday / Trinity Hall ) The Lab.MS ( 2nd Monday / Allen Wicker Pub ) Dallas MakerSpace

  11. All images scavenged without permission All images scavenged without permission

More Related