PREVIOUS GNEWS Jun – 14 Patches – 7 Critical – 47 CVEs MS16-104 - Cumulative Security Update for Internet Explorer, Remote Code MS16-105 - Cumulative.

Slides:

Advertisements

Similar presentations

PREVIOUS GNEWS. 7 Patches – 3 Critical – 23 CVEs Affected – RDP, IE, Lync, Windows Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS

Advertisements

PREVIOUS GNEWS. 11 Patches – 5 Critical Affecting most everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS IE, Remote Execution.

. 15 Patches / 32 Vulns – 9 Critical Affecting most everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS Windows.

PREVIOUS GNEWS. 13 Patches – 5 Critical Affecting Windows (pretty much all of them) Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS

PREVIOUS GNEWS. Oct - 8 Patches – 3 Critical - 24 CVEs MS Cumulative Security Update for Internet Explorer MS NET Framework, Remote Code.

 . Apr - 8 Patches – 2 Critical - 45 CVEs MS Cumulative Security Update for IE, Remote Code MS Windows Media Player, Remote.

PREVIOUS GNEWS. Apr 4 Patches – 2 Critical – 11 CVEs MS Microsoft Word and Office Web Apps, Remote Code MS Cumulative Security Update.

PREVIOUS GNEWS. Feb - 9 Patches – 3 Critical - 55 CVEs MS Update for Internet Explorer MS Windows Kernel-Mode Driver, Remote Code MS

9 Patches – 2 Critical – 12 CVEs Affected – IE, Kernel, SharePoint, Remote Desktop, AD….. Other updates, MSRT, Defender Definitions, Junk Mail Filter.

. Apr - 11 Patches – 4 Critical - 26 CVEs MS Cumulative Security Update for IE MS Office, Remote Code MS HTTP.sys,

PREVIOUS GNEWS. 6 Patches – 1 Critical – 22 CVEs Affected – IE. Kernel, Print, Office MS Cumulative Security Update for Internet Explorer MS

PREVIOUS GNEWS. Patches – 1 Critical Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS DNS Server, DoS –MS Kernal Mode Driver,

PREVIOUS GNEWS. 7 Patches – 3 Critical – 23 CVEs Affected – Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS Microsoft Word, Remote.

PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight Sarepoint,….. Other updates, MSRT, Defender Definitions, Junk.

Previous Gnews. 13 Patches – 8 Critical, Affects pretty much everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS SMBv2.

PREVIOUS GNEWS. July - 6 Patches – 2 Critical - 27 CVEs MS Cumulative Security Update for IE, Remote Code MS – Windows Journal, Remote Code.

PREVIOUS GNEWS. 8 Patches – 3 Critical – 19+ CVEs Affected – GDI, Hyper-V, Outlook, Office, IE, Activex, and more MS Cumulative Security Update.

PREVIOUS GNEWS. 7 Patches – 1 Critical Affecting server builds and powerpoint Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS Windows.

PREVIOUS GNEWS. 6 Patches – 4 Critical – 19 CVEs Affected – Kernel, SQL, Kerberos, Word, HTML, SharePoint Other updates, MSRT, Defender Definitions, Junk.

P  e  i  Gne . 6 Patches, 12 bugs – 3 Critical, Affects Windows, Office Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS

PREVIOUS GNEWS. 6 Patches – 4 Critical – 11 CVEs Affected – SQL, Visual Basic, Visual Foxpro, more… Other updates, MSRT, Defender Definitions, Junk Mail.

PREVIOUS GNEWS. Oct - ? Patches – ? Critical - ? CVEs Come Back Next Week Other updates, MSRT, Defender Definitions, Junk Mail Filter Patch Tuesday.

PREVIOUS GNEWS. 4 Patches – x bugs addressed Affecting Windows, SQL, Office, Visual Studio,.Net Other updates, MSRT, Defender Definitions, Junk Mail Filter.

PREVIOUS GNEWS. Advanced Notification on Thursday Patch Tuesday.

 . Jul - 15 Patches – 5 Critical - 60 CVEs MS SQL Server, Remote Code MS Security Update for IE MS VBScript Scripting.

PREVIOUS GNEWS. –MS Microsoft XML Core Services, Remote Execution –MS Cumulative Security Update for Internet Explorer –MS Microsoft.

PREVIOUS GNEWS. Jan 4 Patches – 0 Critical – 6 CVEs 9 Patches – 4 Critical – 31+ CVEs MS Microsoft XML Core Services, Info Disclosure MS

PREVIOUS GNEWS. 7 Patches – 6 Critical – 35 CVEs Affected –.NET, GDI+, IE, Defender, DirectShow MS NET Framework and Silverlight, Remote Code.

PREVIOUS GNEWS. try again next week Patch Tuesday.

PREVIOUS GNEWS. 16 Patches / 49 Vulns – 4 Critical Affecting most everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS Cumulative.

Previous Gnews. 5 Patches – x bugs addressed Other updates, MSRT, Defender Definitions, Junk Mail Filter 5 Security Patches - 5 Critical –MS – JScript.

PREVIOU S GNEWS. May 7 Patches – 2 Critical - 70 CVEs MS Remote Desktop, Allow Tampering MS TCP Protocol, DoS MS Microsoft Lync.

PREVIOUS GNEWS. 4 Patches / 5 Vulns – 3 Critical Affecting Winodow (all of them), Office, IE, SharePoint,.net Other updates, MSRT, Defender Definitions,

PREVIOUS GNEWS. Aug - 4 Patches – 1 Critical - 42 CVEs MS – IE Cumulative Security Update, Remote Code MS –.NET Framework, DoS MS –

PREVIOUS GNEWS. 2 Patches – 2 Important Affecting Windows Movie Maker, Office Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS –

PREVIOUS GNEWS. 2 Patches – 2 Critical Affecting VB and Mail Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS – Visual Basic for.

PREVIOUS GNEWS. 3 Patches – 4 Critical – 53+ CVEs Affected – Kernel, AD, SharePoint, Office, and more MS Microsoft SharePoint Server, Remote Code.

PREVIOU S GNEWS. May 9 Patches – 3 Critical - 1 out of band – 14 CVEs MS Security Update for Internet Explorer MS SharePoint Server, Remote.

PREVIOUS GNEWS. Aug - 9 Patches – 1 Critical - 37 CVEs MS Windows Media Center, Remote Code MS – SQL Server, Privilege Escalation MS

PREVIOUSLY GNEWS Patch Tuesday Nov - 12 Patches – 8 Critical – 60ish CVEs MS Cumulative Security Update for IE, Remote Code MS Cumulative.

PREVIOUSLY GNEWS. Patch Tuesday Aug - 13 Patches – 6 Critical - 57 CVEs MS Cumulative Security Update for IE (Aug Out of Band) MS Cumulative.

PREVIOUSLY GNEWS Patch Tuesday Jan – 10 (9) Patches – 6 Critical – 24ish CVEs MS Cumulative Security Update for IE, Remote Code MS Cumulative.

GNEWS, PREVIOUSLY Patch Tuesday Aug - 6 Patches – 3 Critical - 33 CVEs MS Cumulative Security Update for Internet Explorer MS Cumulative.

GNEWS PREVIOUS. Patch Tuesday jul - x Patches – x Critical - x CVEs Releases Next Week.

PREVIOUS GNEWS Mar – 13 Patches – 6 Critical – 30 CVEs MS Cumulative Security Update for IE MS Cumulative Security Update for Microsoft.

PREVIOUS GNEWS. 8 Patches – 6 Critical – 19+ CVEs Affected – Kernel, AD, Exchange, Unicode, ICMP MS Security Update for Internet Explorer, Remote.

PREVIOUSLY GNEWS Feb – 13 Patches – 6 Critical – 36ish CVEs MS Cumulative Security Update for IE, Remote Code MS Cumulative Security.

All images scavenged without permission

PREVIOUS GNEWS All images scavenged without permission.

All images scavenged without permission

PREVIOUS GNEWS All images scavenged without permission.

All images scavenged without permission

All images scavenged without permission

PREVIOUS GNEWS All images scavenged without permission.

PREVIOUS GNEWS All images scavenged without permission.

PREVIOUS GNEWS All images scavenged without permission.

PREVIOUS GNEWS All images scavenged without permission.

All images scavenged without permission

All images scavenged without permission

All images scavenged without permission

All images scavenged without permission

Previous Gnews All images scavenged without permission.

Previous Gnews All images scavenged without permission.

All images scavenged without permission

All images scavenged without permission

All images scavenged without permission

All images scavenged without permission

All images scavenged without permission

Previous Gnews All images scavenged without permission.

All images scavenged without permission

Presentation transcript:

PREVIOUS GNEWS

Jun – 14 Patches – 7 Critical – 47 CVEs MS Cumulative Security Update for Internet Explorer, Remote Code MS Cumulative Security Update for Microsoft Edge, Remote Code MS Microsoft Graphics Component, Remote Code MS Microsoft Office, Remote Code MS Microsoft Exchange Server, Remote Code MS Silverlight, Remote Code MS Windows, Remote Code MS Windows Kernel, Privilege Escalation MS Windows Lock Screen, Privilege Escalation MS Windows Secure Kernel Mode, Info Disclosure MS SMBv1 Server, Remote Code MS Microsoft Windows PDF Library, Info Disclosure MS OLE Automation for VBScript Scripting Engine, Remote Code MS Adobe Flash Player, Remote Code Patch Tuesday

Oracle –Due out 18 Oct Adobe –APSB16-28 Digital Editions ( 8 CVE) –APSB16-29 Flash Player ( 26 CVE) –APSB16-31 Air SDK/Compiler ( 1 CVE) Apple –watchOS 3 ( 1 CVE) –Xcode 8 ( 2 CVE) –iOS ( 1 CVE) –iOS 10 ( 7 CVE) –El Capitan and Yosemite ( 2 CVE) –Safari ( 1 CVE) –iOS ( 3 CVE) MS New patch deployments VMWare –VMSA ( 1 CVE) vRealize Log Insight (dir traverse) –VMSA ( 1 CVE) Photon OS OVA (default ssh key) –VMSA ( 2 CVE) Identity Manager & vRealize Automation –VMSA ( 8 CVE) ESXi, Workstation, Fusion, & Tools libgcrypt and gnupg1.4 –Random number generator Cisco –Patch for equation group 0-day Android, CVE –Pre 4.7 tcp “challenge ACK” Holes / Patches

darpa solves crackaddr problem car keyfob hack (vw / ford / chevy) rockwell undocumented snmp string, remote access signal forensics tool, Retroscope, extract signal/whatsapp/more… How-to disable wpad Burleson, now with skimmers NSA zero day tools Transmission Torrent ungood for macs (ransomeware) PowerShell web.config scripts, steal creds OpenSLL pulls 3des/blowfish Mirrorlink, car infotainment (paper) new evasion via macros Hacking

hotels popped (marriot/sheraton/westin) eddie bauer hacked steam hacked epic forums hacked GTA forum breach Drop Box popped opera server breach Rambler.ru cred dump 98mil brazzers.com popped Hacking

MS 2FA now on ios/android Powershell now opensource Veracrypt Audit s vanish EFF open call to action on windows 10 privacy New Google OS?? “Fuchsia” WhatsApp Facebook data sharing sophos bad signature yelp bug bounty OWASP bugbounty GE buys 3dprinters Arcam AB and SLM Solutions Group Corp

illinios limits cell site simulators NSA tool leak? Elections and Security Politics as Critical Infrstruture Seti (I want to believe) EU passes infringement by linking first fed CISO malware is a valid search And Rule 41 expands hacking power Govt

x Papers

WTF AdBlockPlus now sells ads

Tools hellraiser vuln scanner

OWASP CFP Open – DC Oct IANS Chicago Information Security Forum –13-14 Sep CornCon – Davenport Iowa 17 Sep SaintCon – Provo Utah Oct Root 66 / InnoTech OKC - 1 Nov LASCON Austin – 1-2 Nov BSidesDFW 2016 – 5 Nov Threat Intelligence Summit NOLA – 6-7 Dec Future Cons

( 1 st Wednesday / Family Karaoke, dallas ) ( 1 st Fri / Wild Turkey 35&WalnutHill, dallas ) The ( 2 nd Monday + random events / TheLab.ms, plano ) OWASP ( 3 rd Tuesday / location varies ) Crypto Party ( 3 rd Thursday / Improving Enterprises, addison ) North Texas Cyber Security ( Last Thursday, Jakes, Frisco ) Dallas ( Random events / carrollton ) Hack Ft ( 3 rd Thursday / ?? West 7 th ?? Abby Pub) Lock Pick ( Last Monday/ Sherlocks arlington )

All images scavenged without permission