Presentation is loading. Please wait.

Presentation is loading. Please wait.

All images scavenged without permission

Similar presentations


Presentation on theme: "All images scavenged without permission"— Presentation transcript:

1 All images scavenged without permission

2 PREVIOUS GNEWS All images scavenged without permission

3 Patch Tuesday Jun – 17 Patches – 6 Critical – 36 CVEs
MS Cumulative Security Update for Internet Explorer MS Cumulative Security Update for Microsoft Edge MS Cumulative Security Update for JScript and VBScript MS Microsoft Office MS Microsoft Windows DNS Server MS Group Policy MS Windows Kernel-Mode Drivers MS Microsoft Graphics Component MS Windows SMB Server MS Netlogon MS WPAD MS Windows Diagnostic Hub MS Microsoft Exchange Server MS Microsoft Windows PDF MS Active Directory MS Microsoft Windows Search Component MS Adobe Flash Player Sources:

4 Patch Tuesday Jul – 11 Patches – 6 Critical – 40 CVEs
MS Cumulative Security Update for Internet Explorer MS Cumulative Security Update for Microsoft Edge MS Cumulative Security Update for JScript and VBScript MS Security Update for Windows Print Spooler Components MS Security Update for Microsoft Office MS Security Update for Windows Secure Kernel Mode MS Security Update for Windows Kernel-Mode Drivers MS Security Update for .NET Framework MS Security Update for Windows Kernel MS Security Update for Adobe Flash Player MS Security Update for Secure Boot MS breaks AD GPO Sources: MS breaks AD GPO

5 Holes / Patches Oracle Adobe Apple VMWare Symantec
Due 19 Jul Adobe APSB16-18 Flash ( 36 CVE) APSB16-19 DNG SDK ( 1 CVE) APSB16-20 Brackets ( 2 CVE) APSB16-21 Creative Cloud Desktop Application ( 2 CVE) APSB16-22 CloudFusion ( 1 CVE) APSB16-23 Air( 1 CVE) APSB16-24 XMP Toolkit for Java ( 1 CVE) APSB16-25 Flash ( 52 CVE) APSB16-26 Acrobat and Reader( 30 CVE) Apple AirPort Base Station Firmware / ( 1 CVE) IOS 10 App removal VMWare VMSA ( 1 CVE) VMware NSX and vCNS info disclosure VMSA ( 2 CVE) vRealize Log Insight, XSS VMSA ( 1 CVE) vCenter Server, reflected XSS Symantec Packers and more Lenovo ThinkPwn (+ gigabyte) EUFI firmware vuln PDF vulns Chrome and Foxit Putty DLL hi-jacking Sources: ## Oracle Patches ##Adobe Patches ##Apple patches ios10 app removal ##Cisco patches ## VMWare Symantec again Symantec vulnerable Again patches Lenovo ThinkPwn thinkpwn and now on MoBo chrome pdf reader foxit patches putty ddl hijacking

6 Hacking powershell Malware... it is not just theoretical
Godless android malware Malware via BITS googleplay auto-rooting malware IOT Camera botnet Ransomware on o365 conficker is dead, long live conficker Opensource 21 Bitcoin for machine payable web services MS FreeBSD Silent use by apps Hacking Sources: powershell Malware... it is not just theoretical Godless android malware Malware via BITS googleplay auto rooting malware IOT Camera botnet Ransomware on o365 conficker is dead, long live conficker Opensource 21 Bitcoin for machine payable web services MS FreeBSD microphones

7 Corp MS to buy Linkedin MS to launch block chain as a service
Symantec to buy BlueCoat Symantec expands car system protection offerings Ron Gula steps down (tenable CEO) CASB - Cisco to buy CloudLock avast buys avg (now with twice the nag windows) Fiat/Chrysler bug bounty program Siemens says don't use their stuff.... (on soft networks) Sources: MS to buy Linkedin MS to launch block chain as a service Symantec to buy BlueCoat Symantec expands car system protection offerings Ron Gula steps down (tenable CEO) CASB - Cisco to buy CloudLock avast buys avg (now with twice the nag windows) Fiat/Chrysler bug bounty program Siemens says don't use their stuff.... (on soft networks) Corp

8 Corp Wendys breach bigger than thought (shocker)
Acer customer CC# breach undisclosed hospital DB breached Omni hotels breached BMW vulnerable Hard Rock Vegas breached registrars are hard... tp-link losses update domain Sources: Wendys breach bigger than thought (shocker) Acer customer CC# breach undisclosed hospital DB breached Omni hotels breached BMW vulnerable Hard Rock Vegas breached registrars are hard... tp-link losses update domain Corp

9 Govt Air force investigations deleted (crashed) IRS hacked again
154 mil voter data on unsecured couchdb ERAD money seizures Europe wants to pay per link One step closer to FOIA reform VA says computers don’t get the 4th NSA hacker talks everyone uses 3rd party , Nato Gen. gmail hacked silk road agent under glass for more theft HIPAA bares its teeth we're all going to jail… password sharing falls under CFAA WEllness badness NC bill for blockchain currencies Fed Judge throws out Stingray evidence Sources: Air force investigations deleted (crashed) irs hacked again 154 mil voter data on unsecured couchdb erad money seizures Europe wants to pay per link One step closer to FOIA reform VA says computers dont get the 4th NSA hacker talks everyone uses 3rd party silk road agent under glass for more theft hipaa bares its teeth we're all going to jail Wellness badness NC bill for blockchain currencies No stingrays here Govt

10 Sin Report – Legitimate Bitcoin gaining ground
Simplifying IoT: Connecting, Commissioning, and Controlling with Near Field Communication (NFC) Sin Report – Legitimate Bitcoin gaining ground Papers Sources: iot Simplifying IoT: Connecting, Commissioning, and Controlling with Near Field Communication (NFC) bitcoin for illegal trade is dropping to legitimate

11 LightCyber report finds attackers use legitimate tools.
2nd BitCoin Halving WTF Sources: welcome to 1995 cpt obvious bitcoin halflife

12 Tools CANSPY (at BlackHat) Automotive Vuln Scanner
TLS fingerprinting v1.0 SecuityTips for Signal VeraCrypt Trucrypt fork New anonymity scheme MIT onion network better than Tor Shard Leaked password checker Mr-Robot Mr. Robot themed "CTF" Tools Sources: Car scanner? TLS fingerprinting v1.0 SecTips for Signal vera crypt MIT better than tor ?? leaked passwords ?? MR Robot themed "CTF"

13 BlackHat – Vegas 30 Jul – 4 Aug
SANS San Antonio – Jul Hope 11 – NYC Jul BlackHat – Vegas 30 Jul – 4 Aug BSidesLV – Vegas 2-3 Aug DefCon 24 – Vegas 4 – 7 Aug SANS Dallas – 8 – 13 Aug OWASP CFP Open – DC Oct Future Cons Sources:

14 National Information Security and Assurance Group
DHA ( 1st Wednesday / Family Karaoke, dallas ) TX2600 ( 1st Fri / Wild Turkey 35&WalnutHill, dallas ) The Lab.MS ( 2nd Monday + random events / TheLab.ms, plano ) OWASP Dallas ( 3rd Tuesday / location varies ) Crypto Party ( 3rd Thursday / Improving Enterprises, addison ) National Information Security and Assurance Group ( 4th Thursday, Jakes, Frisco ) Dallas MakerSpace ( Random events / carrollton ) Sources:

15 Sources: All images scavenged without permission


Download ppt "All images scavenged without permission"

Similar presentations


Ads by Google