Presentation is loading. Please wait.

Presentation is loading. Please wait.

PREVIOUS GNEWS All images scavenged without permission.

Similar presentations


Presentation on theme: "PREVIOUS GNEWS All images scavenged without permission."— Presentation transcript:

1 PREVIOUS GNEWS All images scavenged without permission

2 Patch Tuesday Jun 2017 – 21 vulnerabilities with 248 unique downloads
Internet Explorer / Microsoft Edge / Remote Code Microsoft Windows / Remote Code Microsoft Office and Microsoft Office Services and Web Apps / Remote Code .NET Framework / DoS Adobe Flash Player / Remote Code Microsoft Exchange Server / Privilege Escalation Sources: MS malware protection engine MS kills SHA-1 in ie edge Last Update Mar 2017 No longer working

3 Holes / Patches Oracle Adobe Android VMWare Apple Due 18 Jul 2017
APSB17-21 Flash Player ( 3 CVE) APSB17-22 Connect ( 3 CVE) Android ( 21 CVE) ( 80 CVE) VMWare None (as of 11 Jul) Apple Sources: ## Oracle Patches ##Adobe Patches ##Apple patches ##Cisco patches ## VMWare ## Android

4 Holes / Patches *nix stackclash (mem corruption)
Avaya Aura (HTTP header injection) TP-Link fixes EOL devices openvpn patch (double-free memleak / proxy NTLMv2) skylake chip update (hyper threading enabled) azure AD privilege escalation Siemans patches AMT GnuPG libgcrypt Side-Channel attack Sources: *nix stackclash avaya TP-Link fixes EOL devices openvpn patch skylake chip update azure AD privilege escalation Siemans patches AMT GnuPG libgcrypt Side-Channel attack

5 Hacking 2 new ransomware decrypters (Jaff / EncrypTile)
NotPetya ransomeware/wiper Ghosthook, Win10 patchguard evasion windfarm turbines OG petya ransomware key dropped Hacking Sources: 2 new ransomware decrypters NotPetya ransomeware/wiper medoc raid Ghosthook, patchguard evasion windfarm turbines OG petya ransomware key dropped

6 Corp amazon to buy whole foods apple acquires SensoMotoric
Staples merges with Sycamore Partners MS extends edge bug bounty gemalto patent for secure blockchain google anti-trust fine battery settlement cisco emcrypted malware identification New mastercard apis virgin media super hub 2 routers Honda japan plant halts, wanacry Sources: amazon to buy whole foods apple acquires SensoMotoric Staples merges with Sycamore Partners MS extends edge bug bounty gemalto patent for secure blockchain google anti-trust fine battery settlement cisco emcrypted malware identification New mastercard apis virgin media super hub 2 routers Honda japan plant halts, wanacry Corp

7 Corp buckle popped cashcrate popped ethereum popped bithumb popped
sabre popped WWE popped Avanti Markets kiosk popped Sources: buckle popped cashcrate popped ethereum popped bithumb popped sabre popped WWE popped Avanti Markets kiosk popped Corp

8 Govt Wikileaks CIA cherryblossom republican data
German report on automated cars German Doma? pakistan FB deathpenalty mandatory IOT labeling??? NZ airport passwords Kaspersky Source Code review granted recordong popo is 1st amendment Sources: Wikileaks CIA cherryblossom republican data German report on automated cars German Doma? pakistan FB deathpenalty mandatory IOT labeling??? NZ airport passwords Kaspersky Source Code review granted recordong popo is 1st amendment Govt

9 Papers canbus hacking NIST digital ID guidelines
NIST digital ID guidelines Copyright office study of DMCA Sec 1201 intelligence best practice guide Cisco Detecting Encrypted Malware Traffic Papers Sources: canbus hacking nist digital ID guidelines Copyright office study of DMCA Sec 1201 intelligence best practice guide Cisco Detecting Encrypted Malware Traffic

10 WTF Banksy is lead singer of massive attack
Strawberrynet optional password security self destruct pc W3C DRM Standard WTF Sources: Banksy is lead singer of massive attack Strawberrynet optional security self desctruct pc w3c DRM

11 Tools Trend Micro OSINT Challange let's encrypt gets wildcard
ZEUS AWS hardening tool Tools Sources: Trend Micro OSINT Challange let's encrypt goes wildcard zeus AWS hardening

12 Future Cons BlackHat 22-27 Jul BSidesLV 25-26 Jul DefCon 27-30 Jul
SANS San Antonio 6-11 Aug ToorCon San Diego 28Aug – 3 Sep DerbyCon Sep Rock Stars of Cybersecurity Technologies 26 Sep CactusCon Sep Future Cons Sources:

13 Where DHA @Dallas_Hackers TX2600 @dallas2600 The Lab.MS @TheLab_ms
( 1st Wednesday / Family Karaoke, Dallas ) TX2600 @dallas2600 ( 1st Fri / Wild Turkey 35&WalnutHill, Dallas ) The Lab.MS @TheLab_ms ( 2nd Saturday + random events / TheLab.ms, Plano ) ISSA Fort Worth @ISSAFortWorth ( 2nd Tuesday / location varies ) ?? Fort Worth Crypto Party ?? ( 2nd Tuesday ? / The Maker Spot, N. Richland Hills ) Hack Ft Worth @Hack_FtW ( 3rd-ish Tuesday / Buffalo West, Fort Worth) OWASP Dallas @OWASPDallas ( 3rd Tuesday / location varies ) Crypto Party DFW @CryptoPartyDFW ( 3rd Thursday / TheLab.ms, Plano ) North Texas Cyber Security Group @ntxcsg ( Last Thursday, Jakes, Frisco ) Dallas MakerSpace @dallasmakers ( Random events / Carrollton ) Sources: Where

14 Sources: All images scavenged without permission


Download ppt "PREVIOUS GNEWS All images scavenged without permission."

Similar presentations


Ads by Google