All images scavenged without permission

All images scavenged without permission PREVIOUS GNEWS

Patch Tuesday Nov – 14 Patches – 6 Critical – 69 CVEs MS16-129 - Cumulative Security Update for Microsoft Edge, Remote Code MS16-130 - Microsoft Windows, Remote Code MS16-131 - Microsoft Video Control, Remote Code MS16-132 - Microsoft Graphics Component, Remote Code MS16-133 - Microsoft Office, Remote Code MS16-134 - Common Log File System Driver, Privilege Escalation MS16-135 - Windows Kernel-Mode Drivers, Privilege Escalation MS16-136 - SQL Server, Privilege Escalation MS16-137 - Windows Authentication Methods, Privilege Escalation MS16-138 - Microsoft Virtual Hard Disk Driver, Privilege Escalation MS16-139 - Windows Kernel, Privilege Escalation MS16-140 - Boot Manager, Security Bypass MS16-141 - Adobe Flash Player, Remote Code MS16-142 - Cumulative Security Update for Internet Explorer, Remote Code Sources: http://technet.microsoft.com/en-us/security/bulletin/ms16-nov

Holes / Patches Oracle Adobe Apple VMWare Android MS 253 Fixes APSB16-35 Adobe Connect ( 1 CVE) APSB16-36 Flash Player ( 1 CVE) APSB16-37 Flash Player ( 9 CVE) Apple iOS 10.0.3 iOS 10.1 ( 17 CVE) Security Update 2016-002 ( 20 CVE) Safari 10.0.1 ( 4 CVE) tvOS 10.0.1 ( 14 CVE) watchOS 3.1 ( 9 CVE) Xcode 8.1 ( 10 CVE) iCloud for Win 6.0.1 ( 2 CVE) iTunes 12.5.2 for Win ( 2 CVE) iOS 10.1.1 VMWare VMSA-2016-0016 ( 1 CVE) vRealize Operations, privilege escalation VMSA-2016-0017 ( 2 CVE) Vmware, info disclosure Android Drammer patch Partial Dirty Cow Patch MS EMET EOL extended to Jul 2018 Azure Container Service goes open source Server 2016 Security Features Credential guard Device Guard Host Guardian Sources: ## Oracle Patches http://www.oracle.com/technetwork/topics/security/alerts-086861.html ##Adobe Patches https://helpx.adobe.com/security.html https://helpx.adobe.com/security/products/connect/apsb16-35.html https://helpx.adobe.com/security/products/flash-player/apsb16-36.html https://helpx.adobe.com/security/products/flash-player/apsb16-37.html https://threatpost.com/adobe-patches-nine-code-execution-flaws-in-flash-player/121839/ ##Apple patches http://support.apple.com/kb/HT1222 ##Cisco patches http://tools.cisco.com/security/center/home.x http://tools.cisco.com/security/center/viewAllSearch.x?currentPage=&sortType=d&recordsPerPage=100&searchkey=&filter=43&pageSize=100&pageNo=1 ## VMWare http://www.vmware.com/security/advisories/ https://www.vmware.com/security/advisories/VMSA-2016-0016.html https://www.vmware.com/security/advisories/VMSA-2016-0017.html android down with drammer long live dirty cow. https://news.hitb.org/content/android-patches-fix-drammer-ram-attack-not-dirty-cow-exploit Azure container service goes open source https://news.hitb.org/content/microsoft-open-sources-its-azure-container-service-engine EMET extended to July 2018 https://threatpost.com/microsoft-tears-off-the-band-aid-with-emet/121824/ server 2016 sec features http://www.esecurityplanet.com/windows-security/3-noteworthy-windows-server-2016-security-features.html

Hacking OWA based phishing attack leveraging veil framework malware now checks DBLs before generating spam New Car rules, DMCA fair use exemptions gmail vuln Hacking Sources: bad headline proofpoint https://www.proofpoint.com/us/threat-insight/post/veil-framework-infects-victims-targeted-owa-phishing-attack malware now checks DBLs before generating spam. http://researchcenter.paloaltonetworks.com/2016/10/unit42-can-i-spam-from-here-an-unusually-clever-spambot-tests-blacklists new Car rules https://www.eff.org/deeplinks/2016/10/why-did-we-have-wait-year-fix-our-cars gmail vuln http://betanews.com/2016/11/05/gmail-verification-vulnerability/

Corp amazon quikie-marts? fido alliance, new auth specification Synopsys acquires Cigital and Codiscope Acquisitions Tesco Breach Aussie Red Cross Breach Sources: amazon quikie-marts? http://risnews.edgl.com/retail-news/Experts-Weigh-In-On-Amazon-s-Decision-to-Open-Convenience-Stores107407 fido alliance new auth specification http://www.marketwired.com/press-release/fido-alliance-announces-new-authentication-specification-effort-with-emvco-bring-2169182.htm Tesco Breach http://www.healthcareinfosecurity.com/tesco-bank-confirms-massive-account-fraud-a-9501 Synopsys acquires Cigital and Codiscope Acquisitions http://www.darkreading.com/perimeter/synopsys-expands-software-security-with-cigital-codiscope-acquisitions/d/d-id/1327434?_mc=RSS_DR_EDT Aussie Red Cross Breach http://www.esecurityplanet.com/network-security/australian-red-cross-data-breach-exposes-550000-peoples-personal-information.html Corp

Govt Playpen exploit disclosure Indian embassy websites NIST workforce initiative new scanners at airports?! FCC broadband rules Sources: Playpen exploit https://www.eff.org/deeplinks/2016/10/why-government-must-disclose-its-exploit-defense-playpen-cases indian embassy websites http://www.healthcareinfosecurity.com/7-indian-embassy-websites-apparently-breached-a-9502 NIST workforce initiaitve http://www.healthcareinfosecurity.com/interviews/new-tools-aim-to-close-cybersecurity-skills-gap-i-3385 new scanners at airports?! https://news.hitb.org/content/removing-your-laptop-and-liquids-airport-security-may-soon-be-thing-past FCC broadband rules https://www.privacyrights.org/blog/new-fcc-broadband-privacy-rules-are-win-consumers Govt

x Papers Sources:

x WTF Sources:

x Tools Sources:

Threat Intelligence Summit NOLA – 6-7 Dec Future Cons Sources: https://www.concise-courses.com/security/conferences-of-2016/ http://www.securitybsides.com/w/page/12194156/FrontPage

OWASP Dallas @OWASPDallas DHA @Dallas_Hackers ( 1st Wednesday / Family Karaoke, dallas ) TX2600 @dallas2600 ( 1st Fri / Wild Turkey 35&WalnutHill, dallas ) The Lab.MS @TheLab_ms ( 2nd Monday + random events / TheLab.ms, plano ) OWASP Dallas @OWASPDallas ( 3rd Tuesday / location varies ) Crypto Party DFW @CryptoPartyDFW ( 3rd Thursday / Improving Enterprises, addison ) North Texas Cyber Security Group @ntxcsg ( Last Thursday, Jakes, Frisco ) Dallas MakerSpace @dallasmakers ( Random events / carrollton ) Hack Ft Worth @Hack_FtW ( 3rd Thursday / ?? West 7th ?? Abby Pub) Lock Pick DFW @LockPickDFW ( Last Monday/ Sherlocks arlington ) Sources: https://calendar.google.com/calendar/embed?src=OW1vaTQxMjl1OXBhOWk3NTc4ZmVrN2dtMWtAZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbQ

Sources: All images scavenged without permission