Presentation is loading. Please wait.

Presentation is loading. Please wait.

PREVIOUSLY GNEWS Feb – 13 Patches – 6 Critical – 36ish CVEs MS16-009 - Cumulative Security Update for IE, Remote Code MS16-011 - Cumulative Security.

Published byMartha Rodgers Modified over 8 years ago

Similar presentations

Presentation on theme: "PREVIOUSLY GNEWS Feb – 13 Patches – 6 Critical – 36ish CVEs MS16-009 - Cumulative Security Update for IE, Remote Code MS16-011 - Cumulative Security."— Presentation transcript:

1

2 PREVIOUSLY GNEWS

3 Feb – 13 Patches – 6 Critical – 36ish CVEs MS16-009 - Cumulative Security Update for IE, Remote Code MS16-011 - Cumulative Security Update for Edge, Remote Code MS16-012 - Microsoft Windows PDF Library, Remote Code MS16-013 - Windows Journal, Remote Code MS16-014 - Microsoft Windows, Remote Code MS16-015 - Microsoft Office, Remote Code MS16-016 - WebDav, Privilege Escalation MS16-017 - Remote Desktop Display Driver, Privilege Escalation MS16-018 - Windows Kernel-Mode Driver, Privilege Escalation MS16-019 -.NET Framework, DoS MS16-020 - Active Directory Federation Services, DoS MS16-021 - NPS Radius Server, DoS MS16-022 - Adobe Flash Player Patch Tuesday

4 Adobe –248 fixes Adobe –APSB16-03 Photshop CC and Bridge CC ( 3 CVE) –APSB16-04 Flash Player ( 22 CVE) –APSB16-05 Experience Manager ( 4 CVE) –APSB16-07 Connect ( 3 CVE) Apple –iOS 9.2.1 ( 13 CVE) –Security Update 2016-001 ( 9 CVE) –Safari 9.0.3 ( 6 CVE) –tvOS 9.1.1 ( 8 CVE) VMWare –VMSA-2015-0009 ( 1 CVE) deserialization –VMSA-2016-0001 ( 1 CVE) guest privilege escalation Cisco, Aironet hardcoded passwd OpenSSH, private key leak OpenSSL, X9.42 parameters linux kernel bug, keyrings reference leak (+PoC code) Holes / Patches

5 LastPass Phishing Campaign powershell morse code AC unit = blackout generator –unencrypted RF cut off “valve” Hacking

6 Cryptsy Bitcoin Exchanged robbed 13K bitcoin (5mil) Yahoo pays 10K for XSS bug Norse falls off the map Lenovo really 'shareit' with '12345678' Java browswe plugin death Wendys breached Chase cardless ATMs HD Moore leaves R7 Intel Autheticate in VPro Chips FireEye buys iSight Partners St.Louis Centene loses unencrypted drives Xerox to split VirusTotal adds firmware scanning IEEE anti-malware support service Corp

7 FOIA Reform Bill FDA Security Guidance Notice and Stay Down –US copyright safe harbor provision (section 512) TX License Plate Readers Canada limits data sharing DOJ Job applicants posted to twitter Federal CISO Govt

8 DarkNet Intro http://hubpages.com/technology/A-Beginners-Guide-to-Exploring-the-Darknet Powershell Windump https://www.sans.org/reading-room/whitepapers/incident/leverage-powershell-create-user-friendly- version-windump-36642 AWS guidance https://d0.awsstatic.com/whitepapers/architecture/AWS_Well-Architected_Framework.pdf Hacking the patent system 2016 https://www.eff.org/document/hacking-patent-system-2016 Draft Redhat Stig http://iase.disa.mil/stigs/os/unix-linux/Pages/index.aspx Draft Application Sec STIG http://iase.disa.mil/stigs/app-security/app-security/Pages/app-security.aspx Papers

9 Imperva says you need state sponsorship to run a tor exit node torflow.uncharted.software rm -rf / all the UEFI WTF !!!

10 Tools metabrik http://www.metabrik.org/ automate malware analysis SpiderMal passive DNS analysis with python passivetotal and maltego zcash untraceable bitcoin alternative SET 7.0

11 CanSecWest – Vancouver 16-18 Mar B-Sides Austin - 31-1 Mar-Apr InfoSec Southwest – Austin 8-10 Apr B-Sides OK – 09 Apr B-Sides Nashville – 16 Apr ThotCon 0x7 – Chicago 5-6 May B-Sides San Antonio21 May Circle City Con – Indianapolis 10-12 Jun SANS DFIR Summit – Austin 23-30 Jun Cons

12 DC214 in top 5 for 2015 2016 Contest --> what can you do to make a positive impact on the community With the relaunch of DEF CON Groups we wanted to start a new kind of initiative, but in a recognizable format: we want to bring in the new year with a competition. This is the first competition of its kind. It’s not a black badge competition but it will take a lot of work and determination to succeed - and the rewards are equally sweet. This is a year-long competition for all DEF CON groups, and we expect quality. Here’s the challenge: what can you do to make a positive impact on the community, be it globally, locally, or hacker-globally. What can your DCG do to improve… anything? We’re trying to make something better, not just point out what is broken without providing a solution. To be entered into the competition, submit a link to a 3- minute (at least!) YouTube video from your DCG as a whole describing what you’re planning on accomplishing over the year. Don’t just generally describe what you want to do - describe your time schedule, who has expertise in what, why, etc. The more detail the better. DefCon Groups

13 CanSecWest – Vancouver 16-18 Mar B-Sides Austin - 31-1 Mar-Apr InfoSec Southwest – Austin 8-10 Apr B-Sides OK – 09 Apr B-Sides Nashville – 16 Apr ThotCon 0x7 – Chicago 5-6 May B-Sides San Antonio21 May Circle City Con – Indianapolis 10-12 Jun SANS DFIR Summit – Austin 23-30 Jun Cons

14 DHA ( 1 st Wednesday / Family Karaoke, dallas ) TX2600 ( 1 st Fri / Wild Turkey 35&WalnutHill, dallas ) The Lab.MS ( 2 nd Monday + random events / TheLab.ms, plano ) OWASP Dallas ( 3 rd Tuesday / location varies ) Crypto Party ( 3 rd Thursday / Improving Enterprises, addison ) NAISG replacement is coming ( 4 th Thursday, Jakes, Frisco ) Dallas MakerSpace ( Random events / carrollton )

15 All images scavenged without permission

Download ppt "PREVIOUSLY GNEWS Feb – 13 Patches – 6 Critical – 36ish CVEs MS16-009 - Cumulative Security Update for IE, Remote Code MS16-011 - Cumulative Security."

Similar presentations

PREVIOUS GNEWS. 7 Patches – 3 Critical – 23 CVEs Affected – RDP, IE, Lync, Windows Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS12-036.

PREVIOUS GNEWS. 7 Patches – 3 Critical – 23 CVEs Affected – RDP, IE, Lync, Windows Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS
PREVIOUS GNEWS. 11 Patches – 5 Critical Affecting most everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS10-018 - IE, Remote Execution.

PREVIOUS GNEWS. 11 Patches – 5 Critical Affecting most everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS IE, Remote Execution.
. 15 Patches / 32 Vulns – 9 Critical Affecting most everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS10-046 - Windows.

. 15 Patches / 32 Vulns – 9 Critical Affecting most everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS Windows.
PREVIOUS GNEWS. 13 Patches – 5 Critical Affecting Windows (pretty much all of them) Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS10-003.

PREVIOUS GNEWS. 13 Patches – 5 Critical Affecting Windows (pretty much all of them) Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS
GNEWS PREVIOUS. Feb - 14 Patches – 5 Critical - 45 CVEs MS15-018 - Cumulative Security Update for IE MS15-019 - VBScript Scripting, Remote Code MS15-020.

GNEWS PREVIOUS. Feb - 14 Patches – 5 Critical - 45 CVEs MS Cumulative Security Update for IE MS VBScript Scripting, Remote Code MS
PREVIOUS GNEWS. Oct - 8 Patches – 3 Critical - 24 CVEs MS14-056 - Cumulative Security Update for Internet Explorer MS14-057 -.NET Framework, Remote Code.

PREVIOUS GNEWS. Oct - 8 Patches – 3 Critical - 24 CVEs MS Cumulative Security Update for Internet Explorer MS NET Framework, Remote Code.
 . Apr - 8 Patches – 2 Critical - 45 CVEs MS15-056 - Cumulative Security Update for IE, Remote Code MS15-057 - Windows Media Player, Remote.

 . Apr - 8 Patches – 2 Critical - 45 CVEs MS Cumulative Security Update for IE, Remote Code MS Windows Media Player, Remote.
PREVIOUS GNEWS. Apr 4 Patches – 2 Critical – 11 CVEs MS14-017 - Microsoft Word and Office Web Apps, Remote Code MS14-018 - Cumulative Security Update.

PREVIOUS GNEWS. Apr 4 Patches – 2 Critical – 11 CVEs MS Microsoft Word and Office Web Apps, Remote Code MS Cumulative Security Update.
PREVIOUS GNEWS. Feb - 9 Patches – 3 Critical - 55 CVEs MS15-009 - Update for Internet Explorer MS15-010 - Windows Kernel-Mode Driver, Remote Code MS15-011.

PREVIOUS GNEWS. Feb - 9 Patches – 3 Critical - 55 CVEs MS Update for Internet Explorer MS Windows Kernel-Mode Driver, Remote Code MS
9 Patches – 2 Critical – 12 CVEs Affected – IE, Kernel, SharePoint, Remote Desktop, AD….. Other updates, MSRT, Defender Definitions, Junk Mail Filter.

9 Patches – 2 Critical – 12 CVEs Affected – IE, Kernel, SharePoint, Remote Desktop, AD….. Other updates, MSRT, Defender Definitions, Junk Mail Filter.
. Apr - 11 Patches – 4 Critical - 26 CVEs MS15-032 - Cumulative Security Update for IE MS15-033 - Office, Remote Code MS15-034 - HTTP.sys,

. Apr - 11 Patches – 4 Critical - 26 CVEs MS Cumulative Security Update for IE MS Office, Remote Code MS HTTP.sys,
PREVIOUS GNEWS. 6 Patches – 1 Critical – 22 CVEs Affected – IE. Kernel, Print, Office MS13-047 - Cumulative Security Update for Internet Explorer MS13-048.

PREVIOUS GNEWS. 6 Patches – 1 Critical – 22 CVEs Affected – IE. Kernel, Print, Office MS Cumulative Security Update for Internet Explorer MS
PREVIOUS GNEWS. Patches – 1 Critical Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS12-017 DNS Server, DoS –MS12-018 Kernal Mode Driver,

PREVIOUS GNEWS. Patches – 1 Critical Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS DNS Server, DoS –MS Kernal Mode Driver,
PREVIOUS GNEWS. 7 Patches – 3 Critical – 23 CVEs Affected – Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS12-029 Microsoft Word, Remote.

PREVIOUS GNEWS. 7 Patches – 3 Critical – 23 CVEs Affected – Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS Microsoft Word, Remote.
PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight Sarepoint,….. Other updates, MSRT, Defender Definitions, Junk.

PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight Sarepoint,….. Other updates, MSRT, Defender Definitions, Junk.
PREVIOUS GNEWS. 2 Patches / 3 Vulns – 1 Critical Affecting Windows XP, Vista, 7, 2003, 2008 Other updates, MSRT, Defender Definitions, Junk Mail Filter.

PREVIOUS GNEWS. 2 Patches / 3 Vulns – 1 Critical Affecting Windows XP, Vista, 7, 2003, 2008 Other updates, MSRT, Defender Definitions, Junk Mail Filter.
Previous Gnews. 13 Patches – 8 Critical, Affects pretty much everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS09-050 - SMBv2.

Previous Gnews. 13 Patches – 8 Critical, Affects pretty much everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS SMBv2.
PREVIOUS GNEWS. July - 6 Patches – 2 Critical - 27 CVEs MS14-037 - Cumulative Security Update for IE, Remote Code MS14-038 – Windows Journal, Remote Code.

PREVIOUS GNEWS. July - 6 Patches – 2 Critical - 27 CVEs MS Cumulative Security Update for IE, Remote Code MS – Windows Journal, Remote Code.
PREVIOUS GNEWS. 8 Patches – 3 Critical – 19+ CVEs Affected – GDI, Hyper-V, Outlook, Office, IE, Activex, and more MS13-088 - Cumulative Security Update.

PREVIOUS GNEWS. 8 Patches – 3 Critical – 19+ CVEs Affected – GDI, Hyper-V, Outlook, Office, IE, Activex, and more MS Cumulative Security Update.
PREVIOUS GNEWS. 7 Patches – 1 Critical Affecting server builds and powerpoint Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS12-001 Windows.

PREVIOUS GNEWS. 7 Patches – 1 Critical Affecting server builds and powerpoint Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS Windows.

Similar presentations

Ads by Google