Presentation is loading. Please wait.

Presentation is loading. Please wait.

GNEWS PREVIOUS. Feb - 14 Patches – 5 Critical - 45 CVEs MS15-018 - Cumulative Security Update for IE MS15-019 - VBScript Scripting, Remote Code MS15-020.

Published byDarrell Hampton Modified over 9 years ago

Similar presentations

Presentation on theme: "GNEWS PREVIOUS. Feb - 14 Patches – 5 Critical - 45 CVEs MS15-018 - Cumulative Security Update for IE MS15-019 - VBScript Scripting, Remote Code MS15-020."— Presentation transcript:

1 GNEWS PREVIOUS

2 Feb - 14 Patches – 5 Critical - 45 CVEs MS15-018 - Cumulative Security Update for IE MS15-019 - VBScript Scripting, Remote Code MS15-020 - Microsoft Windows, Remote Code MS15-021 - Adobe Font Driver, Remote Code MS15-022 - Microsoft Office, Remote Code MS15-023 - Kernel-Mode Driver, Privilege Escalation MS15-024 - PNG Processing, InfoDisclosure MS15-025 - Windows Kernel, Privilege Escalation MS15-026 - Microsoft Exchange Server, Privilege Escalation MS15-027 - NETLOGON, Spoofing MS15-028 - Windows Task Scheduler, Security Bypass MS15-029 - Windows Photo Decoder Component, Info Disclosure MS15-030 - Remote Desktop Protocol, DoS MS15-031 - Schannel, Security Bypass (FREAK) Other updates, MSRT, Defender Definitions, Junk Mail Filter Patch Tuesday

3 Oracle –Due in Apr Adobe –0 – All Secure Here Apple, –iOS 8.2 –Apple TV 7.1 –Security Update 2015-002 (FREAK) –Xcode 6.2 Cisco –IOS AAA Auth Bypass –IPV6 DoS (NCS600 / CRS-X) –ASA challenge/response bypass –TelePresence Multi-Vuln –Web Security Appliance Multi-Vuln VMWare –0 – All Secure Here SAMBA –CVE-2015-0240, Remote Code GnuPG –Multi-Vuln, DoS / Remote Code Holes / Patches

4 TrueCrypt Audit TLS Audit Netgear router, no auth needed soho routers share common key seagate nas Google Play Store Mongo DB Encryption to styme reversing via Translation Lookaside Buffer RAMNIT takedown 'The Equation Group' HD firmware hack partial leak of rig exploit kit spying via power All your FB Photo are belong to dev null samsung voice data still unencrypted Hacking

5 Blu-Ray PowerDVD Java badness iPay, hindered by lax banking authentication Freak RowHammer Hacking

6 Uber lost and found loses data Uber driver data breach Mozilla to force add-on signing Apple brings two-step verification to facetime Lenovo pre-installed MITM adware, Superfish –Lenovo says NAH, later back peddle like a champ –Mozilla pulls Cert BUT WAIT THERE IS MORE!!! PrivDog / Comodo FB Threat Exchange FB Real Name Policy (sister inlaw can't use her name) MC Security Enhancements –facial and fingerprint (where is this data stored / give what to get what?) Google Caves to pressure, relaxing 90 day rule MS Win10 and FIDO Google Wallet looking for revival with SoftCard Samsung Acquires Loopay CORP

7 Taiga Systems Super –secure phone from russia Kaymera 360 (blackphone competitor) Nvidia to remove overclocking block Fedex and UPS self regulating tool delivery Twitter reporting update Paypal acquires Paydiant HP acquires Aruba EA ditches SIMS Google drops the lollipop TextSecure is no longer secure text Corp

8 GCHQ/NSA Gemalto hack –Gemalto gives no fuks –Gemalto drops findings statement –"Very impressive, Gemalto had no idea of any attacks in 2010, one week ago. Now they know exactly what happened..." --Matt Suiche FAA Drone rules revamp NetNeutratily Win Ecuador Coin StingRays can disrupt normal services –http://www.wired.com/wp-content/uploads/2015/02/Stingray-pen-register-order-and-application.pdf List of National CIRTs –http://www.secur DHS 7 day bailout NZ requesting mandatory passwd disclosure NSLs cause they are "different" now. (3 yr expire) we all have jobs, Yay! –Pentagon hiring hackers Kenya Rocks Govt

9 win phone forensics https://www.sans.org/reading-room/whitepapers/forensics/windows-phone-8-forensic-artifacts-35787 warchalk redux http://www.wired.com/2015/02/field-guide-internet-infrastructure-hides-plain-sight/ Recon with no permission (not recommended) http://resources.infosecinstitute.com/owasp-zap-reconnaissance-without-permission/ FB policies https://www.eff.org/deeplinks/2015/02/new-report-shows-european-data-protection-authorities-are- taking-facebooks http://www.law.kuleuven.be/icri/en/news/item/icri-cir-advises-belgian-privacy-commission-in- facebook-investigation http://www.law.kuleuven.be/icri/en/news/item/facebooks-revised-policies-and-terms-v1-1.pdf Schneier "Surreptitiously Weakening Cryptographic Systems" https://www.schneier.com/blog/archives/2015/02/surreptitiously_1.html Air Traffic Control Report http://www.gao.gov/assets/670/668169.pdf PowerCat (netcat for PowerShell) https://www.sans.org/reading-room/whitepapers/testing/powercat-proof-of-concept-powershell-netcat- 35807 Papers

10 BurningMan Tickets Hacked WTF!?

11 HTTP/2 approved SET 6.2 Android Emulation Tools

12 Kaspersky Security Analyst Summit Google drops Pwnium contest at con, makes it all year event. Source Boston CFP Cons Past

13 B-Sides Austin12 – 13 Mar CanSecWest18 - 20 Mar InfoSec Southwest10 – 12 Apr B-Sides Nashville11 Apr B-Sides San Antonio? May ThotCon 0x614 – 15 May PenTest Austin (SANS)18 – 23 May DefCon 236 – 9 Aug Cons Future

14 DHA ( 1 st Wednesday / Tavern on Main, richardson ) TX2600 ( 1 st Fri / Wild Turkey 35&WalnutHill, dallas ) (1 st Fri / 1418 Coffeehouse, plano) The Lab.MS ( 2 nd Monday / varies, plano ) Crypto Party ( 3 rd Thursday / Improving Enterprises, addison ) NAISG ( 4 th Thursday / CrossPointe Theatre, carrollton ) LockPick DFW ( Last Monday / looking for new spot, dallas ) Dallas MakerSpace Random / carrollton Local

15 All images scavenged without permission

Download ppt "GNEWS PREVIOUS. Feb - 14 Patches – 5 Critical - 45 CVEs MS15-018 - Cumulative Security Update for IE MS15-019 - VBScript Scripting, Remote Code MS15-020."

Similar presentations

PREVIOUS GNEWS. ? Patches – ? Critical – ? CVEs Affected – ? Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS12-052+ - NEXT WEEK FOOL Patch.

PREVIOUS GNEWS. ? Patches – ? Critical – ? CVEs Affected – ? Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS NEXT WEEK FOOL Patch.
PREVIOUS GNEWS. ? Patches – ? Critical – ? CVEs Affected – ? Other updates, MSRT, Defender Definitions, Junk Mail Filter Patch Tuesday.

PREVIOUS GNEWS. ? Patches – ? Critical – ? CVEs Affected – ? Other updates, MSRT, Defender Definitions, Junk Mail Filter Patch Tuesday.
PREVIOUS GNEWS. 7 Patches – 3 Critical – 23 CVEs Affected – RDP, IE, Lync, Windows Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS12-036.

PREVIOUS GNEWS. 7 Patches – 3 Critical – 23 CVEs Affected – RDP, IE, Lync, Windows Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS
PREVIOUS GNEWS. 11 Patches – 5 Critical Affecting most everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS10-018 - IE, Remote Execution.

PREVIOUS GNEWS. 11 Patches – 5 Critical Affecting most everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS IE, Remote Execution.
. 15 Patches / 32 Vulns – 9 Critical Affecting most everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS10-046 - Windows.

. 15 Patches / 32 Vulns – 9 Critical Affecting most everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS Windows.
PREVIOUS GNEWS. 13 Patches – 5 Critical Affecting Windows (pretty much all of them) Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS10-003.

PREVIOUS GNEWS. 13 Patches – 5 Critical Affecting Windows (pretty much all of them) Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS
3 Patches – x bugs addressed Affecting Kernel, SChannel, DNS/WINS Other updates, MSRT, Defender Definitions, Junk Mail Filter 3 Security Patches - 1 Critical,

3 Patches – x bugs addressed Affecting Kernel, SChannel, DNS/WINS Other updates, MSRT, Defender Definitions, Junk Mail Filter 3 Security Patches - 1 Critical,
PREVIOUS GNEWS. Oct - 8 Patches – 3 Critical - 24 CVEs MS14-056 - Cumulative Security Update for Internet Explorer MS14-057 -.NET Framework, Remote Code.

PREVIOUS GNEWS. Oct - 8 Patches – 3 Critical - 24 CVEs MS Cumulative Security Update for Internet Explorer MS NET Framework, Remote Code.
 . Apr - 8 Patches – 2 Critical - 45 CVEs MS15-056 - Cumulative Security Update for IE, Remote Code MS15-057 - Windows Media Player, Remote.

 . Apr - 8 Patches – 2 Critical - 45 CVEs MS Cumulative Security Update for IE, Remote Code MS Windows Media Player, Remote.
PREVIOUS GNEWS. Apr 4 Patches – 2 Critical – 11 CVEs MS14-017 - Microsoft Word and Office Web Apps, Remote Code MS14-018 - Cumulative Security Update.

PREVIOUS GNEWS. Apr 4 Patches – 2 Critical – 11 CVEs MS Microsoft Word and Office Web Apps, Remote Code MS Cumulative Security Update.
PREVIOUS GNEWS. Feb - 9 Patches – 3 Critical - 55 CVEs MS15-009 - Update for Internet Explorer MS15-010 - Windows Kernel-Mode Driver, Remote Code MS15-011.

PREVIOUS GNEWS. Feb - 9 Patches – 3 Critical - 55 CVEs MS Update for Internet Explorer MS Windows Kernel-Mode Driver, Remote Code MS
9 Patches – 2 Critical – 12 CVEs Affected – IE, Kernel, SharePoint, Remote Desktop, AD….. Other updates, MSRT, Defender Definitions, Junk Mail Filter.

9 Patches – 2 Critical – 12 CVEs Affected – IE, Kernel, SharePoint, Remote Desktop, AD….. Other updates, MSRT, Defender Definitions, Junk Mail Filter.
. Apr - 11 Patches – 4 Critical - 26 CVEs MS15-032 - Cumulative Security Update for IE MS15-033 - Office, Remote Code MS15-034 - HTTP.sys,

. Apr - 11 Patches – 4 Critical - 26 CVEs MS Cumulative Security Update for IE MS Office, Remote Code MS HTTP.sys,
PREVIOUS GNEWS. 6 Patches – 1 Critical – 22 CVEs Affected – IE. Kernel, Print, Office MS13-047 - Cumulative Security Update for Internet Explorer MS13-048.

PREVIOUS GNEWS. 6 Patches – 1 Critical – 22 CVEs Affected – IE. Kernel, Print, Office MS Cumulative Security Update for Internet Explorer MS
PREVIOUS GNEWS. Patches – 1 Critical Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS12-017 DNS Server, DoS –MS12-018 Kernal Mode Driver,

PREVIOUS GNEWS. Patches – 1 Critical Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS DNS Server, DoS –MS Kernal Mode Driver,
PREVIOUS GNEWS. 8 Patches – 10 bugs addressed Affecting Project, Visio, DNS, GDI, Scripting, Activex, IE, Windows Other updates, MSRT, Defender Definitions,

PREVIOUS GNEWS. 8 Patches – 10 bugs addressed Affecting Project, Visio, DNS, GDI, Scripting, Activex, IE, Windows Other updates, MSRT, Defender Definitions,
PREVIOUS GNEWS. 7 Patches – 3 Critical – 23 CVEs Affected – Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS12-029 Microsoft Word, Remote.

PREVIOUS GNEWS. 7 Patches – 3 Critical – 23 CVEs Affected – Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS Microsoft Word, Remote.
PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight Sarepoint,….. Other updates, MSRT, Defender Definitions, Junk.

PREVIOUS GNEWS. 7 Patches – 3 Critical – 20 CVEs Affected – IE, Kernel, Visio, Silverlight Sarepoint,….. Other updates, MSRT, Defender Definitions, Junk.
PREVIOUS GNEWS. 2 Patches / 3 Vulns – 1 Critical Affecting Windows XP, Vista, 7, 2003, 2008 Other updates, MSRT, Defender Definitions, Junk Mail Filter.

PREVIOUS GNEWS. 2 Patches / 3 Vulns – 1 Critical Affecting Windows XP, Vista, 7, 2003, 2008 Other updates, MSRT, Defender Definitions, Junk Mail Filter.
PREVIOUS GNEWS. 4 Patches – 12 bugs addressed Affecting Office, Visual Studio, BizTalk Other updates, MSRT, Defender Definitions, Junk Mail Filter 4 Security.

PREVIOUS GNEWS. 4 Patches – 12 bugs addressed Affecting Office, Visual Studio, BizTalk Other updates, MSRT, Defender Definitions, Junk Mail Filter 4 Security.

Similar presentations

Ads by Google