1. PREVIOUS GNEWS

2. 2 Patches – 2 Critical Affecting VB and Mail Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS10-031 – Visual Basic for Applications, Remote Execution –MS10-030 – Outlook Express / Windows Mail, Remote Execution Patch Tuesday

3. Adobe, 3 patches –APSB10-10 CS4 –APSB10-11 ColdFusion –APSB10-12 Shockwave Player Apple, –Security Update 2010-003 Cisco –Cisco IronPort Desktop Flag Plug-in, Disclosure –Cisco Router and Security Device Manager, XSS –NTP Package Remote Message Loop DoS –Cisco Small Business Video Surveillance Cameras and Cisco RVS4000 4-Port Gigabit Security Routers, Auth Bypass Browsers –Firefox, Chrome, Opera, Safari (unpatched) Holes / Patches

4. Facebook –API exposes data through “Events” –Site Link resets privacy to open Yelp / Facebook bleed over Open Source FB?? Diaspora* IBM HTTP, multiple vulns IBM WebSphere, multiple vulns Avaya products, multiple vulns in embedded firefox Avaya products, multiple vulns in embedded wireshark Adobe CS3, tiff processing vuln VLC Media Player, multiple vulns Java Holes / Patches

5. Symantec buys PGP and GuardianEdge Apax Partners buys Sophos FCC  Voluntary Cyber Security Certification? –Taking feedback until Sept 8 2010 Corp. Hell

6. WTF “The first step in a secure development process is to figure what level of risks you are willing to accept, and what level of security you need. For many organizations, the correct answer is to completely ignore security altogether.” ---Robert Graham, http://erratasec.blogspot.com/

7. Suricata RC1 open source ids/ips engine Iscanner 0.5 *nix malware scanner jarlsberg vulnerable app davtest 1.0 webdav scanner fuzzdb 1.06 fuzzer sequences patterns etc netsparker community editio webapp scanner Updates

8. CON Events CanSecWest Mar 24 BlackHat Europe Apr 12 Notacon Apr 15 Toorcon Seatle Apr 18 HITB Dubai Apr 19 THOTCON 0x1 Apr 23 rd – Sold Out Source Apr 24 Interop Vegas Apr 25 RECON (montreal) July 11

9. All images scavenged without permission