Previous Gnews. 13 Patches – 8 Critical, Affects pretty much everything Other updates, MSRT,...
-
Upload
claude-lambert -
Category
Documents
-
view
214 -
download
2
Transcript of Previous Gnews. 13 Patches – 8 Critical, Affects pretty much everything Other updates, MSRT,...
![Page 1: Previous Gnews. 13 Patches – 8 Critical, Affects pretty much everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS09-050 - SMBv2.](https://reader035.fdocuments.us/reader035/viewer/2022080917/56649ec75503460f94bd414d/html5/thumbnails/1.jpg)
Previous Gnews
![Page 2: Previous Gnews. 13 Patches – 8 Critical, Affects pretty much everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS09-050 - SMBv2.](https://reader035.fdocuments.us/reader035/viewer/2022080917/56649ec75503460f94bd414d/html5/thumbnails/2.jpg)
• 13 Patches – 8 Critical, Affects pretty much everything
• Other updates, MSRT, Defender Definitions, Junk Mail Filter
– MS09-050 - SMBv2 Remote Code Execution– MS09-051 - Windows Media Runtime Remote Code Execution– MS09-052 - Vulnerability in Windows Media Player Remote Code Execution– MS09-053 - FTP Service for Internet Information Services Remote Code Execution– MS09-054 - Cumulative Security Update for Internet Explorer– MS09-055 - Cumulative Security Update of ActiveX Kill Bits– MS09-056 - Windows CryptoAPI Spoofing– MS09-057 - Vulnerability in Indexing Service Remote Code Execution– MS09-058 - Windows Kernel Elevation of Privilege– MS09-059 - Vulnerability in Local Security Authority Subsystem Service Denial of Service– MS09-060 - Microsoft Active Template Library (ATL) ActiveX Controls for Microsoft Office
Remote Code Execution– MS09-061 - the Microsoft .NET Common Language Runtime Remote Code Execution– MS09-062 - GDI+ Remote Code Execution
Patch Tuesday
![Page 3: Previous Gnews. 13 Patches – 8 Critical, Affects pretty much everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS09-050 - SMBv2.](https://reader035.fdocuments.us/reader035/viewer/2022080917/56649ec75503460f94bd414d/html5/thumbnails/3.jpg)
• Oracle Patches are due Oct 20th.
• Apple iTunes 9.0.1• Apple Xsan 2.2• Apple Security Update 2009-005• Mac OS X 10.6
• Bug in 10.6 wipes user data
• VLC Plyer, multiple buffer overflows
• googleapps.exe mishandles ‘googleapps.url.mailto:’
• Adobe Reader
• Browsers - Chrome, Firefox
Holes / Patches
![Page 4: Previous Gnews. 13 Patches – 8 Critical, Affects pretty much everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS09-050 - SMBv2.](https://reader035.fdocuments.us/reader035/viewer/2022080917/56649ec75503460f94bd414d/html5/thumbnails/4.jpg)
Hacking • Skulpt and Pyjamas – Python in a browser
• Twitter direct messaging “worm”– Phishing attempt
• variance-based radio tomographic imaging– X-Ray vision via wireless
• PayPal null prefix SSL certificate– Moxie Marlispike – SSLsniff and SSLstrip
• Office Starter 2010– Ad Based Office Lite
![Page 5: Previous Gnews. 13 Patches – 8 Critical, Affects pretty much everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS09-050 - SMBv2.](https://reader035.fdocuments.us/reader035/viewer/2022080917/56649ec75503460f94bd414d/html5/thumbnails/5.jpg)
Corp. Hell• Facebook to shutdown Beacon
• Microsoft Essentials goes live, blocked on “unofficial” OSes
• Next version of Firefox will fix XSS– Content Security Policy (CSP)
• iPhone to allow VOIP
![Page 6: Previous Gnews. 13 Patches – 8 Critical, Affects pretty much everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS09-050 - SMBv2.](https://reader035.fdocuments.us/reader035/viewer/2022080917/56649ec75503460f94bd414d/html5/thumbnails/6.jpg)
Books
![Page 7: Previous Gnews. 13 Patches – 8 Critical, Affects pretty much everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS09-050 - SMBv2.](https://reader035.fdocuments.us/reader035/viewer/2022080917/56649ec75503460f94bd414d/html5/thumbnails/7.jpg)
Games
Wii upgrade attempts to block home-brew
![Page 8: Previous Gnews. 13 Patches – 8 Critical, Affects pretty much everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS09-050 - SMBv2.](https://reader035.fdocuments.us/reader035/viewer/2022080917/56649ec75503460f94bd414d/html5/thumbnails/8.jpg)
PapersA Spotlight on Security and Privacy Risks with FutureHousehold Robots: Attacks and Lessons
University of Washington
[IN]SECURE Magazine 22
![Page 9: Previous Gnews. 13 Patches – 8 Critical, Affects pretty much everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS09-050 - SMBv2.](https://reader035.fdocuments.us/reader035/viewer/2022080917/56649ec75503460f94bd414d/html5/thumbnails/9.jpg)
Updates
snort.2.8.5
Websecurify
flawfindersource code review
NST v2.11.0
Emerging threats changes rule sets, config update needed
John the ripper 1.7.3.4
samhain 2.5.9cfile integrity
![Page 11: Previous Gnews. 13 Patches – 8 Critical, Affects pretty much everything Other updates, MSRT, Defender Definitions, Junk Mail Filter –MS09-050 - SMBv2.](https://reader035.fdocuments.us/reader035/viewer/2022080917/56649ec75503460f94bd414d/html5/thumbnails/11.jpg)
All images scavenged without permission
All images scavenged without permission