Weekly InfoSec News Brief 4-10 May

With Windows 10, Microsoft Will Move Away From Monthly Patch Cycle

"Patch Tuesday" could be a thing of the past soon, as Microsoft moves to a more rapid patch release model similar to that employed in many mobile operating systems, or in Apple OSX. Businesses that use the Pro and Enterprise OS editions will have additional options to allow for testing and planned deployment of patches.
http://www.computerworld.com/article/2920181/microsoft-windows/patch-tuesday-may-be-dead-but-microsofts-not-confessing-to-the-crime.html
http://www.scmagazine.com/dom-based-xss-attacks-due-to-bug-in-plugins-leveraging-genericons/article/413505/


WordPress 4.2.2 Released to Fix Another Significant New Vulnerability

WordPress announced last week a new version release that addresses a serious cross-site scripting vulnerability in the core WordPress engine. WordPress is an extremely popular website creation and management tool, or content management system. The vulnerability also affects the JetPack plugin and the Twenty Fifteen theme, which are installed on millions of sites by default. This is the third week in a row that a significant WordPress vulnerability has made our weekly news brief. If you are running a WordPress-based website, it is crucial that you watch closely for announced vulnerabilities in WordPress, as well as in any and all plugins you may be using.
https://wordpress.org/news/2015/05/wordpress-4-2-2/
http://www.scmagazine.com/dom-based-xss-attacks-due-to-bug-in-plugins-leveraging-genericons/article/413505/


New Malware Discovered Which Uses Highly Destructive Anti-Analysis Measures

Over the past several years, malicious software has been found to employ measures to avoid, evade, and defy analysis in order to conceal its purpose, nature, and origin. Last week Cisco researchers announced their discovery of a new malware strain, dubbed Rombertik, which resorts to destruction rather than evasion. If it detects an attempt at analysis, this program attempts to destroy the computer's master boot record and then force a reboot, which would render the machine inoperable.
http://www.scmagazine.com/cisco-writes-up-new-malware-campaign/article/413068/


Study Shows that 95% of SAP Environments Are Unpatched

Onapsis, a solutions provider for SAP systems, released last week a study showing that nearly all the SAP systems they examined were critically out of date on patches. SAP issues an average of 30 security patches every month, 50 percent of which are considered "critical." The mission-critical nature of SAP in many cases accounts for the reticence to take it offline to patch, or to risk a problem with a patch. What systems does your organization run that are so mission-critical you're unable to (or afraid to) patch them?
http://www.scmagazine.com/onapsis-release-sap-systems-study/article/413304/

Comments

Post a Comment

Popular posts from this blog

Weekly Infosec News Brief: 14-20 March

Image
Major Media Websites Caught up inNew Malicious Advertising Attacks Last week multiple major advertising networks, including Google's DoubleClick, AppNexus, Rubicon, and AOL were abused by attackers to serve up malicious advertisements on major media sites. These malicious advertisements were redirecting to the "Angler" exploit kit, which uses multiple means to attempt to compromise a browser and install malware. While such malicious ads are common on smaller websites, they are not unheard-of on major media sites. This outbreak, however, was unusually large and long-lived, lasting at least the better part of two days. Given how common malicious web ads are, some security experts are recommending the use of ad blocking technology in web browsers. http://www.computerworld.com/article/3044565/security/advertising-based-cyberattacks-hit-bbc-new-york-times-msn.html Malicious Macros in Word Documents Used to Install Malware with No Files Needed Everything old is new a
Read more

Weekly Infosec News Brief 20-26 July

Image
FBI Sees Massive Increase in Espionage, Including Industrial Espionage, Against the US The FBI on Thursday issued a press release discussing what they believe is an increasing threat of economic espionage against US companies. They estimate that such espionage may cost the US as much as "hundreds of billions" of dollars a year. This espionage is not just directed against large industrial companies, but any place where trade secrets and innovations might be found, including third-party organizations (e.g. business partners, vendors, consultants, lawyers, etc.) affiliated with targeted companies. A key take-away is that the threat is more widespread than most people think, and that few organizations are immune. https://www.fbi.gov/news/pressrel/press-releases/fbi-announces-economic-espionage-awareness-campaign http://www.cnn.com/2015/07/24/politics/fbi-economic-espionage/ Microsoft Releases Out-of-Cycle Patch for Critical Font Driver Bug A flaw uncovered in connecti
Read more

Weekly Infosec News Brief: 22-28 February

Image
Ransomware Observed to Jump from One Device to Another via the Cloud Researchers described last week an incident where they observed malicious "ransomware" propagating from one device to another via cloud-based file synchronization. When the ransomware encrypted files on one machine that synchronized files to a specific folder, it spread to other PCs that synchronized to that same folder. This type of phenomenon is simply another reason for organizations to serious consider limiting or eliminating the use of such file-synchronizing software within their networks. http://www.scmagazine.com/researchers-confirm-cases-of-ransomware-encryption-jumping-devices-via-cloud-apps/article/479572/ New OpenSSL Patches Soon to Come The OpenSSL project team announced last Thursday that they are working on patches to fix at least two "high" severity vulnerabilities in OpenSSL. This is the software that powers the cryptographic security layer of many web servers, browser
Read more