Date post: | 05-Jan-2016 |
Category: |
Documents |
Upload: | robert-palmer |
View: | 221 times |
Download: | 2 times |
• 6 Patches, 15 bug – 3 Critical, Affects 2000, XP, Srv 2003 / 8, Vista, Office
• Other updates, MSRT, Defender Definitions, Junk Mail Filter
– MS09-063 - Web Services on Devices API Remote Code Execution– MS09-064 - License Logging Server Remote Code Execution– MS09-065 - Windows Kernel-Mode Drivers Remote Code Execution– MS09-066 - Active Directory Denial of Service– MS09-067 - Microsoft Office Excel Remote Code Execution– MS09-068 - Office Word Remote Code Execution
Patch Tuesday
• VMWare, Multiple Vulns– DHCP DoS– Guest Escaltion, Directory Traversal
• SSL/TLS is broken
• Java
• Adobe
• Wireshark, DoS Paltalk dissector
• Browsers– Firefox, Chrome, Opera, Safari
Holes / Patches
Hacking • VM Detection in Malware
• Evil-Maid– Drive Encryption Bypassing
• CSS History HiJacking
• Facebook HiJacking– crossdomain.xml
• Stroke dies, kinda, maybe...
• Apple 2009-006– 10.6.2 breaks atom support
• iPhone worm– root - alpine
• Google Cloud used for bot master
• Windows 7 / 2008 kernal crash
Holes / Patches
Books
• Free COFEE– Computer Online Forensic Evidence Extractor
• Rapid7 acquires Metasploit
• CyberTerror… it’s all in your head
• Hulu proxy blocking
• ICANN approves non-latin chars in TLD
• Skype for Linux to go open
• MS and NC State create Hypervisor based rootkit detection
Papers
Mostrame la Guita! Adventures in Buying Vulnerabilities
Pedram Amini
Web Application Security Consortium (WASC) 2008 Statistics
Microsoft Security Intelligence Report
WTF
• CIA invests in social network mining
• MS reports profits under Nevada
• New Zealand recommends eating your pets to go green
Legal
• FCC and Net Neutrality
• Pirate Bay (almost dead this time…)
• Email not protected by 4th Ammendment
• Congress wants ISPs to block fraud sites
UpdatesOragami 1.0.0
PDF forensics and forgery
Mozilla RaindropThink Google Wave
Nikto 2.1
KrbGuess 0.21Kerberos brute forcer
Yokoso 0.1Web finger printing
Chrome 4 Beta
RATS proxy 2.3
Google Go
All images scavenged without permission
All images scavenged without permission