PREVIOUS GNEWS Patch Tuesday Jan

PREVIOUS GNEWS

Patch Tuesday • Jan – 4 Patches – 1 Critical – 3 CVEs • • MS 17 -001 - Cumulative Security Update for Microsoft Edge, Privilege Escalation MS 17 -002 - Microsoft Office, Remote Code MS 17 -003 - Adobe Flash Player, Remote Code MS 17 -004 - Local Security Authority Subsystem Service, Do. S

Holes / Patches • Oracle • VMWare – VMSA-2016 -0023 ( 1 CVE) – Due out 17 Jan • ESXi, XSS – VMSA-2016 -0024 ( 1 CVE) • • Adobe – APSB 17 -01 Acrobat and Reader ( 29 CVE) • – APSB 17 -02 Flash Player ( 13 CVE) • Apple – x • v. Sphere Data Protection, SSH Android – 2017 -01 -01, 23 CVE, 1 Critical – 2017 -01 -05, 72 CVE, 28 Critical Mongo. DB – Mass hihackings • MS Disabling Flash in Edge

• voice hacking • exploding smart meters • malicious doc via whatsapp • DOXWARE it is the next buzzword • github key finder • "ghost" webfilter evasion Hacking

• Rapid 7 CVE naming • Google Discloses NSL • 1 st Prime Drone deliveries • Ameriprise Financial NAS breach • Nokia claims Apple did patent infringement • VW buys Pay. By. Phone • Honda unveils car payment system • Topps breached • TMobile data "buy-back" Corp

• Challenages to Brit Snooper Charter • Signal blocking (and work around) • FOIA updates • barret brown is free • contractor dumps socom data • ransomware officially illegal in CA • • FTC IOT challange https: //www. ftc. gov/iot-home-inspector-challenge Govt

FDA Guidance http: //www. fda. gov/ucm/groups/fdagov-public/@fdagov-meddev-gen/documents/document/ucm 482022. pdf Ride share algorithm http: //www. pnas. org/content/early/2017/01/01/1611675114. full? sid=dec 921 ad-9 ea 1 -446 a-8 ee 6 -da 5 a 17 fa 9 f 12 http: //www. nature. com/articles/srep 36652 Papers RAM as CPU

x WTF

40+ vuln sites b. WAPP DVIA / DVWS Google Gruyere HACKTHIS!! Hellbound Hackers Mutillidae Over. The. Wire Perggia Try 2 Hack Vicnum Web. Goat Juice Shop Hack. me Hackademic Slaveack Hackxor Bodgelt Store Moth Enigma Group OWASP Bricks Exploit. Me Mobile Android Labs XSS game area W 3 Challs The Butterfly Security Project Reversing. KR Ring. Zer 0 Team Online CTF Tools top 10 tools of 2016 Nmap Metasploit John the Ripper THC Hydra OWASP Zed Wireshark Aircrack-NG Maltego top learning resources Future Learn EH Academy Infosec Institute Canvas Network Leap Courses squidmagic Web Based Traffic Analyzer (C&C detection)

Fu tur Co e ns Shmoo. Con 13 -15 Jan 3 rounds sold out 4. 19 / 2. 73 / 2. 28 seconds SANS Dallas 27 Feb-04 Mar Can. Sec. West 15 -17 Mar Hou. Sec. Con 7. 0 23 Mar BSides Austin SANS Pen. Test Austin 27 Mar-01 Apr Women in Cybersecurity 31 Mar-01 Apr Info. Sec Southwest 07 -08 Apr BSides Nashville 22 Apr

DHA @Dallas_Hackers ( 1 st Wednesday / Family Karaoke, dallas ) TX 2600 @dallas 2600 ( 1 st Fri / Wild Turkey 35&Walnut. Hill, dallas ) The Lab. MS @The. Lab_ms ( 2 nd Monday + random events / The. Lab. ms, plano ) Fort Worth Crypto Party ( 2 nd Tuesday / The Maker Spot, n. richland hills ) OWASP Dallas @OWASPDallas ( 3 rd Tuesday / location varies ) Crypto Party DFW @Crypto. Party. DFW ( 3 rd Thursday / The. Lab. ms, plano ) North Texas Cyber Security Group @ntxcsg ( Last Thursday, Jakes, Frisco ) Dallas Maker. Space @dallasmakers ( Random events / carrollton ) Hack Ft Worth @Hack_Ft. W ( 3 rdish Tuesday / Buffalo West) Lock Pick DFW @Lock. Pick. DFW ( Last Monday/ Sherlocks arlington )

All images scavenged without permission