ZFS Can Do that | TechSNAP 130

chris

9 years ago

We’ll look back at 10 years of Patch Tuesday, then the shutdown of Lavabit and Silkroad.

Plus a big batch of your questions, our answers, and much much more!

Thanks to:

On Oct. 9, 2003, Microsoft announced its new security patching process, it ended up changing the entire industry
Microsoft promised:
“Improved patch management processes, policies and technologies to help customers stay up to date and secure.”
“Global education programs to provide better guidance and tools for securing systems.”
“Our goal is simple: Get our customers secure and keep them secure. Our commitment is to protect our customers from the growing wave of criminal attacks.”
Microsoft started blogging about security issues and also embarked on serious outbound communication campaigns to educate users
Even Microsoft’s security bulletin text format and sections were delivered in a consistent format that security professionals have come to rely upon
Today public disclosure of serious Microsoft security holes is now the exception

A new variant of the \”Kore-ish\” Cool Exploit Kit appears to make use of two new zero-day exploits in Java7u21
CVE-2013-2460
CVE-2013-2472
It appears this vulnerability may have originally been discovered by VUPEN and solid to governments and used for an indeterminate amount of time, until it was fixed by Oracle in Java7u25
The current version of Java is Java7u40
The latest version of Java includes a new ‘deployment rule set’ feature, that allows enterprise customers to create a whitelist of allowable applications, preventing drive-by attacks

An person pretending to be an IT admin, walked in to the branch and installed an IP-KVM connected to a 3G Router, then later used it to take over the workstation it was connected to
Barclays claims to have recovered “a significant amount” of the stolen money
When police raided a number of properties to arrest the perpetrators, they found thousands of credit cards and other personal data, plus drugs, jewellery and cash
This is not the first time Barclay’s has been hit. “We have been working closely with the Metropolitan Police following a security breach at our Swiss Cottage branch in April 2013. We identified the fraud and acted swiftly to recover funds on the same day,” said Alex Grant, managing director of fraud prevention at Barclays.

[asa]B00457X7XQ[/asa]