FIRST Robotics - group

MOREnet Security News Review -- August 25 - 29, 2014

Friday, August 29, 2014

WEEKLY THREAT RESOURCE SITE

Lockheed Martin Cyber Security
 

KNOW YOUR ENEMY – THREAT ID OF THE WEEK

Backoff POS Malware – I’m sure by now you’ve heard of Backoff POS Malware… but do you know how it could affect you? Check out the following links to learn more about what it is and how it’s used.
Backoff POS Malware: Are You Infected and Don’t Know It?
US-CERT -- Backoff Point-of Sale Malware
Retailers urged to defend against ‘Backoff’ point-of-sale malware
Over 1,000 U.S. Businesses Infected with Backoff POS Malware
 

TOP HEADLINES THIS WEEK

PlayStation Network Brought Down by DDoS Attack
Online Tools for Bug Disclosure Abound
“There is no inside” – How to get the most from your firewall
How to improve your Twitter security and privacy
SIEMs like a good idea: How to manage security in real time
NIST to sysadmins: clean up your SSH mess
Stiffed by Synolocker ransomware crims? Try F-Secure’s python tool
5 cool new security research breakthroughs
Patching: The least understood line of defense
Beware of malicious “Windows 9 free download” offers
 

VULNERABILITIES AND PATCHES

Microsoft Security Bulletin MS14-045
US-CERT Vulnerability Summary for the Week of August 18, 2014
US-CERT Alert (TA14-212A) Backoff Point-of-Sale Malware
Google Chrome Updates
 

SECURITY TOOLBOX

PGP Alternatives for Email Encryption
Bitmask
Free SANS Security Policy Templates
ClamAV
Netflix releases home-grown DDoS detectors
 

HOW DO THEY DO THAT?

Google Maps tracking your Every Move, check for your FootPrints
Locating ICS and SCADA Systems on .EDU Networks with Shodan
 

FEATURED SERVICE

Network Backup -- MOREnet is offering a network backup service for members to back up mission-critical data to an off-site location. Members will have access to a hosted backup service located in a secure data facility that connects directly into the core MOREnet network. Click this link for more information
 

UPCOMING TRAINING AND EVENTS

  1. 2014 MOREnet Annual Conference – Monday, October 27 – Thursday, October 30, Columbia, MO – It’s not always about the technology- It’s also about what the technology can do for you. MOREnet’s Annual Conference is a professional development opportunity that allows our members to choose the track that’s right for you. Do you want to mix and match sessions tracks? That’s okay, too! Click this link for more information

FREE ONLINE SECURITY TRAINING

OpenSecurityTraining.info
SecurityTube.net
 
Do you know of any upcoming security-related training or events?  Please send them to security@more.net for inclusion in this newsletter.
 

SECURITY AWARENESS QUOTE OF THE WEEK

The user's going to pick dancing pigs over security every time.” — Bruce Schneier