Bollinger Mill and Bridge - Cape Girardeau

MOREnet Security News Review -- July 14 - 18, 2014

Friday, July 18, 2014

WEEKLY THREAT RESOURCE SITE

WatchGuard Security Center
 

KNOW YOUR ENEMY – THREAT ID OF THE WEEK

Backdoors – A backdoor is an undocumented method used by programmers or administrators to gain access to a device or software by bypassing normal authentication. When installed legitimately it can be used for troubleshooting or to regain access (forgotten password). Unfortunately, it can also be used by the bad guys to install malicious software, make changes to the configuration, or gain unauthorized access to the system and data. Check out the following links for more information.
The 12 biggest, baddest, boldest software backdoors of all time
http://www.2-spyware.com/backdoors-removal
http://computersecurity.wikia.com/wiki/Backdoor
 

TOP HEADLINES THIS WEEK

Own a Cisco modem or wireless gateway? It might be owned by someone else, too
Pushdo Trojan outbreak: 11 Thousand Systems Infected in Just 24 hours
Ransomware: 5 Threats To Watch
“Gameover” malware returns from the dead
LastPass discloses now-fixed flaws ahead of security conference
Hacking Password Managers
Large-scale DDoS Attacks Continue to Spike
Cached Domain Credentials in Vista/7 (AKA Why Full Drive Encryption is Important)
How to burn a password into your brain
You don’t need a HERO, you need a ZERO. From Google
New IP-based wireless networking protocol created
 

VULNERABILITIES AND PATCHES

US-CERT Vulnerability Summary for the Week of July 7, 2014
Oracle Critical Patch Update Advisory – July 2014
Cisco Patches Four-Year-Old Apache Struts 2 Issue
Active Directory Vulnerability Disclosure
 

SECURITY TOOLBOX

The Digital First Aid Kit
Haka
Password Security Scanner
Lynis v1.5.7 Released
Snort 2.9.6.2
Weekly Metasploit Update
 

HOW DO THEY DO THAT?

openSSH configuration Tutorial – Kali Linux
Managing AppLocker in Windows Server 2012 and Windows 8/8.1 (Part 1)
Managing AppLocker in Windows Server 2012 and Windows 8/8.1 (Part 2)
Managing AppLocker in Windows Server 2012 and Windows 8/8.1 (Part 3)
 

FEATURED SERVICE

Mobility Management with AirWatch by VMware  – MOREnet is pleased to offer its members discounted pricing for AirWatch by VMware device licenses and setup assistance direct from the AirWatch Team. Check out the following link for additional Features and Benefits. http://www.more.net/services/mobility-management
 

UPCOMING TRAINING AND EVENTS

  1. Introduction to Windows 2012 Server Administration – Tuesday, July 22 – Wednesday, July 23, MOREnet, Columbia, MO -- Designed to build a foundation in basic server administration, this class introduces students to many of Windows Server 2012 features. The class includes extensive exercises which reinforce Microsoft Windows Server 2012 network administration skills as they are learned. Click this link to register
  2. Windows 2012 Group Policy – Thursday, July 24, MOREnet, Columbia MO -- Designed to build a foundation in basic server administration, this class introduces students to many of Windows Server 2012 features. The class includes extensive exercises which reinforce Microsoft Windows Server 2012 network administration skills as they are learned. Click this link to register
  3. 2014 MOREnet Annual Conference – Monday, October 27 – Thursday, October 30, Columbia, MO – It’s not always about the technology- It’s also about what the technology can do for you. MOREnet’s Annual Conference is a professional development opportunity that allows our members to choose the track that’s right for you. Do you want to mix and match sessions tracks? That’s okay, too! Click this link for more information

Do you know of any upcoming security-related training events?  Please send them to security@more.net for inclusion in this newsletter.

SECURITY AWARENESS TIP OF THE WEEK

How safe are the results of your online searches? Have you ever clicked on one of the links and had multiple windows start popping up or your anti-virus alert you to an infection? Check out the following article for some tips to stay protected when searching online.
Most dangerous superheores to search for online