Columbia, MO Memorial Union

MOREnet Security News Review -- June 2 - 6, 2014

Friday, June 6, 2014

WEEKLY THREAT RESOURCE SITE

Internet Crime Complaint Center (IC3)
 

KNOW YOUR ENEMY – THREAT ID OF THE WEEK

GameOver Zeus P2P Malware – GameOver Zeus has been around for a while but how much do you know about it? Check out the following links for more information on what it is, how it works, and what you can do to protect yourself.
 
US-CERT Alert (TA14-150A)
Has CryptoLocker been cracked? Is Gameover over?
Highly Resilient Peer-to-Peer Botnets Are Here: An Analysis of Gameover Zeus
‘Operation Tovar’ Targets ‘Gameover’ ZeuS Botnet, CryptoLocker Scourge
 

TOP HEADLINES THIS WEEK

List of Damage under #OpWorldCup and Anonymous’ target List of Sponsors
Firefox is going to implement Audio and Video calling feature between two Browsers
“Nemanja” Botnet Identified by IntelCrawler
The Best of Both Worlds -- Soraya
What Do the New Features in OS X Yosemite and iOS 8 Mean for Privacy and Security?
SANS OUCH! June 2014
Top 5 Email Retention Policy Best Practices
Malware creation breaks all records! 160,000 new samples every day
If HTML5 Is the Future, What Happens to Access Control?
Back to Basics
Phish or legit – Can you tell the difference?
DOS vs DDOS – What is the Difference?
 

VULNERABILITIES AND PATCHES

OpenSSL Security Advisoy (05 Jun 2014)
Microsoft Security Bulletin Advance Notification for June 2014
Adobe Security Bulletins and Advisories
Debian Security Advisories
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
 

SECURITY TOOLBOX

Probably the Best Free Security List in the World
Using nmap to scan for DDoS reflectors
OWASP ZAP v2.3.1
ThreadFix v2.1M1 Released
Argus v.3.0.6 – Real Time Auditing Network Activity
Webfwlog – Firewall Log Analyzer
Essential Guide – What’s the best Linux OS for your enterprise data center?
 

HOW DO THEY DO THAT?

A Social Facebook Phish – is your friend acting strange?
Attack Analysis with a Fast Graph
An Introduction to Recognizing and Decoding RC4 Encryption in Malware
 

FEATURED SERVICE

On-site Wireless Assessment Surveys  – MOREnet offers On-site Wireless Assessment Surveys using industry-leading wireless assessment equipment and software. Whether troubleshooting existing wireless issues or planning to build or reconfigure a wireless network, MOREnet trained technicians can assist by providing members an on-site wireless survey and radio frequency (RF) survey map of the analysis. Check out the following link for additional information. http://www.more.net/services/wireless-assessment-surveys
 

UPCOMING TRAINING AND EVENTS

  1. Security Roadshow! – Tuesday, June 10, Moberly, MO and Wednesday, June 11, Kansas City, MO – MOREnet Security is excited to hit the road again this summer to bring the 2014 Security Roadshow to a location near you.  Since we’re making the rounds in June this year, we decided to take a slightly different approach and are going to focus on different aspects of the current threat landscape – from a MOREnet member’s perspective – and what you can do to better protect/secure your organization.  We also hope you’ll take the opportunity during each session to share best practices and brainstorm solutions with MOREnet members in your part of the state. Click this link to register
  2. Administering Windows Server 2012 – Monday, June 9 – Friday, June 13, MOREnet, Columbia, MO -- This course is intended for Information Technology (IT) Professionals with hands on experience working in a Windows server 2008 or Windows Server 2012 environment who wish to acquire the skills and knowledge necessary to be able to manage and maintain the core infrastructure required for a Windows Server 2012 and Windows Server 2012 R2 environment. The key focus for students is to broaden the initial deployment of Windows Server 2012 services and infrastructure and provide the skills necessary to Manage and Maintain a domain based Windows Server 2012 environment, providing skills in areas such as User and Group management, Network Access and Data Security. Click this link to register
  3. Introduction to Windows 2012 Server Administration – Tuesday, July 22 – Wednesday, July 23, MOREnet, Columbia, MO -- Designed to build a foundation in basic server administration, this class introduces students to many of Windows Server 2012 features. The class includes extensive exercises which reinforce Microsoft Windows Server 2012 network administration skills as they are learned. Click this link to register

Do you know of any upcoming security-related training events?  Please send them to security@more.net for inclusion in this newsletter.
 

SECURITY AWARENESS TIP OF THE WEEK

Social Media Privacy -- Are you a frequent user of Social Media? If so, what steps do you take to ensure your privacy? Check out the following links for more information on the risks associated with Social Media..
 
Social Networking Privacy: How to be Safe, Secure and Social
Teens, Social Media, and Privacy
Social Media Privacy
Mashable – Social Media Privacy