Churchill statue - Fulton, MO

MOREnet Security News Review -- June 23 - 27, 2014

Friday, June 27, 2014

WEEKLY THREAT RESOURCE SITE

2014 Cyber Attacks timeline Master Index
 

KNOW YOUR ENEMY – THREAT ID OF THE WEEK

Zberp – There’s a new banking Trojan that’s a cross between Zeus and Carberp. How much do you know about it? Check out the following links for more information on what it is and how it works.
Zberp – is there anything to fear?
New banking Trojan ‘Zberp’ offers the worst of Zeus and Carberp
New Trojan Zberp, a Hybrid between Carberp and ZeuS
Zberp Feed on Twitter
 

TOP HEADLINES THIS WEEK

Report: Organizations recognize security risks, slow to take action
Why A Secured Network Is Like The Human Body
Secunia Webinar – Why Vulnerability Intelligence is important to you and your organization
Want to know the WiFi password for the Brasil World Cup security center?
The official website of AskMen is compromised to serve malicious code
Enterprises fix NTP amplification, but many DDoS techniques remain
Google’s Nest security warning after researchers show off 60-second hack
Cloud Security: Think Today’s Reality, Not Yesterday’s Policy
Microsoft Unveils New Intelligence Sharing Platform
Android SMS worm punts dodgy downloads… from your MATES
Termination of Windows XP support – How does this affect your security?
 

VULNERABILITIES AND PATCHES

US-CERT Vulnerability Summary for the Week of June 16, 2014
VMware Security Advisories
Critical Android code-execution flaw affects all but the latest version
TimThumb plugin Webshot zero-day uncovered, WordPress websites at risk
Decades-Old Vulnerability Threatens ‘Internet Of Things’
 

SECURITY TOOLBOX

How to use TripWire SecureScan, a free vulnerability scanning tool
Hexorbase – Multiple Database Management and Audit Tool
HackPorts – Mac OS X Penetration Testing Framework and Tools
OfficeMalScanner helps identify the source of a compromise
 

FEATURED SERVICE

Dell Consortium Pricing  – MOREnet offers its Full Service Package members significant savings on Dell laptops and desktops through a purchasing contract with Dell. Check out the following link for additional features and Benefits. http://www.more.net/services/dell-consortium-pricing
 

UPCOMING TRAINING AND EVENTS

  1. Introduction to Windows 2012 Server Administration – Tuesday, July 22 – Wednesday, July 23, MOREnet, Columbia, MO -- Designed to build a foundation in basic server administration, this class introduces students to many of Windows Server 2012 features. The class includes extensive exercises which reinforce Microsoft Windows Server 2012 network administration skills as they are learned. Click this link to register
  2. Windows 2012 Group Policy – Thursday, July 24, MOREnet, Columbia MO -- Designed to build a foundation in basic server administration, this class introduces students to many of Windows Server 2012 features. The class includes extensive exercises which reinforce Microsoft Windows Server 2012 network administration skills as they are learned. Click this link to register
  3. 2014 MOREnet Annual Conference – Monday, October 27 – Thursday, October 30, Columbia, MO – It’s not always about the technology- It’s also about what the technology can do for you. MOREnet’s Annual Conference is a professional development opportunity that allows our members to choose the track that’s right for you. Do you want to mix and match sessions tracks? That’s okay, too! Click this link for more information

Do you know of any upcoming security-related training events?  Please send them to security@more.net for inclusion in this newsletter.
 

SECURITY AWARENESS TIP OF THE WEEK

Turn unused devices off – During the summer you’re more likely to have people out of the workplace for extended periods of time. Don’t forget to remind them to turn off devices while they’re away.