Blog Elements

Half Sized Blog Element (Single Author Style)

Half Sized Blog Element (Multi Author Style)

First “Patch Tuesday” of 2012

2012-01-10/0 Comments/in General Security/by admin

In the first “Patch Tuesday” of 2012, Microsoft is releasing seven security bulletins to address software issues an attacker could use to remotely exploit and take control of infected Windows systems. Patch Tuesday occurs on the second Tuesday of each month and on that day Microsoft releases security patches to fix vulnerabilities found in their products.

ShmooCon 2012 – January 27-29

2012-01-05/0 Comments/in Conference/by SecurityOrb_Staff

ShmooCon is an annual east coast hacker convention hell-bent on offering three days of an interesting atmosphere for demonstrating technology exploitation, inventive software and hardware solutions, and open discussions of critical infosec issues. The first day is a single track of speed talks called One Track Mind. The next two days bring three tracks: Build It, Break It and Bring It On.

First “Patch Tuesday” of 2012

2012-01-10/0 Comments/in General Security/by admin

ShmooCon 2012 – January 27-29

2012-01-05/0 Comments/in Conference/by SecurityOrb_Staff

Full Sized Blog Element (Big Preview Pic)

First “Patch Tuesday” of 2012

2012-01-10/0 Comments/in General Security/by admin

The following table summarizes the security bulletins for this month in order of severity.

Bulletin ID	Maximum Severity Rating and Vulnerability Impact	Restart Requirement	Affected Software
Bulletin 1	Critical Remote Code Execution	Requires restart	Microsoft Windows
Bulletin 2	Important Security Feature Bypass	Requires restart	Microsoft Windows
Bulletin 3	Important Remote Code Execution	May require restart	Microsoft Windows
Bulletin 4	Important Elevation of Privilege	Requires restart	Microsoft Windows
Bulletin 5	Important Remote Code Execution	May require restart	Microsoft Windows
Bulletin 6	Important Information Disclosure	Requires restart	Microsoft Windows
Bulletin 7	Important Information Disclosure	May require restart	Microsoft Developer Tools and Software

Table 1 – Table Summarizes the Security Bulletins

We are hoping this month’s patches with address the Browser Exploit Against SSL/TLS or the BEAST that seemed to have been canceled last month due a third-party vendor who reported compatibility issues with the patch

Updates for other security issues are available from the following locations:

Security updates are available from Microsoft Download Center. You can find them most easily by doing a keyword search for “security update”.
Updates for consumer platforms are available from Microsoft Update.
You can obtain the security updates offered this month on Windows Update, from Download Center on Security and Critical Releases ISO CD Image files. For more information, see Microsoft Knowledge Base Article 913086.

If you are interested in learning more on how to improve security and optimize your IT infrastructure, and would like to participate with other IT Pros on security topics check out the IT Pro Security Community.

Also strengthening its software is Adobe, which on Jan. 10th released critical updates for Adobe Reader X and Adobe Acrobat X and Google, which recently released Chrome version 16.0.9212.75, fixing three high-priority bugs in the Web browser.

ShmooCon 2012 – January 27-29

2012-01-05/0 Comments/in Conference/by SecurityOrb_Staff

Different – ShmooCon is an annual east coast hacker convention hell-bent on offering three days of an interesting atmosphere for demonstrating technology exploitation, inventive software and hardware solutions, and open discussions of critical infosec issues. The first day is a single track of speed talks called One Track Mind. The next two days bring three tracks: Build It, Break It and Bring It On.

Affordable – ShmooCon is about high quality without the high price. Keep in mind that space is limited and we’ve sold out quickly every year.

Accessible – ShmooCon is held in Washington, DC at the Washington Hilton Hotel, just a few short blocks from the DC metro. Fly into DCA, IAD or BWI or take a train to Union Station and you’re just a short cab ride away from the con.Entertaining – Brain melting from all the cool tech you’re learning? Be sure to check out the other events running during ShmooCon, including the Hacker Arcade, ShmooCon Labs, Hack-or-Halo and more. Saturday night is party night, where typically we throw an off site bash just to shake things up a bit.