The Origin of Threat Hunting

--- 2011 Article "Become a Hunter" The term "threat hunting" has been popular with marketers from security companies for about five years. Yesterday Anton Chuvakin asked about the origin of the term. I appear to have written the first article describing threat hunting in any meaningful way. It wa...

Microsoft Internet Explorer CVE-2017-0154 Remote Privilege Escalation Vulnerability

Description Microsoft Internet Explorer is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Internet Explorer 11 is vulnerable. Technologies Affected Microsoft Internet Explorer 11...

Microsoft Windows Hyper-V CVE-2017-0096 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windows 10 for...

Microsoft Office CVE-2017-0006 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...

Debian DLA-854-1 : icoutils security update

Icoutils is a set of programs that deal with MS Windows icons and cursors. Resources such as icons and cursors can be extracted from MS Windows executable and library files with wrestool. Three vulnerabilities has been found in these tools. CVE-2017-6009 A buffer overflow was observed in wrestool...

Microsoft Windows DVD Maker CVE-2017-0045 Cross Site Request Forgery Vulnerability

Description Microsoft Windows DVD Maker is prone to an unspecified cross-site request forgery vulnerability because it fails to properly validate HTTP requests. Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected application...

Microsoft Windows Hyper-V CVE-2017-0075 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial of service condition. Technologies Affected Microsoft Window...

Ubuntu 12.04 LTS : icoutils vulnerabilities (USN-3226-1)

Jerzy Kramarz discovered that icoutils incorrectly handled memory when processing certain files. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause icoutils to crash, resulting in a denial of service, or possibly execute arbitrary code. Note...

Ubuntu 12.04 LTS : python-imaging vulnerabilities (USN-3229-1)

It was discovered that the Python Imaging Library incorrectly handled certain compressed text chunks in PNG images. A remote attacker could possibly use this issue to cause the Python Imaging Library to crash, resulting in a denial of service. CVE-2014-9601 Cris Neckar discovered that the Python...

Fedora 25 : thunderbird (2017-fce0c6fd46)

For changes see: https://www.mozilla.org/en-US/thunderbird/45.8.0/releasenotes/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 25 : knot / knot-resolver (2017-038e821698)

Knot Resolver 1.2.3 2017-02-23 ================================ Bugfixes -------- - Disable storing GLUE records into the cache even in the non-default QUERYPERMISSIVE mode - iterate: skip answer RRs that don't match the query - layer/iterate: some additional processing for referrals - lib/resolv...

Fedora 25 : GraphicsMagick (2017-c71a0f40f0)

Backport fixes for multiple security vulnerabilities. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Debian DLA-849-1 : linux security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or have other impacts. CVE-2016-9588 Jim Mattson discovered that the KVM implementation for Intel x86 processors does not properly handle BP and OF exceptions in an L2 neste...

Buffer overflow

Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before...

Fedora 24 : cacti (2017-a513be0939)

Update to 1.0.4 Release notes : http://www.cacti.net/releasenotes100.php http://www.cacti.net/releasenotes101.php http://www.cacti.net/releasenotes102.php http://www.cacti.net/releasenotes103.php http://www.cacti.net/releasenotes104.php Note that Tenable Network Security has extracted the...

Ubuntu 12.04 LTS : linux-lts-trusty vulnerability (USN-3219-2)

USN-3219-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 LTS. Alexander Popov discovered that the NHDLC line discipline implementation in the Linux...

SUSE SLES12 Security Update : openssh (SUSE-SU-2017:0607-1)

This update for openssh fixes the following issues : - CVE-2016-8858: prevent resource depletion during key exchange bsc1005480 - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation bsc1016366 - CVE-2016-10011: Prevent possible leaks of host private keys to...

Xenmobile : MDM and MAM Console Features

There's a lot to consider while deciding the enrollment mode MDM/MAM to the XenMobile environment. What devices should you choose? How should you manage them? What are the devices features available from the console etc. How do you ensure that your network remains secure while still being user...

SUSE SLED12 / SLES12 Security Update : compat-openssl098 (SUSE-SU-2017:0605-1)

This update for compat-openssl098 fixes the following issues contained in the OpenSSL Security Advisory 26 Jan 2017 bsc1021641 Security issues fixed : - CVE-2016-7056: A local ECSDA P-256 timing attack that might have allowed key recovery was fixed bsc1019334 - CVE-2016-8610: A remote denial of...

Fedora 24 : libXdmcp (2017-bcb1999e65)

Security fix for CVE-2017-2625 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...