Quantcast
Channel: botnets
Viewing all articles
Browse latest Browse all 527

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of November 14, 2016

$
0
0
TP-WeeklyBlog-300x205

The 80s hair band Cinderella said it best when they sang “Don’t know what you got ‘til it’s gone.” It’s been a fun and crazy week hosting customers at our Americas TippingPoint Customer Advisory Board meeting. There’s a lot of preparation involved and there’s no time for any curveballs. But, my car had other plans and decided to kill my battery on the day customers were set to arrive. I call my motor club to have someone get me a new battery. It gets installed and I’m on my way.

So after the conclusion of our TippingPoint Customer Advisory Board meeting two days later, I loaded up my stuff, had the valet get my car, and I was ready to go. But, the battery was dead again. I had my motor club change out the dead battery, but I had a suspicion that something else was wrong. I drove directly to a car repair shop and sure enough, my alternator was dead. If you’re not versed in automotive terms, an alternator is used to charge the battery and power the electrical system when the engine is running. I miraculously made it to the shop on pure battery power alone. You have to go to the root of the problem to make sure it’s fixed. Our TippingPoint Digital Vaccine® (DV) filters are written to protect an entire vulnerability versus just a specific exploit. So if you use my car issue as an example, the DV filter would look for all possible issues that would cause my battery to fail and not just look at the battery itself. Ultimately, our DV filters protect your network from vulnerabilities efficiently and with minimal false positives. For more information on DVLabs, visit www.trendmicro.com/dvlabs.

Zero-Day Filters

There are 10 new zero-day filters covering four vendors in this week’s Digital Vaccine (DV) package. A number of existing filters in this week’s DV package were modified to update the filter description, update specific filter deployment recommendation, increase filter accuracy and/or optimize performance. You can browse the list of published advisories and upcoming advisories on the Zero Day Initiative website.

Adobe (4)

  • 25730: HTTP: Adobe Acrobat Reader DC JPEG2000 Information Disclosure Vulnerability (ZDI-16-325)
  • 25808: ZDI-CAN-4123: Zero Day Initiative Vulnerability (Adobe Flash)
  • 25809: ZDI-CAN-4125: Zero Day Initiative Vulnerability (Adobe Reader DC)
  • 25810: ZDI-CAN-4129: Zero Day Initiative Vulnerability (Adobe Flash)

IBM (2)

  • 25625: TLS: IBM Cognos TM1 Admin Server and Cognos Express tm1admsd.exe Buffer Overflow (ZDI-12-101)
  • 25737: TCP: IBM Cognos TM1 Admin Server and Cognos Express tm1admsd.exe Buffer Overflow (ZDI-12-101)

Microsoft (1)

  • 25724: HTTP: Microsoft Edge JavaScript reverse Buffer Overflow Vulnerability (ZDI-16-593)

Trend Micro (3)

  • 25803: ZDI-CAN-4112: Zero Day Initiative Vulnerability (Trend Micro Control Manager)
  • 25805: ZDI-CAN-4115: Zero Day Initiative Vulnerability (Trend Micro Control Manager)
  • 25806: ZDI-CAN-4117: Zero Day Initiative Vulnerability (Trend Micro Control Manager)

Missed Last Week’s News?

Catch up on last week’s news in my weekly recap.


Viewing all articles
Browse latest Browse all 527

Trending Articles