Texas Cybersecurity Weekly
|
|
OpenPGP, S/MIME Mail Client Vulnerabilities
May 14, 2018 - US-Cert
The CERT Coordination Center (CERT/CC) has released information on email client vulnerabilities that can reveal plaintext versions of OpenPGP- and S/MIME-encrypted emails. A remote attacker could exploit these vulnerabilities to obtain sensitive information.
|
|
Multiple vulnerabilities in Microsoft Office PowerPoint and Excel for Mac Could Allow for Remote Code Execution
MS-ISAC Advisory Number – 2018-057
Date Issued: May 16, 2018
Multiple vulnerabilities have been discovered in Microsoft Office PowerPoint and Excel for Mac, which could allow for remote code execution. Microsoft Office PowerPoint and Excel for Mac are office productivity software. Successful exploitation of these vulnerabilities could result in an attacker gaining the same privileges as the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
THREAT INTELLIGENCE:
There are currently no reports of these vulnerabilities being exploited in the wild.
|
|
Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution
MS-ISAC Advisory Number – 2018-054
Date Issued: May 9, 2018
Multiple vulnerabilities have been discovered in Mozilla Firefox and Firefox Extended Support Release (ESR), the most severe of which could allow for arbitrary code execution. Mozilla Firefox is a web browser used to access the Internet. Mozilla Firefox ESR is a version of the web browser intended to be deployed in large organizations. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
THREAT INTELLIGENCE:
There are currently no reports of these vulnerabilities being exploited in the wild.
|
|
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
MS-ISAC Advisory Number – 2018-055
Date Issued: May 11, 2018
Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could result in arbitrary code execution. Google Chrome is a web browser used to access the Internet. These vulnerabilities can be exploited if a user visits, or is redirected to, a specially crafted web page. Successful exploitation of the most severe of these vulnerabilities could allow an attacker to execute arbitrary code in the context of the browser, obtain sensitive information, bypass security restrictions and perform unauthorized actions, or cause denial-of-service conditions.
THREAT INTELLIGENCE:
There are currently no reports of these vulnerabilities being exploited in the wild.
|
|
Multiple Vulnerabilities in Adobe Acrobat and Reader Could Allow for Arbitrary Code Execution (APSB18-09)
MS-ISAC Advisory Number – 2018-056
Date Issued: May 14, 2018
Multiple vulnerabilities have been discovered in Adobe Acrobat and Reader, the most severe of which could allow for arbitrary code execution. Adobe Acrobat and Reader allow a user to view, create, manipulate, print and manage files in Portable Document Format (PDF). Successful exploitation of the most severe of these vulnerabilities could result in an attacker executing arbitrary code in the context of the affected application. Depending on the privileges associated with this application, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. If this application has been configured to have fewer user rights on the system, exploitation of the most severe of these vulnerabilities could have less impact than if it was configured with administrative rights.
THREAT INTELLIGENCE:
There are no reports of these vulnerabilities being exploited in the wild.
|
|
DHS Issues More Medical Device Cybersecurity Alerts
May 16, 2018
– Data Breach
The Department of Homeland Security has yet again issued a warning about cybersecurity vulnerabilities in medical devices. These warnings have come after independent researchers, or the companies themselves, have reported the problems.
|
|
Chili's restaurants were hit by a data breach that exposed customers' credit-card information
May 14, 2018 - Business Insider
Tex-Mex restaurant chain Chili's is the latest retailer to be impacted by a data breach. On Saturday, its parent company Brinker International announced that customer credit and debit card information had been "compromised" in certain Chili's restaurants. It confirmed that no personal data such as social security numbers or dates of birth was breached since it doesn't collect this information.
|
|
Nuance Communications Breach Affected 45,000 Patients
May 14, 2018 - Bank Info Security
Nuance Communications, which specializes in speech recognition software, says an unauthorized third party accessed one of its medical transcription platforms, exposing 45,000 individuals' records.
|
|
Reducing your Information Footprint
May 14, 2018 – MS-ISAC
While spring cleaning your home and, if you’re like me, the top of your desk, consider also cleaning up your information footprint. Your information footprint is how much information about you is recorded and available in both digital and paper formats. Cleaning up your footprint can mean examining social media, online accounts, and even paper records containing sensitive information.
|
|
Royal Wedding Scams Likely Pose Risks to SLTT Government Networks
May 14, 2018 – MS-ISAC
Malicious actors leverage public interest during high-profile events, such as the May 19, 2018, U.K. royal wedding between Prince Harry and Meghan Markle, in order to conduct financial fraud and disseminate malware. The associated scams, spam, and malware pose a risk to state, local, tribal, and territorial (SLTT) government networks when employees view content or open emails pertaining to the royal wedding while on an SLTT government system. This Intel Advisory provides recommendations for users and technical administrators when reacting to high-profile events, including the royal wedding.
|
|
White-hat hackers debug state security systems
May 15, 2018 – Christian Science Monitor
Hackers aren’t always sneaky, black-hat cybercriminals out to steal information and wreak havoc. Sometimes, they’re the good guys – ethical hackers who uncover security flaws to help prevent the bad guys from winning.
|
|
Half of Global Fortune 100 continue to download flawed Apache Struts used to breach Equifax
May 08, 2018 – Cybersecurity Media
After a vulnerability in Apache Struts led to serious breaches at Equifax and laid the credit reporting agency low last fall, organizations should have scrambled to bolster security but Sonatype research shows that 57 percent of the Global Fortune 100 has yet to address the flaw in the popular open source software.
|
|
Agency Security Plan
Per Texas Government Code 2054.133, each agency is required to submit an Agency Security Plan to DIR. The 2018 Plan is due no later than October 15, 2018, and has been revised from previous years to include requirements from the recent legislative session.
If you missed the webinar held on May 15, 2018, discussing the recent changes, you can find a recording of the presentation and slide deck on the
DIR website.
|
|
Workforce Development and Events
|
|
|
|
2018 Information Security Forum
May 23-24, 2018
|
REGISTRATION IS NOW OPEN
for the 18th annual Information Security Forum, to be held May 23-24, 2018 at the Palmer Events Center in Austin, Texas, and is hosted by the Texas Department of Information Resources (DIR) and managed by the Office of the Chief Information Security Officer (OCISO).
|
|
|
|
GDPR Compliance – Why Should I be Concerned
MS-ISAC/EI-ISAC National Webinar Initiative
May 1, 2018 2:00 p.m. EST
|
This presentation will provide a general overview of the General Data Protection Regulation, GDPR, that is going into effect on May 25, 2018. It will provide some insight as to why all SLTT entities should be concerned about compliance with the regulation. Examples that SLTT’s may not have considered will be explored and discussed.
|
|
|
|
Cyber Analysis Seminar for All MS-ISAC Members and Intel Partners
DHS I&A Training Academy
May14-18
|
The CAS provides employees an introduction to the concept of Cyber-Security and Analysis. Students learn cyber technical basics; the threats and tactics employed by threat actors; resources and expertise available to support homeland security partners in dealing with cyber threats. This seminar provides students an understanding of the cyber threat environment and enhances their ability to process and share cyber threat information across the Homeland Security Enterprise.ce article copy here.
|
|
|
|
Texas-Israel Cyber Security Conference
May 31, 2018
|
The Texas-Israel Chamber of Commerce will hold the watershed Texas-Israel Cyber Security Conference on Thursday, May 31, 2018 at the Martha Proctor Mack Ballroom, on the SMU Campus. For more information on the conference please visit
www.texasisrael.org
.
Registration can be found
here.
|
|
|
|
Texas Digital Government Summit
May 30-31, 2018
|
Government Technology’s passion is helping spread best practices and spurring innovation in the public sector. The Texas Digital Government Summit is designed to do just that. The summit has an advisory board that gathers public and private sector leaders to create an agenda designed to make that passion relevant and actionable to the state and local government organizations attending the summit.
|
|
|
|
DFIR Summit & Training
Summit Dates: June 7-8, 2018
Training Course Dates: June 9-14, 2018
|
The annual SANS Digital Forensics & Incident Response (DFIR) Summit is the most comprehensive DFIR event of the year, bringing together an influential group of experts, immersion-style training, and industry networking opportunities in one place.
|
|
|
|
Texas Government Data Forum 2018
Thursday, June 21, 2018 | 8:00 am - 4:30 pm | Austin, TX
|
Annual conference hosted by the Texas Department of Information Resources. Any government/public sector employees may attend.
|
|
Texas Cybersecurity Weekly
Collected news & information for Texas’ cybersecurity community
The periodical aggregates information about cybersecurity and information technology to promote shared awareness, cyber hygiene, and information sharing amongst government, the private sector, and all Texans.
|
|
Assistance/Feedback/Questions?
Email the Office of the CISO at
|
|
|
|
|
|
|
