PREVIOUS GNEWS

• 3 Patches / 11 Vulns – 1 Critical• Affecting Office and UAG

• Other updates, MSRT, Defender Definitions, Junk Mail Filter

– MS10-071 - Microsoft Office, Remote Code Execution– MS10-072 - Microsoft PowerPoint, Remote Code Execution– MS10-073 - Forefront Unified Access Gateway (UAG), Elevation of

Privilege

Patch Tuesday

• Adobe, 3 patches (23 holes in Reader)– APSB10-23 RoboHelp– APSB10-24 InDesign– APSB10-25 Shockwave Player– APSB10-26 Flash Player– APSB10-27 Flash Media Server– APSA10-04 Shockwave Player– APSA10-05 Flash Player, Acrobat, Reader

• Apple,– Java for 10.6 update 3 / Java for 10.5 update 8– 10.6.5 – Security Update 2010-007

• Cisco– 4 patches, multiple products

Holes / Patches

• FBI Tracking / Oil Change

• Raining Sheep

• Metasploit RealFlex / RealWin SCADA module

• Android broswer engine / webkit

Hacking

Corp. Hell

• Army launches cyber unit, ARCYBER

• Cyber theft surpasses Physical theft

• Govt launches digital compliance tool, Cyber Scope

• LimeWire gets permanent injunction

Linux 2.6.36

Windows Credentials Editor (WCE) v 1.0

Panda AV for Mac

Snort 2.9.0.1

Updates

B-SidesDallas, TX6 Nov 2010

Con

All images scavenged without permission

All images scavenged without permission