Friday, April 1, 2016

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of March 28, 2016

blog

My parents live in South Texas and every time I visit them, I have to stop on my way home at a U.S. Border Patrol Station in Falfurrias, Texas, which is approximately 75 miles from the border of Mexico. According to the Department of Homeland Security, the Falfurrias station is nationally known as a primary leader in both illegal alien and narcotic seizures. That statistic doesn’t surprise me given the proximity to the border and the rough terrain that surrounds the station.

I’ve been driving through that station for years and every time I’ve passed through, the process was pretty simple and quick: a Border Patrol officer comes up to you and asks you a couple of questions while canines trained to detect suspicious materials (and people!) sniff around your vehicle. If all is good, you are told to pass through and you’re on your merry way.

This past Sunday as I was driving back home to Austin, I finally saw a potential seizure in action. The line I was in was progressing pretty smoothly until the car in front of me was next. I witnessed firsthand the Border Patrol’s “defense in depth” approach to securing our border. They’re not just using canines and humans to detect potential breaches; they’re using radar, infrared cameras, mobile towers, helicopters and even drones. It’s not clear which approach caught the alleged infraction, but you can bet that when you see four dogs jumping all over a Toyota Camry, something is not right. Even though I was alone in my car and not transporting any contraband (that’s my story and I’m sticking to it! J), I couldn’t help but get paranoid at the thought of Border Patrol searching my car and confiscating the tamales my mom packed for me! I like to think that our TippingPoint solutions are a key part of a “defense in depth” approach, but with that secret sauce that our competitors don’t have: the Zero Day Initiative (ZDI). The intelligence we get from the ZDI gives us the ability to provide over three and a half months of coverage from the date of a zero-day filter shipped to ZDI public disclosure. That means we’re protecting customers before an affected vendor even issues a patch for a vulnerability. We also lead the industry in vulnerability discovery. We’re working to get the 2015 numbers, but in the interim, I invite you to take a look at how we fared in 2014!

Planned Maintenance Window

The Reputation Feed (RepFeed) component of the Threat Digital Vaccine (ThreatDV) will be undergoing routine maintenance. The delivery of the RepFeed data might be intermittently affected during the following maintenance window:

Doc1

If TippingPoint customers have any questions or concerns, they can visit the TippingPoint Threat Management Center (TMC) for more information.

Zero-Day Filters

There are 13 new zero-day filters covering seven vendors in this week’s Digital Vaccine package. A number of existing filters in this week’s package were modified to update the filter description, increase filter accuracy and/or optimize performance. You can browse the list of published advisories and upcoming advisories on the Zero Day Initiative website.

Adobe (6)

  • 24035: ZDI-CAN-3524: Zero Day Initiative Vulnerability (Adobe Acrobat Pro DC)
  • 24047: ZDI-CAN-3540: Zero Day Initiative Vulnerability (Adobe Acrobat Pro DC)
  • 24048: ZDI-CAN-3541: Zero Day Initiative Vulnerability (Adobe Acrobat Reader DC)
  • 24056: ZDI-CAN-3557: Zero Day Initiative Vulnerability (Adobe Acrobat Pro DC)
  • 24059: ZDI-CAN-3527: Zero Day Initiative Vulnerability (Adobe Acrobat Pro DC)
  • 24061: SMB: Updaternotification.dll File Access via SMB (ZDI-16-190)

BitTorrent (1)

  • 24052: ZDI-CAN-3544: Zero Day Initiative Vulnerability (BitTorrent)

Foxit (1)

  • 24040: ZDI-CAN-3537: Zero Day Initiative Vulnerability (Foxit PhantomPDF)

Microsoft (2)

  • 24036: ZDI-CAN-3529: Zero Day Initiative Vulnerability (Microsoft Edge)
  • 24037: ZDI-CAN-3535: Zero Day Initiative Vulnerability (Microsoft Journal)

Panasonic (1)

  • 24039: ZDI-CAN-3538: Zero Day Initiative Vulnerability (Panasonic FPWIN Pro)

PCRE (1)

  • 24049: ZDI-CAN-3542: Zero Day Initiative Vulnerability (PCRE)

Mozilla (1)

  • 24051: ZDI-CAN-3545: Zero Day Initiative Vulnerability (Mozilla Firefox)


from Trend Micro Simply Security http://ift.tt/1VZ6SLz
via IFTTT

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.