[IS&T Security-FYI] SFYI Newsletter, April 1, 2014

[Monique Buchanan]

In this issue:

1. Join MIT’s Security SIG
2. Microsoft Releases Security Advisory on Word Vulnerability
3. Event: Laptop Tagging and Registration, 4/2/14
4. Reminder: Windows XP Support Ends


-----------------------------------
1. Join MIT’s Security SIG
-----------------------------------


  *   Are you responsible for managing the security of servers and/or desktop computers?
  *   Are you a supervisor for anyone responsible for managing servers and/or desktop computers?
  *   Do you train, communicate with, or provide technical assistance to users about security issues, software, and settings?
  *   Are you simply interested in keeping computers and data safe?

If you answered yes to any of these questions, Security SIG (Special Interest Group) may be for you.

Security SIG is a voluntary group of MIT faculty, staff and students dedicated to the free exchange of IT Security information, resources, ideas and tools via on-going discussions through email.

Find out how to join here<http://kb.mit.edu/confluence/x/6VAYCQ>.


----------------------------------------------------------------------------------
2. Microsoft Releases Security Advisory on Word Vulnerability
----------------------------------------------------------------------------------

Microsoft is notifying its customers via a Security Advisory<http://technet.microsoft.com/security/advisory/2953095> about a vulnerability in Microsoft Word that could allow remote code execution. The vulnerability is affecting all supported versions of Microsoft Word, although limited, targeted attacks are currently directed at Word 2010.

Read the full Microsoft Security Advisory here<http://technet.microsoft.com/security/advisory/2953095>.

Read the story in the news<http://arstechnica.com/security/2014/03/zero-day-vulnerability-in-microsoft-word-under-active-attack/>.


-------------------------------------------------------------------
3. Event: Laptop Tagging and Registration, 4/2/14
-------------------------------------------------------------------

This Wednesday, there is an opportunity to register and tag your laptop.

Where: Lobby of Building 10
When: Wed., April 2, 11:00 am - 12:30 pm

Cost: $10 cash (no cards) or MIT Cash Object

Just as you might register a bike with the police, you can also register your laptop. Information Systems & Technology partners with MIT Police to provide STOP (Security Tracking of Office Property) tags for laptops. The tag is affixed to the device, has a unique number, and is registered with a world-wide database.

Sgt. Cheryl Vossmer of the MIT Police says that although a STOP tag is not software that can track a device via GPS or other means, it has been very effective at providing a way for lost or stolen laptops to be returned to their rightful owners.

Read laptop recovery stories here<https://www.stoptheft.com/>.

Learn more about laptop registration at MIT<http://kb.mit.edu/confluence/display/istcontrib/MIT+Police+Laptop+Tagging+and+Registration>.


-------------------------------------------------------
4. Reminder: Windows XP Support Ends
-------------------------------------------------------

Just another reminder that after April 8, 2014, a week from today, Microsoft will no longer supply security patches for machines running Windows XP.

IS&T recommends that users of Windows XP upgrade to Windows 7 or 8.

Read the details here<http://kb.mit.edu/confluence/pages/viewpage.action?pageId=152585503>.


=======================================================================================
Read all archived Security FYI Newsletter articles and submit comments online at http://securityfyi.wordpress.com/.
=======================================================================================


Monique Buchanan
IT Security Communications Consultant
Information Systems & Technology (IS&T)
Massachusetts Institute of Technology
http://ist.mit.edu/secure
tel: 617.253.2715

"Distrust and caution are the parents of security" - Benjamin Franklin

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/ist-security-fyi/attachments/20140401/7e5685e2/attachment.htm