<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Garamond, sans-serif; ">
<div>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; ">In this issue:</p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; ">1. August 2013 Security Updates from Microsoft</p>
<p style="margin: 0px; font-family: Helvetica; ">2. The MIT Network Security Policy</p>
<p style="margin: 0px; font-family: Helvetica; ">3. Android Malware Spreading Through Mobile Ads</p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; ">----------------------------------------------------------------</p>
<p style="margin: 0px; font-family: Helvetica; ">1. August 2013 Security Updates from Microsoft</p>
<p style="margin: 0px; font-family: Helvetica; ">----------------------------------------------------------------</p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; ">Last week Microsoft released <a href="http://technet.microsoft.com/en-us/security/bulletin/ms13-aug">
eight security bulletins</a> to address vulnerabilities in the following systems:</p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<ul>
<li style="margin: 0px; font-family: Helvetica; ">Microsoft Windows </li><li style="margin: 0px; font-family: Helvetica; ">Microsoft Server </li><li style="margin: 0px; font-family: Helvetica; ">Internet Explorer </li></ul>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; ">It is recommended to accept the updates. The patches have been approved for deployment via MIT WAUS (Windows Automatic Update Services).</p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; ">-----------------------------------------------</p>
<p style="margin: 0px; font-family: Helvetica; ">2. The MIT Network Security Policy</p>
<p style="margin: 0px; font-family: Helvetica; ">-----------------------------------------------</p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; ">On April 2, earlier this year, the MIT News Office reprinted a
<a href="http://web.mit.edu/itgc/letters/security-memo.html">letter</a> that Executive Vice President and Treasurer Israel Ruiz sent to the Academic Council detailing planned improvements in emergency preparedness, emergency communication protocols and network
security practices.</p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; ">The improvements, including implementation of the MITnet firewall, as well as
<a href="http://kb.mit.edu/confluence/display/istcontrib/Strong+Passwords">password policies</a> are taking affect this summer. </p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; ">For more details on the network security policy, see IS&T's
<a href="http://kb.mit.edu/confluence/display/istcontrib/Campus+Network+Security+FAQ">
Campus Security FAQ</a>. </p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; ">Additional guidance on how eligible members of the MIT community can opt systems out of the campus network firewall can be found
<a href="https://kb.mit.edu/confluence/pages/viewpage.action?pageId=151108614">here</a>.</p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; ">Questions about these changes can be sent to
<a href="http://cybersecurity-questions@mit.edu">cybersecurity-questions@mit.edu</a>. </p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; ">--------------------------------------------------------------------</p>
<p style="margin: 0px; font-family: Helvetica; ">3. Android Malware Spreading Through Mobile Ads</p>
<p style="margin: 0px; font-family: Helvetica; ">--------------------------------------------------------------------</p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; ">Malware targeting Android devices has been found to be spreading through mobile advertisement networks. Many developers include advertising frameworks in their apps to help boost profits. Advertisements in mobile
apps are served by code that is part of the app itself. An attack scheme in Asia involved a rogue ad network pushing code onto devices. When users download and install legitimate apps, the malware prompts users to approve its installation, appearing to be
part of the process for the app they have just downloaded.</p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; "><a href="http://www.computerworld.com/s/article/9241596/New_Android_malware_is_being_distributed_through_mobile_ad_networks">Learn more in the news</a>.</p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; "><a href="http://kb.mit.edu/confluence/display/istcontrib/Android+at+MIT">How to protect your Android device at MIT</a>.</p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "><br>
</p>
<p style="margin: 0px; font-family: Helvetica; min-height: 17px; "></p>
<p style="margin: 0px; font-family: Arial; ">===================================================================================</p>
<p style="margin: 0px; font-family: Arial; ">Read all Security FYI Newsletter articles and submit comments online at
<a href="http://securityfyi.wordpress.com/">http://securityfyi.wordpress.com/</a>.</p>
<p style="margin: 0px; font-family: Arial; ">===================================================================================</p>
<p></p>
</div>
<div><br>
</div>
<div><span class="Apple-style-span" style="border-collapse: separate; font-family: Calibri; font-size: medium; border-spacing: 0px; "><span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px; font-family: Helvetica; font-size: 14px; ">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px; "><span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px; "><span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px; "><span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px; "><span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px; "><span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px; font-size: 12px; ">
<div><br>
</div>
<div>Monique Yeaton</div>
<div>IT Security Communications Consultant</div>
<div>MIT Information Services & Technology (IS&T)</div>
<div>(617) 253-2715</div>
<div>http://ist.mit.edu/security</div>
<div><br class="khtml-block-placeholder">
</div>
<br class="Apple-interchange-newline">
</span></span></span></span></span></span></div>
</span></span></div>
</body>
</html>