<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;">In this issue:</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica;">1. For Your Calendar: Free Webcasts from SANS</div>
<div style="margin: 0px; font-family: Helvetica;">2. Video: Cybercrime Exposed</div>
<div style="margin: 0px; font-family: Helvetica;">3. Updates on Disabling SSL 3.0</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica;">-----------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica;">1. For Your Calendar: Free Webcasts from SANS</div>
<div style="margin: 0px; font-family: Helvetica;">-----------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica;">Do you have about an hour of free time and want to learn something new from experts in the security field? You can find free webcasts hosted by
<a href="http://SANS.org">SANS.org</a> through their <a href="https://www.sans.org/webcasts/upcoming">
upcoming</a> webcasts page. Recent webcasts are <a href="https://www.sans.org/webcasts/archive/2014">
archived</a>. These are among other topics:</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<ul>
<li style="margin: 0px; font-family: Helvetica;">What’s in your software? Reduce risk from third-party and open source components (sponsor: Veracode)
</li><li style="margin: 0px; font-family: Helvetica;"></li><li style="margin: 0px; font-family: Helvetica;">Watering hole attacks: Detect end-user compromise before the damage is done (sponsor: AlienVault)
</li><li style="margin: 0px; font-family: Helvetica;"></li><li style="margin: 0px; font-family: Helvetica;">Zen and the art of network segmentation (sponsor: Tufin Technologies)
</li><li style="margin: 0px; font-family: Helvetica;"></li><li style="margin: 0px; font-family: Helvetica;">Ramping up your phishing program (special from SANS)
</li><li style="margin: 0px; font-family: Helvetica;"></li><li style="margin: 0px; font-family: Helvetica;">Be ready for a breach with intelligent response (sponsor: McAfee/Intel Security)
</li></ul>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica;">You have to log in to <a href="http://SANS.org">
SANS.org</a> to access the material. MIT is a member of SANS, so there is no cost. Much of the information in the Security FYI newsletter comes from SANS sources.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica;">-----------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica;">2. Video: Cybercrime Exposed</div>
<div style="margin: 0px; font-family: Helvetica;">-----------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica;">In this 2-minute video, Trend Micro educates about the ins and outs of phishing scams, what you might lose when you fall victim, and what you can do to stay protected. This cybercrime exposé specifically looks
at a phishing operation that was in affect in Brazil during the 2014 World Cup. Criminals hosted phishing site templates, malware and the victims’ personal documents in an online sharing site. It lured victims to click their links, then stole their money. </div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica;">Knowing the different tactics used by bad guys will help you avoid becoming a victim of cyber crime.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica;"><a href="http://youtu.be/pXp2RvA0SBU">View the video on YouTube</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica;">-------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica;">3. Updates on Disabling SSL 3.0</div>
<div style="margin: 0px; font-family: Helvetica;">-------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica;">Due to the <a href="https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/">
recent POODLE flaw</a>, Apple will stop supporting SSL 3.0 for push notifications and switch to the TLS encryption standard. Apple
<a href="https://developer.apple.com/news/?id=10222014a">announced on its developer site</a> that it will make the switch on October 29. </div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica;">The push notification service from Apple forwards notifications of third-party applications to iOS devices; it may include badges, sounds or custom text alerts. Apple notes that providers that only support SSL
3.0 will need to transfer to TLS as soon as possible to ensure the service continues to perform as expected.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica;">Other vendors are also updating their services. Twitter already
<a href="https://twitter.com/twittersecurity/status/522190947782643712">notified users</a> that is has disabled SSL 3.0 support.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica;">Mozilla advised Firefox users to install a Mozilla
<a href="https://addons.mozilla.org/en-US/firefox/addon/ssl-version-control/">security add-on that disables SSL 3.0</a>. It will be disabling the old protocol in Firefox 34, the next version of its browser, by the end of November.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica;">University of Michigan researchers have detailed
<a href="https://zmap.io/sslv3/browsers.html">how to disable SSL 3.0 for Internet Explorer</a> and other sites.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica;"><a href="http://www.cnet.com/news/apple-dumps-ssl-3-0-for-push-notifications-due-to-poodle-flaw/">Read the story online</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;"><br>
</div>
<div style="margin: 0px; font-family: Helvetica;">=======================================================================================</div>
<div style="margin: 0px; font-family: Helvetica;">Read all archived Security FYI Newsletter articles and submit comments online at
<a href="http://securityfyi.wordpress.com/"><span style="color: rgb(4, 46, 238);">http://securityfyi.wordpress.com/</span></a>.</div>
<div style="margin: 0px; font-family: Helvetica;">=======================================================================================</div>
<div apple-content-edited="true">
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<br>
Monique Buchanan<br>
IT Security Communications Coordinator<br>
Information Systems & Technology (IS&T)<br>
Massachusetts Institute of Technology<br>
<a href="http://ist.mit.edu/secure">http://ist.mit.edu/secure</a><br>
tel: 617.253.2715</div>
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<br>
</div>
<br class="Apple-interchange-newline">
</div>
</div>
</div>
<span><img height="100" width="360" apple-inline="yes" id="18F87E72-A077-447D-86FB-472DF848260E" apple-width="yes" apple-height="yes" src="cid:B0BFCD69-2454-4597-9B79-36CDA1F0EA6E@mit.edu"></span>
</div>
<br>
</body>
</html>