<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class="">In this issue:</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">1. Security SIG Lunch on Dec. 18th</div>
<div style="margin: 0px; font-family: Helvetica;" class="">2. SANS Holiday Hack Challenge</div>
<div style="margin: 0px; font-family: Helvetica;" class="">3. Security Update Released for Adobe Flash Player</div>
<div style="margin: 0px; font-family: Helvetica;" class="">4. Microsoft Enables Removal of SSL 3.0 Fallback in IE</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica;" class="">1. Security SIG Lunch on Dec. 18th</div>
<div style="margin: 0px; font-family: Helvetica;" class="">------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">There’s still time to sign up for this week’s Security SIG Lunch. The topic is “OS Hardening Best Practices” and for this talk we’ll be hearing from several people at MIT regarding their experiences. </div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Where: W92-Back Bay</div>
<div style="margin: 0px; font-family: Helvetica;" class="">When: Thursday, December 18, 12:00 - 1:30</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Please RSVP at <a href="mailto:security_sig_events@mit.edu" class="">
security_sig_events@mit.edu</a> by Wednesday Dec. 17 at noon, if you plan on eating lunch with us.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">---------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica;" class="">2. SANS Holiday Hack Challenge</div>
<div style="margin: 0px; font-family: Helvetica;" class="">---------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Help save old Ebenezer Scrooge from certain doom! This year’s Holiday Hack Challenge from SANS is designed to help build your information security skills and have some holiday fun in the process. This
year, match wits with an Artificially Intelligent agent, exploit a target machine, and do some detailed packet capture and file analysis, all with the goal of unraveling the mysteries of the Ghosts of Hacking Past, Present and Future. </div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Everyone is invited to participate. Compete for some really cool prizes:</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><a href="http://pen-testing.sans.org/holiday-challenge/2014" class="">http://pen-testing.sans.org/holiday-challenge/2014</a></div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">----------------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica;" class="">3. Security Update Released for Adobe Flash Player</div>
<div style="margin: 0px; font-family: Helvetica;" class="">----------------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Last week, Adobe released a security update for Flash Player for Windows, Macintosh and Linux. These updates address vulnerabilities that could potentially allow an attacker to take control of the following
affected systems: </div>
<div style="margin: 0px; font-size: 16px; font-family: Helvetica; color: rgb(50, 51, 51); min-height: 19px;" class="">
<b class=""></b><br class="">
</div>
<ul class="">
<li style="margin: 0px 0px 4px; font-family: Helvetica; color: rgb(50, 51, 51);" class="">
Adobe Flash Player 15.0.0.242 and earlier versions </li><li style="margin: 0px 0px 4px; font-family: Helvetica; color: rgb(50, 51, 51);" class="">
Adobe Flash Player 13.0.0.258 and earlier 13.x versions </li><li style="margin: 0px 0px 4px; font-family: Helvetica; color: rgb(50, 51, 51);" class="">
Adobe Flash Player 11.2.202.424 and earlier versions for Linux </li></ul>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">The recommendation by Adobe is for users to update their software with version
<span style="font-kerning: none; color: #323333" class="">16.0.0.235</span> (Windows and Macintosh) and version
<span style="font-kerning: none; color: #323333" class="">11.2.202.425</span> (for Linux).
<a href="http://helpx.adobe.com/security/products/flash-player/apsb14-27.html" class="">
Instructions can be found in the Adobe Security Bulletin.</a></div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">--------------------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica;" class="">4. Microsoft Enables Removal of SSL 3.0 Fallback in IE</div>
<div style="margin: 0px; font-family: Helvetica;" class="">--------------------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Last week, in addition to patching 14 vulnerabilities in Internet Explorer (IE), Microsoft gave Windows admins the ability to disable SSL 3.0 in IE 11 for Protected Mode sites. Doing so eliminates exposure
to <a href="http://kb.mit.edu/confluence/x/GIEwCQ" class="">SSL attacks (also known as POODLE)</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">This change to IE 11 turns off the disabling of SSL 3.0 by default, but it will be turned on by default on February 10, 2015. This is Microsoft’s first step toward disabling SSL 3.0 by default in all
of its online services.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><a href="http://threatpost.com/microsoft-enables-removal-of-ssl-3-0-fallback-in-ie/109821" class="">Read the full story in the news</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">See the status of disabling SSL 3.0 in the most popular browsers
<a href="http://kb.mit.edu/confluence/x/5IEwCQ" class="">here</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">=======================================================================================</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Read all archived Security FYI Newsletter articles and submit comments online at
<a href="http://securityfyi.wordpress.com/" class=""><span style="color: rgb(4, 46, 238);" class="">http://securityfyi.wordpress.com/</span></a>.</div>
<div style="margin: 0px; font-family: Helvetica;" class="">=======================================================================================</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<br class="">
Monique Buchanan<br class="">
IT Security Communications Coordinator<br class="">
Information Systems & Technology (IS&T)<br class="">
Massachusetts Institute of Technology<br class="">
<a href="http://ist.mit.edu/secure" class="">http://ist.mit.edu/secure</a><br class="">
tel: 617.253.2715</div>
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<br class="">
</div>
<br class="Apple-interchange-newline">
</div>
</div>
</div>
<br class="">
<br class="Apple-interchange-newline">
</div>
<br class="">
</body>
</html>