<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="margin: 0px; font-family: Helvetica;" class="">In this issue:</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">1. EVENT: Laptop Tagging and Registration, April 1st</div>
<div style="margin: 0px; font-family: Arial;" class="">2. Android Flaw Allows Attackers to Modify or Replace Apps</div>
<div style="margin: 0px; font-family: Helvetica;" class="">3. EVENT: CIS National Webcast on Security</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">------------------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica;" class="">1. EVENT: Laptop Tagging and Registration, April 1st</div>
<div style="margin: 0px; font-family: Helvetica;" class="">------------------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">This week there is an opportunity to register and tag your laptop. </div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Where: <b class="">Lobby of Building 10</b></div>
<div style="margin: 0px; font-family: Helvetica;" class="">When: <b class="">Wed., April 1st, 11:00 am - 1:15 pm</b></div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Cost: $10 cash (no cards) or MIT Cash Object</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Just as you might register a bike with the police, you can also register your laptop. Information Systems & Technology partners with MIT Police to provide STOP (Security Tracking of Office Property)
tags for laptops. The tag is affixed to the device, has a unique number, and is registered with a world-wide database.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Capt. Cheryl Vossmer of the MIT Police says that although a STOP tag is not software that can track a device via GPS or other means, it has been very effective at providing a way for lost or stolen
laptops to be returned to their rightful owners.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Read <a href="https://www.stoptheft.com/" class="">
recovery stories here</a> of laptops with STOP tags.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><span style="text-decoration: underline ; font-kerning: none; color: #4787ff" class=""><a href="http://kb.mit.edu/confluence/display/istcontrib/MIT+Police+Laptop+Tagging+and+Registration" class="">Learn
more about laptop registration at MIT</a></span>. The next laptop tagging session is on May 6th, 2015.</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">-------------------------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Arial;" class="">2. Android Flaw Allows Attackers to Modify or Replace Apps</div>
<div style="margin: 0px; font-family: Helvetica;" class="">-------------------------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">A security flaw in the Android operating system could be exploited to remotely take over vulnerable devices. </div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">According to researchers from Palo Alto Networks, roughly half of all Android phones are vulnerable to a newly discovered hack that in some cases allows attackers to surreptitiously modify or replace seemingly
benign apps with malicious ones that steal passwords and other sensitive data.</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">The vulnerability has been patched in Android 4.3_r0.9 and later but some Android 4.3 devices remain vulnerable.</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">The attack works only at third-party app stores, not the Google Play store.</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class=""><a href="http://arstechnica.com/security/2015/03/android-hijacking-bug-may-allow-attaclers-to-install-password-stealers/" class="">Read the story in the news</a>.</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">-------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica;" class="">3. EVENT: CIS National Webcast on Security</div>
<div style="margin: 0px; font-family: Helvetica;" class="">-------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">The topic of the next free National Webcast hosted by CIS (Center for Internet Security) is “Maintaining Security in a Mobile World.” Presenter is Kristy Westphal, Director of Risk and Assurance at
Vantiv.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">Save the date: <b class="">
Wednesday, April 15, 3:00 pm</b></div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">Running an information security program for any organization is a challenge. You may finally think that you have the right formula for success when a new technology comes along, forcing you to recalculate. How
can you stay on top of this ever-changing threat landscape and still properly protect your environment?</div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">This webinar looks at a flexible, risk-based approach that allows for quick analysis and recommendation for your organization. The webcast will include recommendations on why and how organizations could
pursue such an approach.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><a href="https://msisac.cisecurity.org/webcast/2015-04/" class="">Register now to save your seat</a> (free registration)</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">
<div style="margin: 0px;" class="">=======================================================================================</div>
<div style="margin: 0px;" class="">Read all archived Security FYI Newsletter articles and submit comments online at
<a href="http://securityfyi.wordpress.com/" class=""><span style="color: rgb(4, 46, 238);" class="">http://securityfyi.wordpress.com/</span></a>.</div>
<div style="margin: 0px;" class="">=======================================================================================</div>
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Monique Buchanan<br class="">
Social Communications Specialist<br class="">
Information Systems & Technology (IS&T)<br class="">
Massachusetts Institute of Technology<br class="">
<a href="http://ist.mit.edu" class="">http://ist.mit.edu</a><br class="">
tel: 617.253.2715</div>
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<br class="">
</div>
<br class="Apple-interchange-newline">
</div>
</div>
</div>
<br class="">
</div>
<br class="Apple-interchange-newline">
<br class="Apple-interchange-newline">
</div>
<br class="">
</body>
</html>