<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="margin: 0px; font-family: Helvetica;" class="">In this issue</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">1. LastPass Network Breach</div>
<div style="margin: 0px; font-family: Helvetica;" class="">2. EVENT: Security SIG lunch on July 15</div>
<div style="margin: 0px; font-family: Helvetica;" class="">3. Recent Security Flaws and Updates</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">--------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica;" class="">1. LastPass Network Breach</div>
<div style="margin: 0px; font-family: Helvetica;" class="">--------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">On June 15, 2015, LastPass sent out a notice to its customers regarding suspicious activity on its network. The details of the activity are
<a href="https://blog.lastpass.com/2015/06/lastpass-security-notice.html/" class="">
posted here</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">LastPass Enterprise is a password management system that will be rolled out to the MIT community this summer. LastPass Enterprise encompasses access to data and passwords via Windows, Mac OS X and mobile
native clients, as well as via any web browser. It is a convenient solution for the password problem of teams and unlocks features such as shared password folders and secure notes.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">You can find information about LastPass Enterprise via the
<a href="http://kb.mit.edu/confluence/x/aaswCQ" class="">MIT LastPass FAQ</a>. Note that LastPass Enterprise for MIT includes two-factor authentication using
<a href="http://kb.mit.edu/confluence/display/istcontrib/Duo+two-factor+authentication+FAQ" class="">
Duo</a>, which provides an added layer of security for your account.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><a href="http://kb.mit.edu/confluence/x/ccIwCQ" class="">See the KB for answers to questions you may have about the LastPass security breach</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica;" class="">2. EVENT: Security SIG lunch on July 15</div>
<div style="margin: 0px; font-family: Helvetica;" class="">------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-size: 15px; font-family: Helvetica;" class="">Please join us for free lunch and a talk on lessons learned from some of the biggest breaches in the healthcare industry.</div>
<div style="margin: 0px; font-size: 15px; font-family: Helvetica; min-height: 18px;" class="">
<br class="">
</div>
<div style="margin: 0px; font-size: 15px; font-family: Helvetica;" class=""><b class="">Lessons Learned from the top Healthcare Information Security Breaches</b></div>
<div style="margin: 0px; font-size: 15px; font-family: Helvetica;" class="">Roy Wattanasin, MITM (MIT Medical)</div>
<p style="margin: 0px; font-size: 15px; font-family: Helvetica;" class=""> </p>
<div style="margin: 0px; font-size: 15px; font-family: Helvetica;" class="">The FBI has warned that hackers are or will be targeting your organization. 2014 was a rough year for data security, especially in the healthcare industry. About 43 percent of breaches
came from healthcare per the Ponemon Institute. 2015 has been a trickier year with one of the largest healthcare information breaches reported to date. </div>
<div style="margin: 0px; font-size: 15px; font-family: Helvetica; min-height: 18px;" class="">
<br class="">
</div>
<div style="margin: 0px; font-size: 15px; font-family: Helvetica;" class="">This talk highlights and walks through the top 2015 healthcare information security breaches (using public information). It gives an overview of the healthcare information landscape,
covers the laws/regulations and offers recommendations to prevent these kinds of breaches whether you are in healthcare or another industry.</div>
<div style="margin: 0px; font-size: 15px; font-family: Helvetica; min-height: 18px;" class="">
<br class="">
</div>
<div style="margin: 0px; font-size: 15px; font-family: Helvetica;" class="">Where: W20-407</div>
<div style="margin: 0px; font-size: 15px; font-family: Helvetica;" class="">When: Wednesday, July 15, 2015, 12:00 - 1:30 pm, includes free lunch</div>
<div style="margin: 0px; font-size: 15px; font-family: Helvetica;" class="">How to sign up: Please email
<a href="mailto:security_sig_events@mit.edu" class="">security_sig_events@mit.edu</a>.</div>
<div style="margin: 0px; font-size: 15px; font-family: Helvetica;" class="">We hope to see you there!</div>
<div style="margin: 0px; font-size: 15px; font-family: Helvetica; min-height: 18px;" class="">
<br class="">
</div>
<div style="margin: 0px; font-size: 15px; font-family: Helvetica;" class="">If you haven’t yet joined the IT Security Special Interest Group mailing list, please
<a href="http://mailman.mit.edu/mailman/listinfo/security_sig" class="">subscribe here</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">---------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica;" class="">3. Recent Security Flaws and Updates</div>
<div style="margin: 0px; font-family: Helvetica;" class="">---------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><b class="">Drupal</b></div>
<div style="margin: 0px; font-family: Helvetica;" class="">Updates for the Drupal content management system are available. The
<a href="https://www.drupal.org/SA-CORE-2015-002" class="">Drupal security team's advisory</a> describes one critical and three "less critical" vulnerabilities that the updates address. The critical flaw lies in Drupal's implementation of OpenID; it allows
attackers to log in to websites as administrators. The issues affect Drupal versions 6 and 7.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><b class="">Samsung Galaxy Smartphones</b></div>
<div style="margin: 0px; font-family: Helvetica;" class="">Samsung plans to release a fix for a
<a href="http://global.samsungtomorrow.com/information-regarding-the-keyboard-security-issue-and-our-device-policy-update/" class="">
critical security flaw</a> that affects more than 600 million of its mobile phones. The issue affects Galaxy smartphones that come with the SwiftKey keyboard preinstalled. The flaw could be exploited to access data on the devices. Galaxy devices running Knox
security software will receive a new security policy that makes the vulnerability invalid. Phones that are not running Knox will have to wait until a firmware update is ready.
<a href="http://krebsonsecurity.com/2015/06/critical-flaws-in-apple-samsung-devices/" class="">
See Krebs on Security for this story and the Apple KeyChain story below</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><b class="">Apple KeyChain</b></div>
<div style="margin: 0px; font-family: Helvetica;" class="">A security flaw (a zero-day bug) in Apple's OS X and iOS could be exploited to steal information from the Apple keychain and from applications. The problem lies in the operating systems' application
sandboxes and can be exploited by specially created apps. <a href="http://arstechnica.com/security/2015/06/serious-os-x-and-ios-flaws-let-hackers-steal-keychain-1password-contents/" class="">
Read the full story in the news</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class="">
<div style="margin: 0px;" class="">=======================================================================================</div>
<div style="margin: 0px;" class="">Read all archived Security FYI Newsletter articles and submit comments online at
<a href="http://securityfyi.wordpress.com/" class=""><span style="color: rgb(4, 46, 238);" class="">http://securityfyi.wordpress.com/</span></a>.</div>
<div style="margin: 0px;" class="">=======================================================================================</div>
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Monique Buchanan<br class="">
Social Communications Specialist<br class="">
Information Systems & Technology (IS&T)<br class="">
Massachusetts Institute of Technology<br class="">
<a href="http://ist.mit.edu" class="">http://ist.mit.edu</a><br class="">
tel: 617.253.2715</div>
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<br class="">
</div>
<br class="Apple-interchange-newline">
</div>
</div>
</div>
<br class="">
</div>
<br class="Apple-interchange-newline">
<br class="Apple-interchange-newline">
</div>
<br class="">
</body>
</html>