<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="margin: 0px; font-family: Helvetica;" class="">In this issue:</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">1. Adobe Security Patches Released so Far in July 2015</div>
<div style="margin: 0px; font-family: Helvetica;" class="">2. Microsoft Security Updates for July 2015</div>
<div style="margin: 0px; font-family: Helvetica;" class="">3. Microsoft Ends Support for Windows Server 2003</div>
<div style="margin: 0px; font-family: Helvetica;" class="">4. Security SIG Talk: Slides are Available</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">---------------------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica;" class="">1. Adobe Security Patches Released so Far in July 2015</div>
<div style="margin: 0px; font-family: Helvetica;" class="">---------------------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Adobe has posted multiple
<a href="http://blogs.adobe.com/psirt/" class="">security advisories</a> and updates for its products this month:</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<ul class="">
<li style="margin: 0px; font-family: Helvetica;" class=""><b class="">Adobe Flash Player:</b> A Security Advisory (<a href="https://helpx.adobe.com/security/products/flash-player/apsa15-03.html" class="">APSA15-03</a>) was posted earlier this month regarding
a critical vulnerability in Adobe Flash Player, affecting Windows, Macintosh and Linux. Adobe did take quick steps to fix the software. The details of the updates were posted in
<a href="https://helpx.adobe.com/security/products/flash-player/apsb15-16.html" class="">
APSA15-16</a>. A week later, another update was released via <a href="https://helpx.adobe.com/security/products/flash-player/apsb15-18.html" class="">
APSA15-18</a>. To make sure you have the latest update, go to the <a href="http://www.adobe.com/products/flash/about/" class="">
About Flash Player page</a>. If using Firefox, Flash may be disabled by default. If on Windows or Macintosh, you should be running version 18.0.0.209. If using Linux, you should be running version 11.2.202.491.
</li><li style="margin: 0px; font-family: Helvetica;" class=""><b class="">Adobe Acrobat and Reader:</b> Adobe Acrobat X and XI and Reader X and XI have security updates (<a href="https://helpx.adobe.com/security/products/acrobat/apsb15-15.html" class="">APSA15-15</a>)
for critical vulnerabilities. The latest version for Adobe and Reader XI is 11.0.12 and for Acrobat and Reader X is 10.1.15.
</li><li style="margin: 0px; font-family: Helvetica;" class=""><b class="">Adobe Shockwave Player</b>: A security update was released via a security bulletin (<a href="https://helpx.adobe.com/security/products/shockwave/apsb15-17.html" class="">APSA15-17</a>) for
a vulnerability in Shockwave Player version 12.1.8.158 and earlier. The latest version of the player is version 12.1.9.159, available via the
<a href="https://get.adobe.com/shockwave/" class="">Shockwave Player Download Center</a>.
</li></ul>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">In all cases, Adobe recommends users update their software to the latest versions.
<a href="http://www.computerworld.com/article/2949536/security/latest-flash-player-version-offers-better-exploit-defenses.html" class="">
Read more about the Adobe Flash Player update in the news here</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Several big Internet players are calling for the retirement of Adobe Flash.
<a href="http://arstechnica.com/security/2015/07/firefox-blacklists-flash-player-due-to-unpatched-0-day-vulnerabilities/" class="">
Read that story in the news here</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">----------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica;" class="">2. Microsoft Security Updates for July 2015</div>
<div style="margin: 0px; font-family: Helvetica;" class="">----------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">On Patch Tuesday last week, Microsoft released
<a href="https://technet.microsoft.com/en-us/library/security/dn903782.aspx" class="">
14 security bulletins</a> (MS15-058, and MS15-065 through MS15-077) to address vulnerabilities in Microsoft products. Four of these are rated critical.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Systems affected include Microsoft Windows, Office, Internet Explorer and SQL Server.
<a href="http://www.networkworld.com/article/2948195/microsoft-subnet/july-2015-patch-tuesday-microsoft-closes-holes-being-exploited-in-the-wild.html" class="">
Read the story in the news</a> (This article also includes more on the Adobe Flash issues mentioned above).</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">One of the critical bulletins,
<a href="https://technet.microsoft.com/en-us/library/security/ms15-067.aspx" class="">
MS15-067</a> included a patch to address a remote code execution vulnerability in Remote Desktop (RDP).</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">To exploit the vulnerability, an attacker could send a specially crafted sequence of packets to a system running the RDP server service. An attacker who successfully exploited this vulnerability could
take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">RDP is heavily used throughout MIT and therefore IS&T recommends that patches are applied as soon as possible. If you have questions or need assistance, send email to the
<a href="mailto:helpdesk@mit.edu" class="">IS&T Help Desk</a> or call 617.253.1101. You can also
<a href="http://ist.mit.edu/help" class="">submit a request online</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Microsoft also <a href="http://gizmodo.com/go-update-windows-right-now-1719187152" class="">
released an out-of-band patch</a> (<a href="https://technet.microsoft.com/library/security/MS15-078" class="">MS15-078</a>) this past Monday for all supported versions of Windows. It fixes a security bug in the way Windows handles custom fonts. The updates
is rated as critical.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Be sure to accept the updates as they occur, or go to the
<a href="http://windowsupdate.microsoft.com/" class="">Windows Update site</a>. You may need to restart your machine after installing patches.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">---------------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica;" class="">3. Microsoft Ends Support for Windows Server 2003</div>
<div style="margin: 0px; font-family: Helvetica;" class="">---------------------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Microsoft ended support of Windows Server 2003 on
<b class="">July 14, 2015</b>. If you have machines still running Windows Server 2003, it is very important that you upgrade to Windows Server 2012 R2 and apply the latest patches from Microsoft to minimize security risks and comply with recent Massachusetts
data regulations.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">IS&T recommends that Windows users subscribe to the MIT Windows Automatic Update Service (MIT WAUS) to get the latest service packs and security patches. Visit the
<a href="http://kb.mit.edu/confluence/x/G4BeBQ" class="">MIT WAUS article in the KB</a> for detailed instructions on how to subscribe.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">If you have questions or need assistance, send email to the IS&T Help Desk at
<a href="mailto:helpdesk@mit.edu" class="">helpdesk@mit.edu</a> or call 617.253.1101. You can also
<a href="http://ist.mit.edu/help" class="">submit a request online</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><a href="http://www.microsoft.com/en-us/server-cloud/products/windows-server-2003/" class="">Learn more from Microsoft about migrating from Windows Server 2003</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">-------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica;" class="">4. Security SIG Talk: Slides are Available</div>
<div style="margin: 0px; font-family: Helvetica;" class="">-------------------------------------------------------</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Thank you to all who attended the Security SIG talk last week on
<a href="https://kb.mit.edu/confluence/display/istcontrib/Security+SIG+Luncheon+2015-07-15" class="">
Lessons Learned from the Top Healthcare Information Security Breaches</a>. If you were not able to attend, or did attend but would like to review the information again, the slides are available
<a href="https://wikis.mit.edu/confluence/display/ITSS/Security+SIG" class="">here</a>. (MIT certificate required.)</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="margin: 0px; font-family: Helvetica;" class="">=======================================================================================</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Read all archived Security FYI Newsletter articles and submit comments online at
<a href="http://securityfyi.wordpress.com/" class=""><span style="color: rgb(4, 46, 238);" class="">http://securityfyi.wordpress.com/</span></a>.</div>
<div style="margin: 0px; font-family: Helvetica;" class="">=======================================================================================</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><br class="">
</div>
Monique Buchanan<br class="">
Social Communications Specialist<br class="">
Information Systems & Technology (IS&T)<br class="">
Massachusetts Institute of Technology<br class="">
<a href="http://ist.mit.edu" class="">http://ist.mit.edu</a><br class="">
tel: 617.253.2715</div>
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<br class="">
</div>
<br class="Apple-interchange-newline">
</div>
</div>
</div>
<br class="">
</div>
<br class="Apple-interchange-newline">
<br class="Apple-interchange-newline">
</div>
<br class="">
</body>
</html>