<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="margin: 0px; font-family: Helvetica;" class="">In this issue:</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">1. Microsoft Security Updates for September 2015</div>
<div style="margin: 0px; font-family: Helvetica;" class="">2. What NCSAM will Bring in October</div>
<div style="margin: 0px; font-family: Helvetica;" class="">3. Cybersecurity Course via MITProfessionalX</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><span style="text-decoration: underline" class=""><b class="">1. Microsoft Security Updates for September 2015</b></span></div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Last week Microsoft released twelve
<a href="https://technet.microsoft.com/en-us/library/security/ms15-sep.aspx" class="">
security bulletins</a>, five of which are critical to mitigate code execution vulnerabilities. The twelve bulletins address 52 vulnerabilities total this month.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Systems affected include: Windows, Internet Explorer, Microsoft Edge, Office, Lync, SharePoint Foundation, Microsoft .NET Framework, Exchange Server, and Skype for Business Server.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">One of the most critical bulletins is for a Graphics Component buffer overflow vulnerability (MS15-097) in how the Windows Adobe Type Manager Library handles OpenType fonts. It could be exploited by
convincing a user to open a specially crafted document or to visit an untrusted webpage that contains embedded OpenType fonts. A successful exploit would allow an attacker to install programs, view, change or delete data, and create new accounts with full
user rights.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Microsoft Edge, the new browser for those using Windows 10, has critical vulnerabilities that are addressed with MS15-095. These are also addressed in the patches for Internet Explorer (MS15-094). </div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">As always, you are advised to install vendor patches as they are available, run all software with least privileges required while still maintaining functionality, avoid handling files from unknown or
questionable sources, and never visit sites of unknown or questionable integrity.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><a href="http://www.networkworld.com/article/2981732/microsoft-subnet/microsoft-released-12-patches-5-rated-critical-1-being-exploited-in-the-wild.html" class="">Read the full story in the news</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><span style="text-decoration: underline" class=""><b class="">2. What NCSAM will Bring in October</b></span></div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Recognizing the importance of cybersecurity to our nation, President Obama has designated October as National Cyber Security Awareness Month (NCSAM). As members of a university, we can all do our share
to raise awareness about cybersecurity and increase our resiliency to cyber threats. For example,
<a href="http://www.dhs.gov/publication/stopthinkconnect-promotional-materials" class="">
download free “Stop.Think.Connect.” materials</a> to distribute in your office or dorm.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><a href="http://www.dhs.gov/national-cyber-security-awareness-month" class="">Learn about what you can do</a>. </div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><span style="text-decoration: underline" class=""><b class="">3. Cybersecurity Course via MITProfessionalX</b></span></div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">A six-week course, <b class="">
Cybersecurity: Technology, Application and Policy</b> is being offered by CSAIL. This Digital Programs course will survey state-of-the-art topics in cybersecurity, looking at systems issues, algorithmic solutions, policy issues and a range of case studies.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">It is taught by a team of world-renowned security experts in hardware, software, cryptography and policy from CSAIL. </div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Details: The current available course starts on September 15, ends October 27, 2015. The price is $545. Registration has been extended to September 22nd. If you miss this one, it will be repeated in
November and in January.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><a href="https://mitprofessionalx.mit.edu/" class="">Learn more or register at MITProfessionalX</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">NOTE: All Security FYI newsletters will now also be posted at:
<a href="http://ist.mit.edu/news" class="">ist.mit.edu/news</a> in place of the WordPress blog site that was perviously used for archiving them.</div>
<div class=""><br class="">
</div>
<div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<br class="">
Monique Buchanan<br class="">
Communications Specialist<br class="">
Information Systems & Technology (IS&T)<br class="">
Massachusetts Institute of Technology<br class="">
<a href="http://ist.mit.edu" class="">http://ist.mit.edu</a><br class="">
tel: 617.253.2715</div>
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<br class="">
</div>
<br class="Apple-interchange-newline">
</div>
</div>
</div>
<br class="">
</div>
<br class="Apple-interchange-newline">
</div>
<br class="Apple-interchange-newline">
<br class="Apple-interchange-newline">
</div>
<br class="">
</body>
</html>