<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="margin: 0px; font-family: Helvetica;" class="">In this issue:</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">1. Microsoft Security Updates for October 2015</div>
<div style="margin: 0px; font-family: Helvetica;" class="">2. October 20: “Keep IT Safe” at MIT</div>
<div style="margin: 0px; font-family: Helvetica;" class="">3. Cyber Talent Search Offers Scholarships for Women</div>
<div style="margin: 0px; font-family: Helvetica;" class="">4. FBI Urges Use of Two-Factor Authentication</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><span style="text-decoration: underline" class=""><b class="">1. Microsoft Security Updates for October 2015</b></span></div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">This week on Patch Tuesday, Microsoft released six
<a href="https://technet.microsoft.com/en-us/library/security/ms15-oct.aspx" class="">
security bulletins</a>, three of which are rated critical. </div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Systems affected include Windows, Microsoft Edge, Internet Explorer, and Office. </div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">One of the critical updates covers vulnerabilities in Jscript and VBScript engines (it modifies how the VBScript and JScript engines handle objects in memory and helps to ensure that affected versions
of the VBScript properly implement the ASLR security feature), while another addresses remote execution in the Windows Shell. </div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">The Windows scripting component can be used do a lot of damage, and is important to patch. According to Core Security systems engineer Bobby Kozma, “Microsoft needs to adopt a disabled by default strategy
with those technologies until they can be removed entirely. Unfortunately, that will never happen, due to the huge legacy application technical debt held by large organizations and governments worldwide.”</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class="">Be sure to accept the updates as they occur, or go to the
<a href="http://www.update.microsoft.com/" class="">Windows Update</a> site. You may need to restart your machine after installing patches. </div>
<div style="margin: 0px; font-family: Arial; min-height: 16px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Arial;" class=""><a href="https://threatpost.com/microsoft-releases-six-bulletins-continues-rc4-deprecation/115017/" class="">Read more in the news</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><span style="text-decoration: underline" class=""><b class="">2. October 20: “Keep IT Safe” at MIT</b></span></div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-size: 12px; font-family: Helvetica;" class=""><img alt="20151007_duo_rocket_science-600x450.jpg" apple-inline="yes" id="5CACC5ED-8475-463C-8B8A-61FEBEAB6384" height="450" width="600" apple-width="yes" apple-height="yes" src="cid:B938CA23-EEC0-4FE4-9D2B-7EC2E1766CB5@mit.edu" class=""></div>
<div style="margin: 0px; font-size: 12px; font-family: Helvetica; min-height: 14px;" class="">
<br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">As part of <a href="http://kb.mit.edu/confluence/x/WR4YCQ" class="">
NCSAM</a> (National Cyber Security Awareness Month), Information Systems & Technology is hosting a table in Lobby 10. There are
<b class="">free coffee and donuts</b> for those who stop by and take the time to answer one of our security quiz questions!</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">In addition, you can get signed up for
<a href="http://ist.mit.edu/lastpass" class="">LastPass</a> password manager and <a href="https://ist.mit.edu/duo_security" class="">
Duo Security</a> two-factor authentication. These two new services are provided to the MIT community to help make MIT’s IT infrastructure more secure. </div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Come learn about these services and about the:</div>
<ul class="">
<li style="margin: 0px; font-family: Helvetica;" class="">new <a href="https://infoprotect.mit.edu/" class="">
Information Protection @ MIT website</a> </li><li style="margin: 0px; font-family: Helvetica;" class="">SANS <a href="https://infoprotect.mit.edu/training" class="">
Securing the Human</a> online courses </li><li style="margin: 0px; font-family: Helvetica;" class="">top 10 security tips. </li></ul>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Do your part to make the Internet safer for everyone. Please tell colleagues, friends and students at MIT about the event.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><b class="">We will be in Lobby 10 from 10am - noon.</b></div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><span style="text-decoration: underline" class=""><b class="">3. Cyber Talent Search Offers Scholarships for Women</b></span></div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">To bring more talent into cybersecurity by closing the gender gap, The National Center for Women in Technology and SANS are providing more than $300,000 in scholarships for advanced hands-on training
in the most sought-after skills. Women who demonstrate aptitude for and basic skills in cybersecurity are eligible. The
<a href="https://www.sans.org/cybertalent/immersion-academy/programs?#womens-academy" class="">
admissions process is now open</a> and qualifying exams are being held through October 30.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><a href="http://www.sans.org/cybertalent/immersion-academy/" class="">Learn more about SANS programs for a cybersecurity career</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><span style="text-decoration: underline ; font-kerning: none" class=""><b class="">4. FBI Urges Use of Two-Factor Authentication</b></span></div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">The FBI is encouraging small- and medium-sized businesses and Internet users in general to use two-factor authentication to safeguard personal information. The FBI is doing this as part of this year's
National Cyber Security Awareness Month. <a href="https://www.fbi.gov/news/news_blog/cyber-tip-protect-yourself-with-two-factor-authentication" class="">
Read more on FBI.gov</a></div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class="">At MIT you can sign up for two-factor authentication at the Keep IT Safe table on 10/20 (see above), via the online form at
<a href="http://duo.mit.edu" class="">duo.mit.edu</a>, or by contacting the <a href="http://ist.mit.edu/help" class="">IS&T Help Desk</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">A copy of this newsletter can be found on
<a href="http://ist.mit.edu/news" class="">ist.mit.edu/news</a>. </div>
<div class=""><br class="">
</div>
<div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<br class="">
Monique Buchanan<br class="">
Communications Specialist<br class="">
Information Systems & Technology (IS&T)<br class="">
Massachusetts Institute of Technology<br class="">
<a href="http://ist.mit.edu" class="">http://ist.mit.edu</a><br class="">
tel: 617.253.2715</div>
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<br class="">
</div>
<br class="Apple-interchange-newline">
</div>
</div>
</div>
<br class="">
</div>
<br class="Apple-interchange-newline">
</div>
<br class="Apple-interchange-newline">
<br class="Apple-interchange-newline">
</div>
<br class="">
</body>
</html>