<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class="">In this issue:</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">1. Microsoft Security Updates for December 2015</div>
<div style="margin: 0px; font-family: Helvetica;" class="">2. Financial Scam Using Business Email</div>
<div style="margin: 0px; font-family: Helvetica;" class="">3. Cambridge 2 Cambridge Cybersecurity Challenge</div>
<div style="margin: 0px; font-family: Helvetica;" class="">4. Software Reverse Engineering Workshop During IAP</div>
<div style="margin: 0px; font-family: Helvetica;" class="">5. Shred IT Day Coming in January</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><span style="text-decoration: underline" class=""><b class="">1. Microsoft Security Updates for December 2015</b></span></div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Last Tuesday, Microsoft released twelve
<a href="https://technet.microsoft.com/en-us/library/security/ms15-Dec" class="">
security bulletins</a>, eight of which are rated critical. Two of the issues are actively at risk, namely MS15-131 concerning a memory-corruption vulnerability in Office, and MS15-135, concerning a kernel memory elevation of privilege in Windows.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Other systems affected by the twelve bulletins include Internet Explorer, Microsoft Edge, Microsoft .NET Framework, Skype for Business, Microsoft Lync and Silverlight.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">In a separate <a href="https://technet.microsoft.com/en-us/library/security/3123040" class="">
advisory</a>, Microsoft warns users of a leaked Xbox Live certificate and private key pair, which it has revoked. Microsoft is not aware of attacks related to this issue, according to the advisory. </div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Be sure to accept the updates as they occur, or go to the
<a href="http://www.update.microsoft.com/" class="">Windows Update</a> site. You may need to restart your machine after installing patches.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><a href="https://threatpost.com/microsoft-patches-71-flaws-two-under-attack-warns-of-leaked-xbox-live-cert/115601/" class="">Learn more from the threat post blog</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><span style="text-decoration: underline" class=""><b class="">2. Financial Scam Using Business Email</b></span></div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">The Boston Field Office of the Federal Bureau of Investigation (BFO-FBI) is disseminating information regarding a particularly persistent scam using business email. The flyer and pamphlet being distributed
offer guidelines on how to be prepared, what to do if you fall victim, and how to report the incident to the BFO-FBI. Please print, email and/or share the
<a href="http://ist.mit.edu/sites/default/files/news/BEC%20Flyer.pdf" class="">flyer</a> and
<a href="http://ist.mit.edu/sites/default/files/news/BEC%20pamphlet%20final.pdf" class="">
pamphlet</a> with your co-workers, clients, and customers. </div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">In the meantime, be on the lookout for suspicious emails requesting a transfer of funds. These phishing scams are quite sophisticated, causing potentially millions of dollars in losses. Learn more about
this scam from <a href="http://ist.mit.edu/news/email_scam" class="">IS&T</a> and the
<a href="https://www.fbi.gov/news/stories/2015/august/business-e-mail-compromise/business-e-mail-compromise" class="">
FBI</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">To learn how to identify and protect yourself from phishing emails, read this month’s
<a href="https://www.securingthehuman.org/newsletters/ouch/issues/OUCH-201512_en.pdf" class="">
OUCH! newsletter (.pdf)</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><span style="text-decoration: underline" class=""><b class="">3. Cambridge 2 Cambridge Cybersecurity Challenge</b></span></div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">December 11 was the last day to register for the
<a href="http://cambridge2cambridge.mit.edu/" class="">Cambridge 2 Cambridge (C2C) cybersecurity hackathon</a> between MIT with the University of Cambridge. </div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Although the deadline for registering has passed, you can still watch the live action on March 4 at the Stata Center (Building 32). The Hackathon, hosted by CSAIL, supports initiatives advancing cybersecurity
technologies. If you missed the registration date and want to join in next year, keep an eye out for the Fall 2016 C2C competition announcement.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">You have until January 22 to sign up for the Start-Up Competition, taking place on March 5. Participants can win up to $25,000 of prizes when they present a product that has a critical impact on cybersecurity.
Learn more about both the Hackathon and the Start-Up Competition <a href="http://cambridge2cambridge.mit.edu/events" class="">
here</a>.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><span style="text-decoration: underline ; font-kerning: none" class=""><b class="">4. Software Reverse Engineering Workshop During IAP</b></span></div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">This <a href="http://student.mit.edu/searchiap/iap-9289af8f51340f9501513cc17d7f0154.html" class="">
5-day workshop</a> at MIT teaches the process of software reverse engineering, a way to discover undocumented internals in computer programs. Reverse engineering is critical to cyber operations not just in the government sector, but also in industry, finance,
and anywhere computer programs and information need to be protected.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Where: NE45, 2nd floor</div>
<div style="margin: 0px; font-family: Helvetica;" class="">When: January 4-8, 2016</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Advance sign-up required.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class=""><span style="text-decoration: underline ; font-kerning: none" class=""><b class="">5. Shred IT Day Coming in January</b></span></div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">Have you been holding onto old hard drives, thumb drives, CDs or digital tapes because they might contain sensitive data? If you don’t need these items anymore, bring them to the
<a href="http://ist.mit.edu/news/shred-it" class="">Shred IT table</a> in the Stata Center (Building 32) on January 21, between 10am and 2pm. IS&T is offering this service to the community free of charge.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">It’s a great way to ensure that sensitive data is protected, and there’s no better way to start the new year than by cleaning out your office spaces.</div>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">You can bring the following items to the Shred IT table:</div>
<ul class="">
<li style="margin: 0px; font-family: Helvetica;" class="">paper </li><li style="margin: 0px; font-family: Helvetica;" class="">digital tapes </li><li style="margin: 0px; font-family: Helvetica;" class="">CDs </li><li style="margin: 0px; font-family: Helvetica;" class="">hard drives </li><li style="margin: 0px; font-family: Helvetica;" class="">thumb drives </li></ul>
<div style="margin: 0px; font-family: Helvetica; min-height: 17px;" class=""><br class="">
</div>
<div style="margin: 0px; font-family: Helvetica;" class="">See you there!</div>
<div class=""><br class="">
</div>
<div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<br class="">
<br class="">
Monique Buchanan<br class="">
Communications Specialist<br class="">
Information Systems & Technology (IS&T)<br class="">
Massachusetts Institute of Technology<br class="">
<a href="http://ist.mit.edu" class="">http://ist.mit.edu</a><br class="">
tel: 617.253.2715</div>
<div style="color: rgb(0, 0, 0); font-family: Avenir; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<br class="">
</div>
<br class="Apple-interchange-newline">
</div>
</div>
</div>
<br class="">
</div>
<br class="Apple-interchange-newline">
</div>
<br class="Apple-interchange-newline">
<br class="Apple-interchange-newline">
</div>
<br class="">
</body>
</html>