{"id":9049,"date":"2017-09-01T06:00:04","date_gmt":"2017-09-01T14:00:04","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/09\/01\/news-2822\/"},"modified":"2017-09-01T06:00:04","modified_gmt":"2017-09-01T14:00:04","slug":"news-2822","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2017\/09\/01\/news-2822\/","title":{"rendered":"TippingPoint Threat Intelligence and Zero-Day Coverage \u2013 Week of August 28, 2017"},"content":{"rendered":"

Credit to Author: Elisa Lippincott (TippingPoint Global Product Marketing)| Date: Fri, 01 Sep 2017 13:25:14 +0000<\/strong><\/p>\n

\"\"<\/p>\n

The only topic I can bring up this week is the devastation in Texas caused by Hurricane Harvey. Many cities have been completely destroyed and to add insult to injury, Harvey moved back to the Gulf of Mexico and made landfall again in Louisiana. Catastrophic flooding has left tens of thousands without their homes and most major highways impassable. I have several family members that are dealing with the after effects of this storm along the Texas coast. It\u2019s the worst feeling in the world when you want to help, but all you can do is watch from the sidelines. There\u2019s nothing worse than texting your immediate family at 3am to make sure they\u2019re alive and not flooded out of their house.<\/p>\n

I\u2019ve lived in Austin, Texas for almost 18 years, but Houston is my home. I was born there, attended college there, and have several family members and even more friends in the area. Harvey may have destroyed homes but it can\u2019t destroy the spirit of Houston. All I can ask for at this point is to find it in your heart to make a small donation to the charity of your choice to help those who will have a long road ahead of them to rebuild their lives after this catastrophe. Or do something to help first responders who are rescuing others while they deal with the effects of Harvey at home. This native Houstonian thanks you for your generosity.<\/p>\n

Mobile Pwn2Own<\/strong><\/p>\n

Earlier this week, the Zero Day Initiative (ZDI) announced the sixth annual Mobile Pwn2Own competition, which returns to the PacSec conference in Tokyo on November 1-2, 2017. There is more than $500,000 USD available in the prize pool, and we\u2019re giving add-on bonuses for exploits that meet a higher bar of difficulty. This year\u2019s contest will target the Apple iPhone 7, the Google Pixel, the Samsung Galaxy S8, and the Huawei Mate9 Pro handsets. One category has researchers targeting the web browsers on the phones. The second category involves attacks happening over Bluetooth, NFC or WiFi. The third category will have attacks demonstrated by viewing or receiving MMS or SMS messages. The final category will cover attacks where the target device communicates with a rogue base station. Full details about the event can be here<\/a> on the ZDI blog. Follow ZDI on Twitter<\/a> for the latest news and information.<\/p>\n

Trend Micro Business Support Portal (BSP)<\/strong><\/p>\n

Trend Micro TippingPoint has completed the migration over to the Trend Micro Business Support Portal (BSP). The Trend Micro BSP enhances case management and collaboration by guiding customers to product specific solutions, self-help and technical assistance. Customers can access the BSP from the Threat Management Center (TMC) website by looking under Support\u2192Business Support Portal (BSP) or directly by accessing this URL: https:\/\/success.trendmicro.com\/sign-in<\/a>.<\/p>\n

Any Trend Micro TippingPoint customer contact who has created a case in the past two years will be automatically enabled for the new support portal (BSP). You can expect to receive an email from Trend Micro Technical Support within the next 72 hours with the relevant information. If you are unable to locate this email, please check your spam folders. The email will have the subject line of \u201cWelcome to Trend Micro Business Support!\u201d Please note that if you did not receive the email within 72 hours, you can register for the portal directly. You will need to have a current Trend Micro TippingPoint device certificate number (CERT) to complete your registration process. If you need assistance finding your CERT number, you can contact Trend Micro TippingPoint Technical Assistance Center (TAC) for additional information. Customers in Japan will migrate to the BSP in late November.<\/p>\n

Zero-Day Filters<\/strong><\/p>\n

There are four new zero-day filters covering three vendors in this week\u2019s Digital Vaccine (DV) package. A number of existing filters in this week\u2019s DV package were modified to update the filter description, update specific filter deployment recommendation, increase filter accuracy and\/or optimize performance. You can browse the list of published advisories<\/a> and upcoming advisories<\/a> on the Zero Day Initiative<\/a> website.<\/p>\n

Adobe (1)<\/em><\/strong><\/p>\n\n\n\n\n
<\/td>\n\n
    \n
  • 29484: ZDI-CAN-4972: Zero Day Initiative Vulnerability (Adobe Acrobat Reader DC)<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Dell (1)<\/em><\/strong><\/p>\n\n\n\n\n
<\/td>\n\n
    \n
  • 29421: HTTPS: Dell Storage Manager EmWebsiteServlet Directory Traversal Vulnerability (ZDI-17-523)<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Trend Micro (2)<\/em><\/strong><\/p>\n\n\n\n\n
<\/td>\n\n
    \n
  • 29422: HTTPS: Trend Micro OfficeScan Proxy Command Injection Vulnerability (ZDI-17-521, ZDI-17-522)<\/li>\n
  • 29447: HTTP: Trend Micro InterScan Web Security ConfigBackup Download System Backup (ZDI-17-227)<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Missed Last Week\u2019s News?<\/strong><\/p>\n

Catch up on last week\u2019s news in my weekly recap<\/a>.<\/p>\n

http:\/\/feeds.trendmicro.com\/TrendMicroSimplySecurity<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Credit to Author: Elisa Lippincott (TippingPoint Global Product Marketing)| Date: Fri, 01 Sep 2017 13:25:14 +0000<\/strong><\/p>\n

\"\"The only topic I can bring up this week is the devastation in Texas caused by Hurricane Harvey. Many cities have been completely destroyed and to add insult to injury, Harvey moved back to the Gulf of Mexico and made landfall again in Louisiana. Catastrophic flooding has left tens of thousands without their homes and…<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10378,10413],"tags":[10384,714,10415],"class_list":["post-9049","post","type-post","status-publish","format-standard","hentry","category-security","category-trendmicro","tag-network","tag-security","tag-zero-day-initiative"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/9049","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=9049"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/9049\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=9049"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=9049"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=9049"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}