TippingPoint Threat Intelligence and Zero-Day Coverage – Week of February 26, 2018
Credit to Author: Elisa Lippincott (TippingPoint Global Product Marketing)| Date: Fri, 02 Mar 2018 16:22:09 +0000
Pwn2Own 2018 is coming up in a couple of weeks and I am excited to see what interesting vulnerabilities will pop up at the contest. I attempted to explain the contest to my mom, and in the simplest terms, I told her that Pwn2Own is a contest where contestants are rewarded for breaking something. It’s not as basic as me beating up a printer with a baseball bat – which I have done, by the way, paying homage to the 1999 movie Office Space.
It’s about breaking something, in this case, finding vulnerabilities in software, with the ultimate goal of making the software better.
Attackers are always adapting their ways of exploiting vulnerabilities and the good guys out there are adapting with them to make sure they’re not successful. At last year’s event, we saw the first virtual machine escapes in contest history. For this year’s contest, virtualization targets are on the list and we welcome VMWare as a sponsor. Microsoft isn’t only a target in the enterprise application category, they have joined us as our partner in this year’s contest.
For more information on the upcoming contest, complete rules, and how to enter the contest, visit https://www.zerodayinitiative.com/blog/2018/1/25/pwn2own-returns-for-2018-partners-with-microsoft-and-sponsored-by-vmware.
Registration for the contest participation closes at 5pm Pacific Time on March 5, 2018. For the latest updates, follow the Zero Day Initiative on Twitter at @thezdi.
Zero-Day Filters
There are 21 new zero-day filters covering five vendors in this week’s Digital Vaccine (DV) package. A number of existing filters in this week’s DV package were modified to update the filter description, update specific filter deployment recommendation, increase filter accuracy and/or optimize performance. You can browse the list of published advisories and upcoming advisories on the Zero Day Initiative website. You can also follow the Zero Day Initiative on Twitter @thezdi and on their blog.
Adobe (13)
| |
Foxit (2)
| |
OMRON (3)
| |
SAP (1)
| |
WECON (2)
| |
Missed Last Week’s News?
Catch up on last week’s news in my weekly recap.