TippingPoint Threat Intelligence and Zero-Day Coverage – Week of January 9, 2017

A lot can happen in a decade. I read an article earlier this week about Apple celebrating the 10^th anniversary of its very first iPhone. I started thinking about what was going on in the TippingPoint world 10 years ago and the first thing that came to mind was our Pwn2Own contest. In 2007, the Zero Day Initiative held the first annual Pwn2Own contest. Back then, the focus was on Apple, but not the iPhone. The focus was on laptops and Apple’s Mac OS X.

It’s been interesting to see the evolution of the Pwn2Own – the focus has adapted as new technologies emerged and now, there’s even a separate Pwn2Own dedicated to mobile phones. This year, we’ll be celebrating the 10^th anniversary of Pwn2Own. Details will be published soon on the Trend Micro Simply Security blog. In the meantime, take a look at the ZDI 2016 Retrospective.

Next-Generation Intrusion Prevention at Speeds up to 100Gbps

Earlier this week, we announced the industry’s first 100Gbps standalone next-generation intrusion prevention system: the TippingPoint 7600NX. This new addition to the Trend Micro TippingPoint family is specifically designed for data centers and enterprises with high traffic environments who need real-time, inline protection that can keep up with their evolving performance requirements. You can learn more here.

Microsoft Patch Tuesday Update

This week’s Digital Vaccine (DV) package includes coverage for the Microsoft Security Bulletins released on or before January 10, 2017. This month’s Patch Tuesday covered three CVEs with four update bulletins – one of them rated critical. The following table maps Digital Vaccine filters to the Microsoft Security Bulletins. You can get more detailed information on this month’s Microsoft Security Bulletins from Dustin Childs’ January 2017 Security Update Review:

Zero Day Initiative Team Members Speaking at REcon Brussels 2017

RECon is a computer security conference with a focus on reverse engineering and advanced exploitation techniques. The conference will be held for the first time in Brussels, Belgium. It offers a single track of presentations over the span of three days with a focus on reverse engineering and advanced exploitation techniques. The Zero Day Initiative will be represented with two speaking slots:

For more information on the conference, visit https://recon.cx/2017/brussels/.

Zero-Day Filters

There are 27 new zero-day filters covering five vendors in this week’s Digital Vaccine (DV) package. A number of existing filters in this week’s DV package were modified to update the filter description, update specific filter deployment recommendation, increase filter accuracy and/or optimize performance. You can browse the list of published advisories and upcoming advisories on the Zero Day Initiative website.

Adobe (2)

Advantech (15)

Apple (1)

Hewlett Packard Enterprise (1)

Trend Micro (8)

Missed Last Week’s News?

Catch up on last week’s news in my weekly recap.

http://feeds.trendmicro.com/TrendMicroSimplySecurity