26日 木曜日、友引

+ RHSA-2015:0265 Critical: firefox security update
https://rhn.redhat.com/errata/RHSA-2015-0265.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0822
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0827
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0831
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0836

+ UPDATE: Cisco IOS Software and IOS XE Software Internet Key Exchange Version 2 Denial of Service Vulnerabilities
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-ikev2

+ UPDATE: Cisco IOS Software and IOS XE Software TCP Packet Memory Leak Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-tcpleak

+ UPDATE: Cisco IOS Software and IOS XE Software mDNS Gateway Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-mdns

+ UPDATE: Multiple Vulnerabilities in Cisco IOS Software and IOS XE Software Autonomic Networking Infrastructure
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-ani

+ Multiple Vulnerabilities in Cisco IOS Software Common Industrial Protocol
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-cip
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0647
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0648
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0649

+ Cisco IOS Software Virtual Routing and Forwarding ICMP Queue Wedge Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-wedge
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0638

+ Multiple Vulnerabilities in Cisco IOS XE Software for Cisco ASR 1000 Series, Cisco ISR 4400 Series, and Cisco Cloud Services 1000v Series Routers
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-iosxe
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0640
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0644
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0641
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0645
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0639

+ Multiple Vulnerabilities in Cisco IOS Software Common Industrial Protocol
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-cip
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0647
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0648
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0649

+ SA63563 Linux Kernel sendto / recvfrom Memory Disclosure and Privilege Escalation Vulnerabilities
http://secunia.com/advisories/63563/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2686

+ SA63394 Google Android Multiple Vulnerabilities
http://secunia.com/advisories/63394/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7912
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7913
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7914

+ REMOTE: Adobe Flash Player Arbitrary Code Execution
http://www.exploit-db.com/exploits/36491/

+ Microsoft Windows Local WebDAV NTLM Reflection Privilege Escalation
http://cxsecurity.com/issue/WLB-2015030176

Vulnerabilities in Citrix Command Center Could Result in Credential Disclosure and Host Compromise
http://support.citrix.com/article/CTX200584

Active Directoryが危ない！標的型攻撃から守れ
第4回　イベントログを精査、攻撃の痕跡を見つける
http://itpro.nikkeibp.co.jp/atcl/column/15/031700048/031700004/?ST=security

着実に忍び寄るBadUSBの脅威、「数秒でPC乗っ取り可能」の怖さにおののいた
http://itpro.nikkeibp.co.jp/atcl/watcher/14/334361/032400225/?ST=security

トレンドマイクロがOffice 365向け新サービス発表、端末OSを問わず脅威検知
http://itpro.nikkeibp.co.jp/atcl/news/15/032501077/?ST=security

チェック・ポイント、文書ファイルの“無害化”転送機能を追加
http://itpro.nikkeibp.co.jp/atcl/news/15/032501073/?ST=security