6日 水曜日、先勝

+ RHSA-2016:0001 Important: thunderbird security update
https://rhn.redhat.com/errata/RHSA-2016-0001.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7201
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7205
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7212
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7213
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7214

+ UPDATE: Cisco Jabber STARTTLS Downgrade Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151224-jab

+ UPDATE: Vulnerability in Java Deserialization Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-java-deserialization

+ UPDATE: Multiple Vulnerabilities in Cisco Unified Customer Voice Portal Software
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp

+ Cisco Unified Communications Manager SQL Injection Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160105-cucm
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6433

+ UPDATE: Cisco ASA Management Interface XML Parser Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151123-asa

+ Cisco Prime Infrastructure Frame Injection Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160105-pi
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6434

JVNDB-2016-000001 ＤＸライブラリにおけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000001.html

Networkキーワード
2要素認証とは
http://itpro.nikkeibp.co.jp/atcl/keyword/14/260922/010400045/?ST=security

FinTechの旗手たち
「バズワード化を危惧、本当に消費者第一か？」、Zaimの閑歳社長が語る
http://itpro.nikkeibp.co.jp/atcl/column/15/121000283/121000007/?ST=security

統計＆調査
［データは語る］身代金を要求するランサムウエアの相談件数が再び増加、2015年12月には16件に―IPA
http://itpro.nikkeibp.co.jp/atcl/news/14/110601779/010500450/?ST=security

JVNVU#98928449 古野電気製 Voyage Data Recorder (VDR) にユーザ入力値を適切に検証しない脆弱性
http://jvn.jp/vu/JVNVU98928449/