10日 金曜日、仏滅

+ UPDATE: Cisco Application Policy Infrastructure Controller Binary Files Privilege Escalation Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160609-apic

+ UPDATE: Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: June 2016
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160603-ntpd

+ Cisco Aironet 3800 Series Access Point Platforms ARP Request Handling Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160608-aironet
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1419

+ Cisco IP Phone 8800 Series Web Application Buffer Overflow Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160609-ipp
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1421

+ Apache Log4j 2.6.1 released
http://logging.apache.org/log4j/2.x/changes-report.html#a2.6.1

+ OpenSSL undefined pointer arithmetic
https://cxsecurity.com/issue/WLB-2016060056
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177

+ JPEG Standard DoS CPU Resource Exhaustion
https://cxsecurity.com/issue/WLB-2016060055

実践、セキュリティ事故対応
［第13回］悪質化するフィッシングと偽サイト　サイト利用者の保護が最優先
http://itpro.nikkeibp.co.jp/atcl/column/15/110900259/031800013/?ST=security

統計＆調査
［データは語る］2015年度のDDoS攻撃対策市場は前年度比42.2％増―IDC
http://itpro.nikkeibp.co.jp/atcl/news/14/110601779/060900636/?ST=security